This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: DYFT1ofjYRmXRUaGNbxFsL2rFuYGdo0tf6mtGLKGltQ=
Subject key identifier: 20:CB:6D:04:29:72:06:9B:3F:F8:55:FD:37:13:11:E1:61:8B:B8:0E
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019B3D235B7E0984AD051961E645A43DD7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1792
Signing time: Sat 20 Dec 2025 19:01:25 +0000
Manifest this update: Sat 20 Dec 2025 19:01:25 +0000
Manifest next update: Sun 21 Dec 2025 19:01:25 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 13fsdNbOXAchalOwmEbNfHfqCJc.roa (hash: 621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: PG1fOEZF6iY9+FAcH+j0Mb+EgLEimaEG6owKzy48kCM=)
4: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=)
5: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: lHui1rAjQ_Q4r1wxIGuetVb48BI.roa (hash: RlNAJsl93PkyN71SoGN3JUD37RzQ/2tniVsKOLkpsMU=)
10: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:23:5b:7e:09:84:ad:05:19:61:e6:45:a4:3d:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Dec 20 19:01:25 2025 GMT
Not After : Dec 21 19:01:25 2025 GMT
Subject: CN=20cb6d042972069b3ff855fd371311e1618bb80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:25:73:ff:7b:41:c5:41:f7:fc:99:83:3a:
1c:b7:a0:83:f2:c1:26:8a:06:0a:b7:d9:5c:11:12:
ff:17:cf:9b:3c:c9:82:0d:7e:1f:6c:4e:ec:f8:1b:
f5:3b:63:cb:2d:f1:28:19:6f:37:c5:e6:43:47:0e:
8c:74:09:26:43:34:a9:ec:ba:ed:16:c8:ae:82:2c:
77:e9:6e:36:8b:4d:6a:a5:f9:b2:4d:92:ff:3b:07:
a6:17:9c:b7:d4:40:92:2d:69:31:bc:bf:1d:5f:16:
f0:06:61:91:50:f5:bf:02:ea:c5:01:34:24:73:ae:
ff:87:f0:37:c7:bb:bc:72:94:57:df:78:a5:85:7f:
9f:57:07:63:92:82:81:39:27:96:f9:8d:17:9d:ed:
53:f2:25:25:47:76:35:b3:ba:3e:2f:7a:fb:7b:31:
ac:11:dd:a6:19:8d:3b:cb:cf:07:e6:3f:2b:fe:62:
24:c8:8c:ca:60:91:be:8f:bb:96:45:52:75:89:63:
3d:ad:6d:c9:4e:45:af:da:11:c5:07:58:52:8b:c6:
bc:8e:28:5a:26:f2:bf:41:8e:d3:4e:29:39:21:19:
be:93:b3:ba:5a:9e:1a:e6:14:e9:f7:8e:9f:82:45:
ee:71:50:0d:cd:66:f8:9e:cc:a0:da:1e:4b:be:75:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:6D:04:29:72:06:9B:3F:F8:55:FD:37:13:11:E1:61:8B:B8:0E
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9c:40:67:e1:2e:52:1e:b5:57:0a:35:e3:e3:25:8a:dd:48:
53:3e:6e:c9:8d:ee:32:c4:92:7e:fe:ad:19:11:62:2d:c2:81:
dc:c7:01:e2:6e:c8:56:5b:6c:2f:a7:d8:61:16:07:36:de:a7:
f3:22:30:8c:e6:06:3f:b2:99:db:99:7f:83:f3:9d:2b:2c:67:
b3:e7:2a:40:b3:c5:6a:e2:e4:bb:6e:7f:a4:af:a9:e5:b5:19:
8d:fc:ab:ec:89:6b:51:1e:dd:b2:62:8c:e6:bd:02:91:4a:19:
b1:4a:8d:59:af:d8:be:4c:ad:75:b3:98:35:d6:4c:2d:00:72:
e3:0a:15:df:a7:bc:ab:16:b0:80:68:d3:0c:f0:5f:cd:e5:46:
8f:6c:21:01:b7:8b:d0:41:9a:6b:d5:68:0d:c5:64:4a:27:30:
e3:c0:b5:24:24:cb:2f:e6:67:ff:bb:76:f6:75:65:fc:32:ab:
24:b5:8e:6b:8c:67:33:2d:02:9c:9d:29:8a:16:c2:3f:53:8c:
c4:17:0d:c1:7f:12:ff:89:d5:cd:08:23:13:0f:1e:13:2f:eb:
7b:0b:12:6d:2b:5f:97:8d:49:c7:01:d1:14:9b:8c:66:b6:5a:
21:a9:9c:00:8a:ce:6b:da:f1:36:12:f1:9e:7b:dd:fe:6a:57:
90:8b:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:10:56 2025 by rpki-client