This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: KH/Q+sij/Gt92G9TZY2Jdd3dsXnxtpPejHnmYcSpr1Y=
Subject key identifier: 88:82:B5:7F:4B:19:77:46:6E:CE:68:A2:A3:95:08:B8:2A:A0:4B:AA
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019B3BD8F19EE758A69D64FD445085A867B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 17B6
Signing time: Sat 20 Dec 2025 13:00:31 +0000
Manifest this update: Sat 20 Dec 2025 13:00:31 +0000
Manifest next update: Sun 21 Dec 2025 13:00:31 +0000
Files and hashes: 1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: +1TTrM1+gLGNWGC5Jsh1JLoVEkPoYyEZsJDUaGy3NGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d8:f1:9e:e7:58:a6:9d:64:fd:44:50:85:a8:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Dec 20 13:00:31 2025 GMT
Not After : Dec 21 13:00:31 2025 GMT
Subject: CN=8882b57f4b1977466ece68a2a39508b82aa04baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8a:68:49:fa:8f:48:34:59:dd:0e:30:6a:cb:
1a:7f:70:e0:07:75:89:c2:a9:e6:7e:da:bc:5f:55:
f9:6c:41:97:67:d0:05:ff:91:a8:51:50:35:ee:1e:
59:b6:78:fc:80:5c:df:5b:04:53:ab:cf:64:6d:19:
4e:3a:14:37:8e:dd:f4:9e:3b:ec:7a:c7:48:dd:6e:
0d:cd:e2:a6:61:2c:68:4c:05:df:d7:b6:fa:c1:8c:
fa:3d:4f:02:e1:52:14:0e:3e:9d:59:8e:fa:e4:0d:
74:ac:0c:87:ee:31:f6:8a:95:85:c8:9d:e4:e9:fd:
35:18:a8:bb:5d:a5:f2:69:2d:50:e2:5f:cf:8a:cf:
f9:a1:06:2f:b4:87:af:b1:bc:99:0e:78:e7:cd:c6:
e0:d1:ce:72:f0:16:a7:80:78:bf:00:02:34:e8:e5:
56:6e:e3:55:26:17:b5:a2:c8:aa:87:e9:24:1b:fc:
5d:ae:19:cc:14:d0:4a:e5:29:39:08:e8:3a:b4:3c:
db:9c:6b:d1:4c:91:ed:7a:73:ca:5c:0d:c8:dc:52:
a0:ee:cb:56:9d:8b:b2:62:f2:31:b1:8a:ae:f5:83:
ce:3e:72:00:1f:39:6c:fd:5c:b3:06:41:1d:f4:ba:
d7:e1:22:a8:c8:b7:37:ec:53:f5:0b:3d:85:97:f4:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:B5:7F:4B:19:77:46:6E:CE:68:A2:A3:95:08:B8:2A:A0:4B:AA
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f1:69:77:8a:ad:49:fa:e6:26:0e:c9:2a:62:75:8e:df:ce:
ee:7a:61:09:41:d0:e5:8c:16:01:65:46:62:01:a8:63:d1:83:
98:24:67:39:70:58:cb:22:4a:da:cc:94:c2:1e:1f:c5:1d:da:
7e:8a:da:89:e3:8e:1f:c2:f4:9f:d3:49:de:7d:8c:41:56:81:
0b:49:6b:b7:b3:80:cd:54:a0:a0:24:c0:03:67:97:65:22:f6:
0c:8a:07:7c:07:46:47:a9:0e:92:4a:e0:32:9b:54:be:61:c4:
c0:94:bf:57:ef:c4:5c:42:6a:bf:ca:50:b6:1b:13:6d:63:62:
de:4f:43:59:69:3c:d3:98:53:f4:67:7d:c4:25:e8:00:ed:17:
90:08:f1:43:33:04:ac:e3:bc:a1:33:68:2d:17:43:64:24:e7:
bc:6f:6b:be:3e:4c:d5:c0:ab:91:79:d4:f6:21:09:fe:94:cd:
2d:19:9d:99:c5:bc:f1:40:31:59:89:ca:99:68:47:a0:df:50:
70:c4:42:73:3d:c4:b2:ec:9c:78:21:e8:e2:a3:bf:d4:6e:3f:
b3:52:20:60:d1:dd:8e:c1:32:aa:75:11:78:d7:f3:91:23:45:
41:8f:0c:74:f4:bd:62:89:78:6c:ef:32:37:48:3a:29:48:9f:
bd:ab:01:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72PGe51imnWT9RFCFqGe3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjUxMjIwMTMwMDMxWhcNMjUxMjIxMTMwMDMxWjAzMTEwLwYDVQQD
Eyg4ODgyYjU3ZjRiMTk3NzQ2NmVjZTY4YTJhMzk1MDhiODJhYTA0YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YpoSfqPSDRZ3Q4wassaf3DgB3WJ
wqnmftq8X1X5bEGXZ9AF/5GoUVA17h5Ztnj8gFzfWwRTq89kbRlOOhQ3jt30njvs
esdI3W4NzeKmYSxoTAXf17b6wYz6PU8C4VIUDj6dWY765A10rAyH7jH2ipWFyJ3k
6f01GKi7XaXyaS1Q4l/Pis/5oQYvtIevsbyZDnjnzcbg0c5y8BangHi/AAI06OVW
buNVJhe1osiqh+kkG/xdrhnMFNBK5Sk5COg6tDzbnGvRTJHtenPKXA3I3FKg7stW
nYuyYvIxsYqu9YPOPnIAHzls/VyzBkEd9LrX4SKoyLc37FP1Cz2Fl/RrZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiCtX9LGXdGbs5ooqOVCLgqoEuqMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvFpd4qt
SfrmJg7JKmJ1jt/O7nphCUHQ5YwWAWVGYgGoY9GDmCRnOXBYyyJK2syUwh4fxR3a
foraieOOH8L0n9NJ3n2MQVaBC0lrt7OAzVSgoCTAA2eXZSL2DIoHfAdGR6kOkkrg
MptUvmHEwJS/V+/EXEJqv8pQthsTbWNi3k9DWWk805hT9Gd9xCXoAO0XkAjxQzME
rOO8oTNoLRdDZCTnvG9rvj5M1cCrkXnU9iEJ/pTNLRmdmcW88UAxWYnKmWhHoN9Q
cMRCcz3EsuyceCHo4qO/1G4/s1IgYNHdjsEyqnUReNfzkSNFQY8MdPS9Yol4bO8y
N0g6KUifvasB0g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:37:48 2025 by rpki-client