This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File: VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier: x2NbLpNaifFJ24ChU7qQ8w1WD9LSS72fQ94vKzsfvY0=
Subject key identifier: D7:A6:04:4F:87:40:F9:F2:C4:A9:20:F8:47:2B:90:AC:C2:4E:38:17
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 019B3B34C4829830ECB4C34EC12A1E1B0181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number: 0F2E
Signing time: Sat 20 Dec 2025 10:01:12 +0000
Manifest this update: Sat 20 Dec 2025 10:01:12 +0000
Manifest next update: Sun 21 Dec 2025 10:01:12 +0000
Files and hashes: 1: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (hash: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=)
2: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
3: Ux9674M8NjPfocnrYudKeCUjMbo.roa (hash: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=)
4: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: Qe0iVEplV1E/qBnKkKWzzddkKBRu9jEfYCQq68PaEHI=)
5: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
6: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:34:c4:82:98:30:ec:b4:c3:4e:c1:2a:1e:1b:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Dec 20 10:01:12 2025 GMT
Not After : Dec 21 10:01:12 2025 GMT
Subject: CN=d7a6044f8740f9f2c4a920f8472b90acc24e3817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:35:2d:3f:0f:a1:02:24:f5:02:53:cf:a4:
d6:fd:c5:fe:d6:ed:a3:9e:29:53:b4:e4:f0:5e:91:
76:8d:70:e5:67:72:37:fc:80:f1:ec:9b:5d:06:8f:
bd:db:11:e9:31:dd:94:5c:dd:e5:b1:c1:d0:49:38:
3b:e6:0e:f8:27:41:72:27:27:ef:a3:8c:84:00:20:
8d:a6:4e:45:3e:51:82:cb:16:f3:fb:fc:3d:f6:0b:
8f:0a:6d:0e:d9:cc:b3:aa:c1:36:a8:4a:b7:97:1d:
7e:ed:cf:1a:39:6a:d7:f1:fc:5c:81:4c:09:94:ec:
b3:22:a1:27:49:b1:32:5e:76:15:19:cb:6a:c4:bf:
5e:dc:7c:d7:b9:79:86:33:c0:d5:ed:94:18:85:ba:
ac:0e:47:11:64:37:02:37:ae:b8:73:07:e0:28:c8:
2f:f8:50:1c:af:0c:4b:43:4e:28:71:09:37:cb:2d:
4c:8e:2f:02:ff:37:e2:20:c2:74:61:f2:b6:a4:ee:
90:2f:f0:62:3f:31:b2:5e:c0:7a:db:0b:4d:8f:73:
f7:ef:34:4b:fd:d6:6b:29:b6:e0:29:8a:a1:4d:f5:
3a:ef:34:f9:1e:11:10:36:78:31:ea:cb:0e:9f:7a:
32:58:2d:cc:fe:1f:f1:22:43:55:62:ba:c1:c8:3f:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:04:4F:87:40:F9:F2:C4:A9:20:F8:47:2B:90:AC:C2:4E:38:17
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:19:4a:a1:b8:38:cc:4d:32:4b:08:74:c8:b6:70:d0:88:4e:
ef:48:4b:be:50:ec:8c:ec:20:d5:d5:54:64:6a:3f:91:c0:d7:
90:ac:0c:41:7f:c8:ae:7c:14:5d:1a:f7:e8:a3:dc:3b:28:38:
3e:9c:b7:c6:ae:5b:69:0a:d6:6a:58:10:d2:3c:b6:f3:2a:35:
1e:85:2b:72:4c:d3:b7:31:49:d8:d9:22:ea:21:87:e2:8d:7d:
ef:61:a1:7a:f5:dd:2a:a7:a2:5d:55:4a:67:63:c5:49:44:50:
b5:a4:b1:82:07:e4:c4:26:64:6d:cc:5f:ab:04:0b:71:fd:4b:
ba:47:1f:5e:c0:95:2a:13:c4:d7:41:9b:f4:8c:87:3f:63:8a:
4a:69:3f:01:fd:3c:3b:cc:e5:7d:99:80:60:7b:30:6b:28:7b:
8f:d1:4e:66:cb:32:a3:e2:fe:53:67:9c:39:a8:31:38:dc:ef:
31:d1:3e:6a:fa:05:30:88:d8:45:f6:09:68:9c:de:c2:7d:8c:
c0:5c:16:07:1c:56:86:2f:26:2e:a2:c4:5f:d2:62:d1:07:ba:
0f:f2:1d:9e:d7:35:ac:09:02:a7:32:b7:11:d5:cf:7f:8e:b4:
f8:38:7e:05:42:9f:6a:87:dd:f5:11:5c:6b:59:10:15:06:2b:
86:a9:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:17:41 2025 by rpki-client