This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier: knL+CXIKtI3GEcuov40tpc0bIgXDYKXyimjs/7xESek=
Subject key identifier: AF:8D:05:96:71:10:BC:1F:05:9D:04:5A:69:79:BD:62:82:03:F4:C7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019B3BD98171D6205513B57360D2B7C6ABF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number: 178F
Signing time: Sat 20 Dec 2025 13:01:08 +0000
Manifest this update: Sat 20 Dec 2025 13:01:08 +0000
Manifest next update: Sun 21 Dec 2025 13:01:08 +0000
Files and hashes: 1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
3: LaeMmliZsWY4K4LpiPm1IByzCIQ.roa (hash: XWrRgKgmyBqRbAmBeJXkydMYUgvYCHe6m/cckwuOv8I=)
4: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
5: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: wnrppUHndeTyqXF7F/zU/sM3VYYsMRCuWPkLQfSO7d4=)
6: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
7: jOYswe4qhStabsuqsnSP3SZqcrs.roa (hash: BMGec4hMG/rYQr+01Ths87WyLIFcZ15QkJmgYOd/Vd8=)
8: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=)
9: or3MtyCWwwRniPQO0t7adUDYHwM.roa (hash: KAXtPOwDsCLtFdabZOYLs9SwVKgF5nRupM4RcQhCH2s=)
10: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=)
11: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:81:71:d6:20:55:13:b5:73:60:d2:b7:c6:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Dec 20 13:01:08 2025 GMT
Not After : Dec 21 13:01:08 2025 GMT
Subject: CN=af8d05967110bc1f059d045a6979bd628203f4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:ca:d1:3e:77:c9:f0:03:63:6d:37:c5:6e:
69:63:c3:df:74:0c:ae:a0:3e:a9:14:c1:7b:e2:57:
c8:ed:5a:0e:51:58:9e:a3:be:c0:c6:2f:09:33:63:
83:c0:d8:db:a5:49:64:81:c6:18:7a:0f:cf:7b:c4:
48:6e:ac:e1:cb:e3:ad:73:c0:7c:cc:63:1c:d1:49:
b8:e0:2d:96:a7:9f:60:36:a4:09:b9:6a:01:75:6b:
39:f7:17:2d:ce:59:ac:3b:0c:a3:4c:7d:7b:87:3d:
a7:07:b7:19:79:49:1b:ed:e8:c3:34:f0:51:e9:31:
6f:d5:84:f5:c2:34:cb:35:c8:8c:6d:51:b7:65:18:
5d:5a:9d:c8:83:57:d0:6a:af:02:28:72:c0:22:5a:
8b:be:56:5e:63:c7:a1:3b:65:89:40:fc:ce:6b:46:
5b:a6:20:92:49:1a:c4:2d:95:04:12:e1:4e:d0:bb:
ae:b5:c2:32:ec:23:b1:33:97:b9:69:b5:56:71:f7:
98:3b:01:6b:79:e9:98:37:ea:9f:ac:55:0d:92:b6:
b6:d3:ab:7f:ae:70:70:3d:1a:a5:0c:ef:28:4b:45:
5c:94:9c:8d:5e:50:a6:d5:c4:42:97:fc:2b:77:33:
26:bf:2d:43:e5:82:1d:fe:57:7f:27:8a:1b:f8:ec:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:05:96:71:10:BC:1F:05:9D:04:5A:69:79:BD:62:82:03:F4:C7
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0b:ee:cb:4c:1e:80:7a:aa:a8:dd:b1:b5:49:32:b2:79:3b:
79:98:9d:de:5b:87:83:70:db:8a:9a:41:86:bb:c6:ab:17:49:
55:d5:8a:0f:13:5a:f8:bb:01:25:12:ec:2d:ca:22:32:20:03:
cb:25:b0:3a:22:d5:65:1a:41:70:80:ef:ba:02:7d:89:81:e4:
95:6a:5e:0c:e3:4d:e5:89:f6:b2:20:82:49:9a:23:83:81:37:
12:34:22:d1:3a:ce:7f:2a:b9:8b:e2:a5:35:06:22:7a:3f:13:
3e:95:9c:c8:da:5e:38:42:d8:37:5c:12:cf:0d:49:ca:91:2b:
7e:11:07:18:ac:5b:6b:9f:a8:cd:e9:56:a8:7c:fb:12:23:cb:
98:c0:55:74:95:7a:d9:6a:e9:cf:11:a1:ff:7b:04:b0:dd:2d:
6c:4d:9c:39:df:2b:14:6f:21:14:54:47:0c:bc:ac:09:b1:e2:
bb:64:b7:c6:f1:7b:34:7a:7f:98:2b:0f:25:6e:e6:d6:1f:1a:
23:0b:70:ed:4a:33:c4:61:dd:c3:4a:48:4e:0d:9a:e6:c7:a1:
f0:1d:81:67:0d:a4:b0:85:65:7b:93:11:df:54:bf:83:8c:86:
31:cb:03:90:93:03:cc:d2:4d:c7:65:9e:03:c1:e7:6f:25:69:
52:49:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:42 2025 by rpki-client