This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: SchBUR8ITIJv7ubUmLu+HmIiboyR6PGl8vriu7RFJY8=
Subject key identifier: 6D:D9:67:AE:1C:D1:D4:20:03:59:16:5E:CB:69:90:68:59:DA:DB:CA
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019B4437856EB6FEEEF3DCA94CFD0664F40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0E95
Signing time: Mon 22 Dec 2025 04:00:47 +0000
Manifest this update: Mon 22 Dec 2025 04:00:47 +0000
Manifest next update: Tue 23 Dec 2025 04:00:47 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: mlBsqM42SqwsqCutVwTgEFl6cuiLlPpAXAqpBD8ZG8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:37:85:6e:b6:fe:ee:f3:dc:a9:4c:fd:06:64:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Dec 22 04:00:47 2025 GMT
Not After : Dec 23 04:00:47 2025 GMT
Subject: CN=6dd967ae1cd1d4200359165ecb69906859dadbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:11:aa:db:4a:e8:14:c4:78:0e:5d:8a:f7:
44:84:e5:ae:d7:bc:98:80:c2:fa:a8:53:c3:16:60:
f5:f3:c9:ba:fc:90:5c:a8:60:09:47:69:20:3c:a1:
2d:1b:48:07:b4:1a:45:82:00:7e:49:d3:30:6f:6b:
e9:c6:75:57:05:6a:21:e5:01:18:56:72:5a:22:e5:
ba:78:23:54:23:f1:b4:a3:fd:47:8e:05:63:6e:e7:
1f:a9:be:fd:80:83:30:3f:5a:e1:37:6c:b3:77:9a:
68:f4:43:4b:9c:b9:01:06:e2:fd:2f:88:ac:cc:1b:
8b:6d:15:3b:76:ff:e5:3e:b7:d2:cb:f5:f1:ef:a7:
cf:fa:7a:6d:85:5f:35:5a:84:4c:2b:b7:b0:a9:6f:
b6:e2:3f:96:b2:b0:99:fe:db:53:69:9d:6c:61:f4:
a4:2f:0f:6e:c3:5e:4c:f3:cc:32:52:a9:ac:44:9c:
ae:d8:53:58:28:89:4e:e6:be:24:57:a9:98:4b:67:
e7:55:b2:83:9b:34:1d:fb:12:32:66:0f:fc:c4:56:
e0:11:cd:1a:4d:b2:ac:06:b2:e6:d9:bc:1d:44:df:
2d:e3:34:7c:0e:69:36:91:be:02:47:e9:93:39:37:
34:d7:a4:71:bf:1a:f0:43:30:aa:d9:6e:8e:af:dd:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:67:AE:1C:D1:D4:20:03:59:16:5E:CB:69:90:68:59:DA:DB:CA
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bc:aa:e0:c7:f6:0b:7b:3a:7d:d9:1a:06:6e:84:55:d7:77:
bc:ed:cc:11:7a:a1:28:bc:06:ee:ae:a8:d5:eb:d7:91:56:1a:
3a:ce:24:a9:cb:ee:d2:94:c5:b0:e1:aa:33:bf:74:19:02:47:
03:76:a4:f7:46:52:08:e5:bb:67:b3:7a:76:8b:66:87:d8:03:
08:f5:f0:19:e0:98:3c:13:91:33:fd:65:3f:d7:ec:cb:bd:a4:
03:c6:26:d2:7c:4e:9f:54:40:cc:92:be:0b:83:ea:a6:ce:43:
f8:b8:a0:bc:8c:e4:f1:c3:ae:94:53:fc:be:d7:c5:bf:48:09:
c5:03:bb:3d:df:67:92:64:01:dd:61:86:d2:c3:51:ca:1d:76:
7b:da:67:08:e4:2e:87:5d:5f:b9:0f:62:11:11:44:f7:26:ff:
a2:30:eb:bb:d6:b3:2e:15:db:87:69:93:83:ad:21:58:8b:e8:
b7:6b:0a:4e:13:11:02:7c:3b:4d:73:86:ab:db:2a:57:79:b9:
24:8b:3d:d6:16:c6:ee:e5:1c:eb:13:f4:31:a1:a7:65:81:de:
79:70:73:3f:98:0f:2d:29:62:7a:04:1c:0e:c6:3f:33:15:41:
93:a0:d9:f7:1f:59:60:78:dd:1c:08:e2:06:61:ae:5c:3e:c7:
fa:2a:e5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEN4Vutv7u89ypTP0GZPQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz
NmNiYzYwHhcNMjUxMjIyMDQwMDQ3WhcNMjUxMjIzMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZGQ5NjdhZTFjZDFkNDIwMDM1OTE2NWVjYjY5OTA2ODU5ZGFkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuMRqttK6BTEeA5divdEhOWu17yY
gML6qFPDFmD188m6/JBcqGAJR2kgPKEtG0gHtBpFggB+SdMwb2vpxnVXBWoh5QEY
VnJaIuW6eCNUI/G0o/1HjgVjbucfqb79gIMwP1rhN2yzd5po9ENLnLkBBuL9L4is
zBuLbRU7dv/lPrfSy/Xx76fP+npthV81WoRMK7ewqW+24j+WsrCZ/ttTaZ1sYfSk
Lw9uw15M88wyUqmsRJyu2FNYKIlO5r4kV6mYS2fnVbKDmzQd+xIyZg/8xFbgEc0a
TbKsBrLm2bwdRN8t4zR8Dmk2kb4CR+mTOTc016RxvxrwQzCq2W6Or92fAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ZZ64c0dQgA1kWXstpkGhZ2tvKMB8GA1UdIwQY
MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt
OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw
LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApryq4Mf2
C3s6fdkaBm6EVdd3vO3MEXqhKLwG7q6o1evXkVYaOs4kqcvu0pTFsOGqM790GQJH
A3ak90ZSCOW7Z7N6dotmh9gDCPXwGeCYPBORM/1lP9fsy72kA8Ym0nxOn1RAzJK+
C4Pqps5D+LigvIzk8cOulFP8vtfFv0gJxQO7Pd9nkmQB3WGG0sNRyh12e9pnCOQu
h11fuQ9iERFE9yb/ojDru9azLhXbh2mTg60hWIvot2sKThMRAnw7TXOGq9sqV3m5
JIs91hbG7uUc6xP0MaGnZYHeeXBzP5gPLSliegQcDsY/MxVBk6DZ9x9ZYHjdHAji
BmGuXD7H+irl3A==
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:07:58 2025 by rpki-client