This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: Hf+rmHqlyo7x4JYnwlBcbe6vbWzrCWxOxMAMml6B+oE=
Subject key identifier: 8E:6C:F6:68:07:8A:F1:2D:3F:87:FB:80:97:08:2D:29:92:0D:BA:CE
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019B38A26A3FDAD1D373A13AB6EAB06BFBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0D64
Signing time: Fri 19 Dec 2025 22:02:06 +0000
Manifest this update: Fri 19 Dec 2025 22:02:06 +0000
Manifest next update: Sat 20 Dec 2025 22:02:06 +0000
Files and hashes: 1: 2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa (hash: MsldwzQz27lchmlMAHvSH+WOXjpCThCf8Kkip/88G38=)
2: 5yKICj_2gDXyLaLptV_QQPobwBA.roa (hash: ymCwe5qZ4XyCaC4waTVSNvK53llzEbvyfIqHPUqq7zU=)
3: JgoOvXvrswEOgbBkM7mOX2KwPkM.roa (hash: 0lHrFGf5p+iWNP5B3Ka8kAz0C85fbyYK54kTcYnj/rA=)
4: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: F95bQ4k68hF4O1C1+FedzGYyf0qq8oVYo4XGg39pmYM=)
5: Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa (hash: UhT9NHaGPP2E68wfERtie4Og2VNV+Hbwcvvn4QjWbxs=)
6: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=)
7: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
8: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:a2:6a:3f:da:d1:d3:73:a1:3a:b6:ea:b0:6b:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Dec 19 22:02:06 2025 GMT
Not After : Dec 20 22:02:06 2025 GMT
Subject: CN=8e6cf668078af12d3f87fb8097082d29920dbace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:53:0a:4f:60:c3:23:22:ae:27:87:60:02:
9c:29:7c:52:41:a7:44:47:eb:09:28:72:97:72:5f:
af:ad:e0:8b:10:f2:16:49:19:9d:28:6f:57:57:1e:
c2:23:02:24:e5:68:4e:8f:03:97:f0:5f:d6:12:02:
86:20:c7:09:e8:bd:bd:23:73:95:c6:f1:52:d1:d8:
94:88:25:b5:ef:fa:28:cd:90:ee:08:db:ac:75:85:
13:5d:a3:c7:15:a5:34:8e:60:71:5d:27:f9:22:3b:
c8:59:cc:9b:dc:90:30:c7:8b:c8:a0:52:6f:d4:b8:
c3:06:e3:e5:61:0a:dc:c4:ef:83:25:af:98:e6:04:
ca:34:60:45:7c:9f:18:d6:66:0c:92:27:b8:4e:28:
9b:46:93:d0:79:59:1e:29:6f:72:ed:29:65:3c:26:
0e:d6:85:89:f8:fb:f5:e3:3c:ad:5d:7a:4e:94:b7:
97:18:a7:75:ca:b2:e7:85:4e:76:a5:ab:eb:c4:fd:
ce:00:83:42:ad:4a:12:6c:ba:80:95:e5:4a:8e:d3:
da:24:64:f7:03:0d:55:c2:8d:2b:66:75:3b:68:78:
81:7a:32:0a:af:dd:5a:e9:b8:14:b9:a7:2c:30:29:
fa:af:80:a2:c5:eb:3e:f1:d0:70:50:d1:c8:c0:3f:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:F6:68:07:8A:F1:2D:3F:87:FB:80:97:08:2D:29:92:0D:BA:CE
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:31:d4:16:8b:1e:ec:73:cf:c1:cd:24:8c:c1:98:fb:ae:
42:d2:74:dd:46:59:3e:2e:b4:80:f4:6d:32:a4:dc:e0:61:0c:
02:bc:c4:49:94:0d:0d:69:d6:03:ab:01:d3:f3:95:a7:b8:bb:
bb:12:f3:ab:4a:04:38:5c:0e:ed:0f:5e:ab:55:b2:74:f4:69:
0a:89:fa:91:8c:a0:7b:1e:ee:b6:fa:38:5a:5e:75:81:37:a1:
a8:24:9b:87:b6:b0:b4:0e:9c:b1:e7:db:c6:d3:d2:dc:b6:1c:
dc:d6:db:08:c4:9d:7c:0b:10:fc:7d:50:62:5f:8b:eb:ac:94:
c8:23:b2:cf:62:61:e0:fa:19:02:06:76:1b:67:bb:1f:4c:c0:
3a:32:af:9b:14:8a:03:97:8a:d8:56:9c:e7:bf:08:e5:53:07:
be:23:12:33:a2:33:2d:a8:11:1f:0f:9e:6e:bb:fc:cc:f5:05:
44:7c:ab:f2:e8:53:d0:43:c8:7b:68:1e:5e:d9:24:ad:43:c8:
a1:af:d0:1e:c1:27:81:e1:e9:ec:66:87:cc:14:bc:a4:89:92:
35:d7:59:82:3e:7f:9e:c4:59:bb:c3:1c:6b:ee:4e:07:d2:d9:
6f:78:83:c8:9e:ec:e3:3d:14:2d:4f:66:54:8e:94:40:a3:44:
d3:9d:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:54:07 2025 by rpki-client