This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: Qcn9Vo6Xp3Ips4s+lc4rgJKk8u7ngTxdcW+NMstWht0=
Subject key identifier: 34:DE:FC:BE:FA:44:FF:C7:7C:30:A4:0F:31:2E:A3:09:C8:1B:A0:04
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019B39B3AE6FAEFE470C1A913E2D717F1C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 12FB
Signing time: Sat 20 Dec 2025 03:00:35 +0000
Manifest this update: Sat 20 Dec 2025 03:00:35 +0000
Manifest next update: Sun 21 Dec 2025 03:00:35 +0000
Files and hashes: 1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
7: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
8: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
9: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (hash: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=)
10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
11: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
12: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
13: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
14: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
15: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
16: lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa (hash: FYaKqxecYgMTbSZpwvOmlyri4oxlPadKxms2T+56wVY=)
17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: yBSLKGc+2k261NVs64vh2UJwMYnIr6aKdssHFWRsFbQ=)
20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:b3:ae:6f:ae:fe:47:0c:1a:91:3e:2d:71:7f:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Dec 20 03:00:35 2025 GMT
Not After : Dec 21 03:00:35 2025 GMT
Subject: CN=34defcbefa44ffc77c30a40f312ea309c81ba004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:58:76:34:8d:dd:ff:9a:da:09:72:43:a1:
f0:28:ec:cc:d6:27:d0:47:08:99:25:cc:8f:e2:75:
fa:65:ba:ce:c6:20:5f:27:51:cf:e1:02:36:84:cf:
e3:b6:10:fc:53:16:31:c1:e3:49:bc:c7:49:88:d3:
8d:45:8d:7b:8e:c0:ba:fb:12:77:40:a6:fb:ce:96:
5a:ac:85:84:ce:93:93:0f:31:58:b8:55:09:9d:53:
91:d1:5b:84:22:5e:38:9b:f4:c9:a4:0f:6d:c3:c0:
10:aa:74:21:2e:ab:36:aa:30:04:72:34:0b:78:6e:
59:ce:1d:05:79:fe:e1:fb:6e:96:d9:85:fa:89:21:
c4:13:49:d7:10:e8:36:33:5a:78:99:bd:10:17:14:
36:51:8a:ac:af:1c:87:7e:c9:ba:1b:4a:9d:91:a0:
e2:b4:8c:db:f3:6e:99:5d:6c:30:d5:47:0d:c4:ad:
9f:25:52:7a:e6:ec:08:13:74:d1:68:4a:b5:eb:ba:
1b:bd:66:a3:ae:95:54:47:be:61:f0:77:36:69:0d:
99:ae:c7:6d:e7:c3:bb:52:6a:f0:67:62:a6:70:8a:
cb:6b:22:a1:24:84:75:60:51:a9:01:16:bc:05:19:
30:8d:13:11:7c:77:f3:5e:1b:ff:aa:5c:0d:30:0e:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:FC:BE:FA:44:FF:C7:7C:30:A4:0F:31:2E:A3:09:C8:1B:A0:04
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:53:3f:fc:55:f7:d0:72:f5:8d:44:00:e1:2b:90:a7:3b:05:
0c:23:84:4b:ca:31:37:57:82:2f:3f:60:18:ff:0b:6b:ac:a4:
11:6c:92:47:7b:7b:06:ed:66:39:3d:fb:b6:10:f2:33:cb:7e:
c2:b3:03:a7:e2:5c:d6:37:71:0c:99:43:b6:18:33:51:c9:33:
16:d5:f4:0b:eb:8f:7b:63:da:a1:71:f8:db:60:c5:8f:66:5d:
cc:bd:17:92:18:0a:77:68:5a:0c:58:99:63:cb:72:3f:64:e9:
9d:ed:03:69:5c:26:44:a2:f9:9d:54:91:96:e9:6d:80:91:bf:
02:bc:e7:6a:1d:15:cd:27:6e:99:f0:af:f7:cf:ef:2c:c1:71:
7a:ae:60:96:03:e7:0f:44:9f:b6:8c:87:db:47:56:0a:b6:7b:
af:5b:64:63:57:6b:2f:c8:73:12:31:87:b0:d0:ef:0e:ad:22:
87:50:92:24:62:2b:f5:44:fc:04:05:a7:4c:15:21:cf:04:6a:
cc:af:37:ab:61:a0:f2:59:f3:eb:04:7a:c1:17:76:2d:5f:82:
a9:2a:9b:7f:00:f0:66:aa:f0:b9:05:5c:48:1c:43:bb:ef:41:
32:bd:4e:02:2a:ef:05:0a:78:f7:59:90:16:ff:07:bd:2d:3e:
6d:f6:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:55:03 2025 by rpki-client