This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: Z+3VAAQFw0O0jN3cPanV29ctOFLopmJA6WyxkCFiXSw=
Subject key identifier: 27:56:E3:E5:AF:05:D3:D7:2D:B6:A7:EF:CA:6F:0D:6F:6C:89:0A:A5
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019B6D33016420CC63B0F7E26989BF1C9C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0C9D
Signing time: Tue 30 Dec 2025 03:00:17 +0000
Manifest this update: Tue 30 Dec 2025 03:00:17 +0000
Manifest next update: Wed 31 Dec 2025 03:00:17 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: EJkXu3m7r4+wz+FzLPyhOkq5HcBE1hAwyZfvrvtd0qY=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:33:01:64:20:cc:63:b0:f7:e2:69:89:bf:1c:9c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Dec 30 03:00:17 2025 GMT
Not After : Dec 31 03:00:17 2025 GMT
Subject: CN=2756e3e5af05d3d72db6a7efca6f0d6f6c890aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:8a:12:80:10:2a:90:d0:30:19:40:47:55:
10:83:ba:c1:39:0f:86:87:12:a8:60:87:85:1d:73:
51:73:4b:4b:f2:f8:85:a6:29:73:89:56:82:a4:f9:
4c:04:a2:97:65:08:1d:1c:f3:0c:cb:d5:a3:98:18:
b5:c9:a5:48:01:d9:97:5f:e1:0c:fa:2a:77:ed:6f:
ec:bf:51:89:04:4c:39:4a:17:df:70:5a:31:f8:61:
2f:a6:d5:de:17:44:fb:6a:6b:50:50:62:1b:5c:05:
48:f5:f8:06:d4:49:5f:54:1f:f1:ba:16:0e:a7:44:
c6:8b:ba:d1:0a:09:54:d5:a3:8a:0c:07:0c:1a:d7:
c0:f3:8e:a4:d2:ed:2b:20:9f:70:30:88:35:91:44:
b2:b4:c6:14:55:6c:c4:ad:da:96:a5:db:dd:45:f4:
bb:f8:45:58:99:93:71:af:10:70:25:c7:53:48:0a:
1a:64:6d:f4:21:d4:6d:e8:11:43:47:ba:ce:89:a2:
32:31:fc:99:72:e5:56:9c:67:63:6b:1e:4f:1e:64:
21:30:dd:cd:1c:4c:ac:40:19:03:16:fa:ca:57:2f:
9a:f6:69:9b:40:81:ce:f4:50:92:f7:8e:ad:43:93:
fc:59:5f:af:45:dd:1e:6a:6e:5a:d2:a8:36:22:3d:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:E3:E5:AF:05:D3:D7:2D:B6:A7:EF:CA:6F:0D:6F:6C:89:0A:A5
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:f5:e8:ce:ec:64:47:92:f5:7b:cb:2d:90:f4:ad:65:84:
02:ac:09:d7:92:c6:85:ec:4e:77:20:b4:1a:cf:7d:72:fb:63:
c1:c4:68:06:35:91:d2:d9:d7:81:b1:72:78:1b:a2:f1:95:af:
28:e6:20:81:87:f3:2a:f5:f9:1d:88:f2:40:de:af:ab:3e:9b:
a1:b7:7c:5f:bc:64:13:39:39:96:28:05:fc:42:cd:2a:15:97:
35:bd:5b:fc:16:1e:da:66:5f:fc:6b:be:83:ac:07:96:9b:d5:
9f:65:64:8c:23:83:67:1b:80:70:5d:ba:f3:53:cb:b9:bf:29:
f6:d4:37:fc:ba:82:97:7b:ab:b1:8f:55:25:61:3b:2a:b6:4a:
e8:e6:7b:ea:d1:6d:82:da:8f:34:59:87:5f:7a:15:86:98:cb:
bd:4e:29:0c:21:e2:4e:95:02:f8:a8:6a:2a:a5:dc:38:24:e4:
43:5f:c0:8e:26:36:ab:dd:76:a1:a7:36:2b:8b:a6:64:c4:74:
cd:e9:5f:76:ba:e8:e9:5c:71:06:a2:36:7f:20:79:bd:5b:ce:
6f:b5:ae:32:15:3c:60:58:b6:7b:04:6e:b3:1d:4c:a8:e5:48:
67:a6:74:0a:58:29:b7:d7:0e:53:dc:88:36:d6:61:5e:30:ba:
29:9b:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:15:29 2025 by rpki-client