This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File: 4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier: Z73jDqhcxv0DGgVZTQKlHQx1GFG6CJiynaWDyLgSpgI=
Subject key identifier: 86:76:8D:11:D6:16:DE:19:81:04:54:1A:F6:E0:89:C9:0F:DA:71:9A
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 019B397D0454F5E3C1081539A124C0DE9B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number: 0C76
Signing time: Sat 20 Dec 2025 02:00:52 +0000
Manifest this update: Sat 20 Dec 2025 02:00:52 +0000
Manifest next update: Sun 21 Dec 2025 02:00:52 +0000
Files and hashes: 1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: P0TGI6loXQVHCJAVVbJ7ko9s4bH52l6vbh4O+96BabI=)
2: IQROvr2vBd7jckj4JxxLTVqcojM.roa (hash: ly/jdFkHJ3s46OFRx+V8sZxwJQeghZczRi1B0/DdTGw=)
3: XGKVKtjzrhIqJnitbSPu8PfZ3U0.roa (hash: DZhN7yGkT4Q124D/acmARQUP1NDYURt0Aavi3iNxtYY=)
4: eSKsGHyxbWYwro-1UQoDIzgXZL0.roa (hash: Z+2EIYf0yK8lCQZu34hQ6FGPR1zzM9h/hZgRWuizAuo=)
5: uwdEf76PatEiBG1-AwvVJD3ZSLI.roa (hash: L5a+PChE20DmyqcNgzL4srrFg9fTUoR13MIkAL4T2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:7d:04:54:f5:e3:c1:08:15:39:a1:24:c0:de:9b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Dec 20 02:00:52 2025 GMT
Not After : Dec 21 02:00:52 2025 GMT
Subject: CN=86768d11d616de198104541af6e089c90fda719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:33:91:f3:87:5f:f5:cf:0b:b0:ed:a7:ae:
c4:66:18:af:1b:4d:44:ab:47:81:e3:37:b5:98:25:
b4:a1:a2:54:fe:02:be:00:d8:24:05:e9:6f:0c:ca:
49:6c:0f:7e:9e:65:3a:af:98:0b:2e:c7:94:26:de:
96:73:18:38:b1:67:f9:5a:a9:e2:73:02:f8:05:be:
02:13:9c:38:92:33:e4:12:b8:d5:e9:5b:54:f2:9c:
d9:6e:69:95:90:e8:a6:94:5c:b3:48:84:0c:16:df:
d9:7d:32:fb:5a:f0:1b:bf:ed:45:5c:3c:d1:c5:a0:
3f:ca:2b:47:17:2c:c2:8b:81:a4:05:5d:00:81:50:
a5:2e:80:9c:07:6b:7e:43:e0:9c:45:33:75:f8:03:
3e:a1:dd:17:75:d4:01:a8:03:bb:91:db:21:43:01:
5a:76:37:ef:7b:fb:96:a3:6c:44:63:11:2a:0c:9f:
33:42:2d:5f:29:87:d1:04:21:00:2a:c3:ba:cc:4e:
0a:99:a7:e0:b4:72:e2:51:17:60:e4:f9:7a:9c:59:
21:93:f1:70:76:2d:c0:5d:de:a5:4f:79:c2:31:e3:
ad:1e:a8:69:2a:3e:54:f4:1b:4c:d1:c7:a4:be:66:
72:5f:0d:8f:d1:ea:36:8e:64:99:8e:14:fb:09:45:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:8D:11:D6:16:DE:19:81:04:54:1A:F6:E0:89:C9:0F:DA:71:9A
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:88:c6:8c:0b:43:95:b9:27:9a:ff:9b:aa:1f:7f:4d:53:71:
06:4a:87:7b:73:ba:90:10:67:37:cc:2b:57:48:6a:47:41:ca:
33:a9:aa:03:3f:50:93:e7:d2:ed:05:08:16:0d:3f:fe:65:2a:
65:2e:2d:1a:53:c6:79:17:ff:fe:eb:b9:67:1a:7d:03:2b:51:
64:f0:a5:b7:ee:eb:f4:50:99:bd:89:ee:c4:1b:a0:6f:05:5d:
f0:f8:a7:f9:be:a5:3a:21:6d:6a:01:e9:92:07:68:b9:d3:0a:
2a:4d:d4:99:40:61:89:b4:69:15:a5:f3:62:d0:7e:a0:64:ef:
fc:32:0d:11:49:b6:58:e8:ac:9f:9f:04:49:d8:82:ec:3f:b9:
7b:cf:66:e1:ba:ed:ac:96:28:a0:98:3b:66:e6:03:99:c9:44:
48:01:69:80:b8:d4:df:0e:7d:6f:b4:f9:4c:77:ce:1a:43:64:
e2:5a:fa:03:ab:20:2a:04:1f:0e:ec:23:52:94:41:52:0f:53:
e7:58:e7:6a:b3:fb:89:a4:d9:91:95:c2:7a:c0:82:7a:51:b1:
57:51:ea:5c:27:ac:82:90:56:0e:60:2a:98:ee:c6:ff:61:64:
14:f3:99:d9:8b:ac:cd:05:bc:b1:36:69:3b:e5:1a:c9:2d:30:
ea:4d:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:33:11 2025 by rpki-client