This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: VyZhC3LmIU8DrwY4NYh5fkQzxEzP83xZ7WbqI++k9aU=
Subject key identifier: 2D:2B:AC:5F:F4:97:DD:7A:5D:F9:56:C9:07:26:ED:24:B6:46:51:E2
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019B3CEBC1196B954E60EA85DD9DE220D827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0AD6
Signing time: Sat 20 Dec 2025 18:00:41 +0000
Manifest this update: Sat 20 Dec 2025 18:00:41 +0000
Manifest next update: Sun 21 Dec 2025 18:00:41 +0000
Files and hashes: 1: 7nuD8elhlIUxcTnbEPvLA6ZLn5I.roa (hash: 90o2vgvA2ZcVDu1EqRM6Q9Z2wROKMEItuuXmbaFjrpw=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: gGXdL3Cx9nUoC7PmeURGEEWD+Y3BRcdzJv489UINLyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:eb:c1:19:6b:95:4e:60:ea:85:dd:9d:e2:20:d8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Dec 20 18:00:41 2025 GMT
Not After : Dec 21 18:00:41 2025 GMT
Subject: CN=2d2bac5ff497dd7a5df956c90726ed24b64651e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:cc:de:bd:b5:72:b9:2a:0c:56:9b:12:b8:
d8:af:15:3e:ee:4d:6f:f0:66:92:8e:e8:fb:ca:10:
63:0a:fb:a4:87:bc:39:3c:40:58:7a:43:f3:09:90:
e7:e5:37:fe:79:2c:01:9f:a4:e7:97:27:15:36:73:
a1:32:81:d7:e6:47:3d:40:cc:ca:1c:c8:96:f6:91:
c4:55:8c:41:c9:7b:34:2d:54:87:c2:9c:07:09:47:
17:3c:8c:3c:63:a0:41:54:c4:3c:cc:28:a2:14:bc:
06:29:94:2d:21:b8:ad:a4:23:85:56:ae:9d:87:c3:
25:09:5d:bc:d2:c3:96:28:83:d3:b5:02:c3:18:c4:
2e:40:1b:af:5b:00:56:94:2b:bb:ff:ab:e9:0e:2f:
ce:72:fb:bb:7e:9f:62:29:2b:18:01:10:26:75:e1:
b2:13:5d:cf:1a:d9:2f:4a:89:d6:7f:87:7a:3e:55:
3e:2a:19:d9:0a:5e:d2:d4:c6:27:bf:90:60:99:f5:
7d:a4:32:78:7a:00:a9:6c:3a:a9:7a:f7:10:71:1f:
33:6a:e8:54:21:46:89:b3:7c:72:73:0b:e4:72:9a:
57:7f:56:58:e5:33:21:5e:d6:b5:8b:5a:4d:c6:ed:
d7:d5:b5:3d:34:63:9a:2d:e2:ad:9f:86:a3:bb:12:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:AC:5F:F4:97:DD:7A:5D:F9:56:C9:07:26:ED:24:B6:46:51:E2
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1a:5e:50:22:58:8a:c8:e9:22:d3:0b:26:27:85:b3:5e:df:
81:88:3c:bf:2a:b9:d9:e6:1e:24:e6:a3:77:1f:94:0d:a3:e6:
03:5b:ec:a7:a6:52:bf:2f:92:1d:73:9c:99:21:20:9a:55:ca:
7f:83:c7:e2:a0:81:03:c0:64:0c:15:3c:10:b7:aa:07:e6:75:
a2:bd:ae:ca:ae:a5:48:87:3e:16:30:e5:dc:fe:69:10:ef:f6:
46:81:dc:5e:e2:47:c6:02:95:4f:8d:23:ef:f8:e7:53:71:4d:
9f:b4:f9:bf:a9:14:e7:cc:64:ce:61:01:9a:22:33:1f:c4:9c:
2a:11:13:d4:80:3a:90:50:d2:3e:2b:b4:b1:d6:c1:d8:12:ad:
97:d3:2b:51:b3:99:03:85:63:e5:32:81:7b:0f:2d:a8:05:08:
01:b9:f2:1a:b7:ac:ba:1c:1d:c0:ef:bb:4f:8a:6f:d6:f0:51:
c8:21:77:1b:b1:21:3e:a2:dd:04:2e:d4:55:db:8f:72:a5:e7:
4c:e4:3f:84:c5:d2:eb:f7:c9:6b:e7:18:03:9a:cd:a1:74:6a:
da:95:f9:53:81:8b:db:ee:f4:7e:64:05:1c:5f:f7:9b:06:bd:
a0:9a:bc:e7:61:e0:5a:5f:75:31:aa:74:9b:3a:fb:3a:5c:4d:
24:48:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:53 2025 by rpki-client