This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: wkVEZff/Rh57irC5zvM4dMZP1io+khxj+h70ZHMcc8k=
Subject key identifier: EE:49:D4:91:FD:DD:7B:98:4C:03:64:9B:A4:E3:1B:53:93:3B:C8:FE
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019B24ACC623CC34727A8308398292CF8FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 083C
Signing time: Tue 16 Dec 2025 01:01:01 +0000
Manifest this update: Tue 16 Dec 2025 01:01:01 +0000
Manifest next update: Wed 17 Dec 2025 01:01:01 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: uGwAjS3tLKGmP1kaWTi0CJnlnUWyazoLjFZRyuXltUw=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:ac:c6:23:cc:34:72:7a:83:08:39:82:92:cf:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Dec 16 01:01:01 2025 GMT
Not After : Dec 17 01:01:01 2025 GMT
Subject: CN=ee49d491fddd7b984c03649ba4e31b53933bc8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:3c:ad:78:36:56:3d:53:b2:e4:3c:57:5d:
1c:56:65:95:db:33:56:d5:a3:dd:48:e5:8d:54:b2:
6e:6a:b0:d9:3a:cd:d3:2c:f0:97:e0:2d:4a:45:0d:
fc:78:7b:8a:b8:01:31:87:ba:cd:61:80:d9:d0:81:
04:3b:61:b9:c3:d0:45:8e:5d:23:02:a3:d5:a8:2b:
44:bf:ea:7d:70:32:35:bd:d3:ef:b1:c7:ad:66:0d:
be:e9:e7:74:15:6b:7d:fe:fa:f8:d5:b1:85:25:6d:
13:10:9c:46:6d:99:fb:b7:91:db:8e:41:6d:de:71:
29:15:92:3d:ee:c1:74:b5:64:1d:2d:af:03:a9:5b:
ec:50:cc:92:8b:94:56:a7:ad:d7:8c:99:88:ba:04:
c0:23:97:ec:00:14:92:67:40:6b:ad:d2:f3:72:4d:
03:7b:0f:dc:81:2c:dd:87:65:7c:ce:80:a0:22:01:
98:bd:c6:83:73:a1:ae:6f:28:87:43:76:4f:3c:7d:
a0:5a:03:7e:c9:0e:94:f7:57:52:ba:00:2a:0b:0a:
8b:5a:3d:22:b1:c7:bf:41:72:84:da:41:f3:bf:81:
86:44:37:a0:b5:fc:67:af:c2:9a:4a:71:d7:3e:b8:
83:7d:6a:b9:93:e8:3b:8a:c1:29:96:2e:a2:72:97:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:D4:91:FD:DD:7B:98:4C:03:64:9B:A4:E3:1B:53:93:3B:C8:FE
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:48:65:99:ae:2a:61:00:6c:ad:29:5f:8f:42:e4:f8:a5:b8:
a5:1c:02:0f:21:a5:15:10:27:6d:06:17:f6:8e:df:33:37:7a:
01:07:64:34:c7:c2:c0:b6:19:34:b0:cc:bf:f4:ce:de:33:d6:
6b:2d:fd:50:4f:c4:dd:42:f1:59:be:d4:6f:35:9f:fd:ee:c8:
97:17:fb:62:f6:2e:69:5e:92:d8:a2:2a:36:c0:f3:34:96:87:
f2:a0:6d:a0:f0:1b:74:75:51:12:c0:4d:d2:7d:8a:44:4f:cd:
7a:00:b8:f6:d8:80:f9:39:27:7a:b4:8d:f9:4b:5c:a9:f5:cf:
b9:4c:87:41:c2:68:7c:37:6f:75:da:9d:8a:8d:c1:b3:b4:d0:
e2:91:55:d3:01:24:81:3c:ec:b1:f5:37:d9:07:99:b0:ad:00:
b7:c6:1b:33:26:04:b7:5e:ac:50:39:01:0c:0e:e7:fc:b9:bf:
73:ba:b5:10:c5:1f:be:4e:86:33:9d:5d:65:44:6d:a9:fb:ab:
03:92:df:b5:bc:74:7f:ff:61:00:fc:46:ac:6d:3d:86:da:63:
27:6c:84:aa:65:c2:54:3c:cd:c9:c8:43:aa:f7:da:df:62:1b:
22:b8:b2:7f:bd:e3:a3:75:94:28:35:12:fe:81:3a:27:fa:80:
7d:b0:07:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskrMYjzDRyeoMIOYKSz4/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi
MGQ0OGMwHhcNMjUxMjE2MDEwMTAxWhcNMjUxMjE3MDEwMTAxWjAzMTEwLwYDVQQD
EyhlZTQ5ZDQ5MWZkZGQ3Yjk4NGMwMzY0OWJhNGUzMWI1MzkzM2JjOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwU8rXg2Vj1TsuQ8V10cVmWV2zNW
1aPdSOWNVLJuarDZOs3TLPCX4C1KRQ38eHuKuAExh7rNYYDZ0IEEO2G5w9BFjl0j
AqPVqCtEv+p9cDI1vdPvscetZg2+6ed0FWt9/vr41bGFJW0TEJxGbZn7t5HbjkFt
3nEpFZI97sF0tWQdLa8DqVvsUMySi5RWp63XjJmIugTAI5fsABSSZ0BrrdLzck0D
ew/cgSzdh2V8zoCgIgGYvcaDc6GubyiHQ3ZPPH2gWgN+yQ6U91dSugAqCwqLWj0i
sce/QXKE2kHzv4GGRDegtfxnr8KaSnHXPriDfWq5k+g7isEpli6icpduCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5J1JH93XuYTANkm6TjG1OTO8j+MB8GA1UdIwQY
MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt
ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi
LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEhlma4q
YQBsrSlfj0Lk+KW4pRwCDyGlFRAnbQYX9o7fMzd6AQdkNMfCwLYZNLDMv/TO3jPW
ay39UE/E3ULxWb7UbzWf/e7Ilxf7YvYuaV6S2KIqNsDzNJaH8qBtoPAbdHVREsBN
0n2KRE/NegC49tiA+TknerSN+UtcqfXPuUyHQcJofDdvddqdio3Bs7TQ4pFV0wEk
gTzssfU32QeZsK0At8YbMyYEt16sUDkBDA7n/Lm/c7q1EMUfvk6GM51dZURtqfur
A5Lftbx0f/9hAPxGrG09htpjJ2yEqmXCVDzNychDqvfa32IbIriyf73jo3WUKDUS
/oE6J/qAfbAHMA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 06:40:59 2025 by rpki-client