This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: cnj+e7SEOM2xdov02xAQm9b8aSRco1K4KZh70tFZ9zk=
Subject key identifier: C1:71:9C:F2:BA:61:BA:20:01:69:EE:51:D7:9B:2B:4A:7A:22:26:FB
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019B24AC946495E712BDA531435BBB81A50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1769
Signing time: Tue 16 Dec 2025 01:00:48 +0000
Manifest this update: Tue 16 Dec 2025 01:00:48 +0000
Manifest next update: Wed 17 Dec 2025 01:00:48 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: t1hyw4lIMK6n8di6pecP6Dv+jThmYLBmLCQFEigOm5A=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:ac:94:64:95:e7:12:bd:a5:31:43:5b:bb:81:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Dec 16 01:00:48 2025 GMT
Not After : Dec 17 01:00:48 2025 GMT
Subject: CN=c1719cf2ba61ba200169ee51d79b2b4a7a2226fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:4c:7f:66:3e:89:8d:45:df:91:c8:74:c5:
7e:00:43:5d:4c:a4:50:0d:b0:cf:46:e4:34:d8:ac:
ee:4b:55:de:e2:f5:3f:46:21:8c:0f:01:14:6f:dd:
48:6e:05:70:2a:58:fe:04:fa:3f:a2:e7:15:04:61:
1b:c3:ae:3f:ed:5d:2b:09:79:5d:0d:bf:86:fe:c6:
b3:c9:b9:f6:1e:c9:c4:8b:d7:7f:e0:10:65:fb:3e:
ce:39:a2:a4:e9:73:b0:34:7a:b8:87:7c:c2:e4:11:
81:0b:3f:4e:60:26:b8:1d:f3:af:19:63:d5:b5:7a:
d0:33:b6:b7:5d:2a:bb:1d:44:de:bb:5a:98:3a:04:
21:b9:39:c4:bd:40:68:e3:88:0e:a1:5f:74:f6:ce:
9a:92:ca:e6:20:fe:35:bd:bb:68:12:fa:01:c9:2b:
ef:f6:30:cd:4b:24:ed:87:01:27:f0:54:8a:f7:97:
08:66:81:c2:73:0e:6b:68:2b:0d:4f:fe:f1:ef:4a:
08:7b:16:27:05:bf:c5:9b:ac:18:89:a5:0e:34:dc:
5e:91:b0:b5:a7:5f:35:c5:fa:af:63:69:b4:aa:0d:
6a:3a:a0:ec:33:1b:fd:97:38:91:d9:a0:51:7a:05:
b0:86:e0:df:a6:62:df:00:12:52:9d:79:e2:22:49:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:9C:F2:BA:61:BA:20:01:69:EE:51:D7:9B:2B:4A:7A:22:26:FB
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:53:64:6b:e8:ea:0c:48:d8:b1:19:2a:25:b3:87:6e:3b:8f:
ca:5c:48:b1:80:11:6b:5f:3c:ed:cb:4d:74:a9:6d:d4:91:5c:
16:2b:e0:33:00:3e:51:b1:d8:13:af:4d:81:57:9e:46:38:d5:
e8:e8:bc:d6:74:b9:65:4d:e8:d6:e0:46:1b:2d:0d:22:2f:6f:
44:cd:29:59:ae:a8:a3:38:cf:b9:17:2a:8a:31:43:9c:ce:a2:
5a:9e:75:a4:c9:96:bf:1c:07:6f:22:1d:a7:8d:70:5d:51:76:
55:95:f5:1d:bc:78:a1:50:9a:f3:6d:94:a5:4a:34:9e:86:cc:
d5:2d:e5:77:20:f4:13:67:96:d8:d0:88:08:22:74:44:4e:57:
6a:df:10:f4:83:21:3f:c6:1b:78:30:e1:f5:5d:bb:f5:a7:7d:
87:8c:4c:ca:6f:93:9b:6d:30:8d:cd:ff:d3:47:69:3c:5e:1c:
cd:bf:86:46:35:98:4d:46:81:ee:43:5a:39:6d:b6:a2:0d:c8:
fc:98:f4:ef:3c:02:9c:a1:85:2b:85:7d:56:74:8e:d4:97:8b:
7a:64:f5:f6:53:9c:d0:ef:86:36:f1:c7:3f:92:5c:29:7c:a7:
2b:d5:16:8f:19:0c:a3:20:9b:14:26:e5:7c:ec:65:7d:3c:85:
f1:ed:9b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskrJRklecSvaUxQ1u7gaUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjUxMjE2MDEwMDQ4WhcNMjUxMjE3MDEwMDQ4WjAzMTEwLwYDVQQD
EyhjMTcxOWNmMmJhNjFiYTIwMDE2OWVlNTFkNzliMmI0YTdhMjIyNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwflMf2Y+iY1F35HIdMV+AENdTKRQ
DbDPRuQ02KzuS1Xe4vU/RiGMDwEUb91IbgVwKlj+BPo/oucVBGEbw64/7V0rCXld
Db+G/sazybn2HsnEi9d/4BBl+z7OOaKk6XOwNHq4h3zC5BGBCz9OYCa4HfOvGWPV
tXrQM7a3XSq7HUTeu1qYOgQhuTnEvUBo44gOoV909s6aksrmIP41vbtoEvoBySvv
9jDNSyTthwEn8FSK95cIZoHCcw5raCsNT/7x70oIexYnBb/Fm6wYiaUONNxekbC1
p181xfqvY2m0qg1qOqDsMxv9lziR2aBRegWwhuDfpmLfABJSnXniIkmQXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFxnPK6YbogAWnuUdebK0p6Iib7MB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1Nka+jq
DEjYsRkqJbOHbjuPylxIsYARa1887ctNdKlt1JFcFivgMwA+UbHYE69NgVeeRjjV
6Oi81nS5ZU3o1uBGGy0NIi9vRM0pWa6oozjPuRcqijFDnM6iWp51pMmWvxwHbyId
p41wXVF2VZX1Hbx4oVCa822UpUo0nobM1S3ldyD0E2eW2NCICCJ0RE5Xat8Q9IMh
P8YbeDDh9V279ad9h4xMym+Tm20wjc3/00dpPF4czb+GRjWYTUaB7kNaOW22og3I
/Jj07zwCnKGFK4V9VnSO1JeLemT19lOc0O+GNvHHP5JcKXynK9UWjxkMoyCbFCbl
fOxlfTyF8e2bQg==
-----END CERTIFICATE-----
Generated at Tue Dec 16 10:38:16 2025 by rpki-client