This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: VLbHLwRtgqA7O2jdODgD36wf7M03kX8SR87RcCZAtC4=
Subject key identifier: 7B:57:F3:94:A9:B9:E6:31:1E:EC:95:C2:33:D0:3B:23:5A:D7:8B:4A
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019AE6E0074C9593C3AD4FFB5808CFE0F81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1762
Signing time: Thu 04 Dec 2025 01:00:32 +0000
Manifest this update: Thu 04 Dec 2025 01:00:32 +0000
Manifest next update: Fri 05 Dec 2025 01:00:32 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: zseClAfzfgWZrGhdKt9l3Q61PstRfo7chEazf/ltBV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e6:e0:07:4c:95:93:c3:ad:4f:fb:58:08:cf:e0:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Dec 4 01:00:32 2025 GMT
Not After : Dec 5 01:00:32 2025 GMT
Subject: CN=7b57f394a9b9e6311eec95c233d03b235ad78b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:ea:b7:48:e2:bb:70:b4:9b:88:3a:c2:fa:
97:ae:57:1f:01:b2:ea:0f:a2:da:4e:ad:90:8e:a1:
2f:1a:e6:e6:55:39:aa:4a:d2:fd:bb:e4:7c:fd:52:
a0:9f:ab:35:07:87:2d:67:09:da:90:7d:e6:21:b0:
53:41:38:6b:cf:80:8b:9f:93:fe:47:f4:2e:e8:12:
a8:75:3a:12:87:4c:95:6b:a2:59:c1:0d:89:a0:38:
b4:67:66:bd:3c:14:f1:1e:f6:4a:06:52:e3:b0:df:
9f:51:dd:45:f9:e3:2c:69:25:e4:71:8d:cd:c2:6b:
d8:bf:a6:21:5b:4f:d5:13:34:7f:ae:13:7a:d3:bb:
2d:26:a7:fd:59:74:80:9f:e5:21:f4:f0:7e:a4:34:
98:5b:7c:37:80:38:49:ff:a4:c3:80:a2:08:6c:5f:
5d:12:35:11:16:7a:2f:30:d9:e3:52:a6:af:69:1f:
b1:0d:37:63:35:86:b1:ba:59:22:e1:76:a8:bf:02:
b6:3c:c3:87:ae:95:1e:bd:d9:8b:78:ba:a0:e8:37:
85:e7:88:32:29:5e:e6:9c:3c:a4:11:cc:5e:5a:a6:
ad:f1:12:06:35:dc:98:44:68:19:c0:40:eb:d1:f8:
0c:4e:3d:4c:8a:cc:2e:2b:9f:e7:7e:07:82:35:e3:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:F3:94:A9:B9:E6:31:1E:EC:95:C2:33:D0:3B:23:5A:D7:8B:4A
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:36:b7:4d:09:bd:9a:2e:68:38:b4:b7:32:3c:d7:50:ea:
fa:d0:ce:cc:24:d2:0b:66:34:ae:f9:69:d2:f4:77:97:4b:a4:
a9:2f:30:fa:9f:92:55:d1:a0:76:8f:58:71:4a:2d:72:0c:26:
7c:71:bb:5d:f5:24:9e:cb:fd:a9:b6:3d:93:66:7c:24:71:64:
be:01:8b:e2:28:6f:bf:d3:c2:78:4b:8d:0e:2d:01:1c:d4:54:
1c:43:62:57:ed:23:ca:da:c3:7b:5e:6a:f8:fa:df:57:af:41:
1a:10:ab:19:bb:f0:e4:a9:59:9e:4e:e1:39:e9:f0:4f:03:2a:
b9:c6:e5:8f:a9:e3:92:e3:de:94:1c:b1:eb:8c:ea:24:7f:0a:
50:d9:ab:5f:c0:8e:56:a6:66:20:c7:8f:09:dd:ba:5b:8f:22:
66:78:cb:19:e1:30:3b:b1:cd:94:f7:f7:fb:fb:3f:e7:35:c4:
60:95:32:6b:5c:bc:59:aa:cf:8d:be:4d:22:3a:a0:f0:dd:01:
5a:e6:48:25:06:2d:d4:80:22:6b:19:1d:e7:9b:0c:4a:20:09:
cc:34:ce:ea:04:49:d2:7c:3a:d7:d9:29:9e:4d:b5:03:7f:a3:
3a:8f:87:24:76:35:61:ec:bb:75:31:f7:03:5f:02:34:bb:f8:
d4:89:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:43:37 2025 by rpki-client