This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: YQQ8jB+6SH2vU5eOtJRAQdn/hzO9z38B3u8GDhE+t+o=
Subject key identifier: 53:D2:37:82:80:7F:26:BF:35:02:84:83:A8:9F:EC:4A:09:91:CA:DE
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 019B59ACDE9DC03B65198D7C5A5C985BCC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 17B0
Signing time: Fri 26 Dec 2025 08:00:59 +0000
Manifest this update: Fri 26 Dec 2025 08:00:59 +0000
Manifest next update: Sat 27 Dec 2025 08:00:59 +0000
Files and hashes: 1: 2G_wfY-wtHrrh5fIlt2oTgfjyRk.roa (hash: Z3ThrbWDvPG2omkuECARA3Z0eG/8QMV8+rwPhMcjF+s=)
2: EnEl3j-w99KIdI5ENTznDqsZ0QU.roa (hash: 0+nihLinw/HlHretYAxdAaVQ3wWi8vaKXQiqmIpaJxw=)
3: XcxcS9ldQu6VQrsTPyt-_lfXPao.roa (hash: 2Sl1d/YMvIvosyAajy76CYNHHCqrobuGrcDX5gv9Jos=)
4: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: EP3dH3/93O734hP7HmMLtw4vqEwX6TLB4pW0tGQn+10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:ac:de:9d:c0:3b:65:19:8d:7c:5a:5c:98:5b:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Dec 26 08:00:59 2025 GMT
Not After : Dec 27 08:00:59 2025 GMT
Subject: CN=53d23782807f26bf35028483a89fec4a0991cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:9c:7b:ca:d8:78:23:9a:d8:2f:d3:f7:ff:
a5:e3:3c:2d:98:6a:ab:5a:0f:0d:e2:4f:d1:08:ee:
14:88:49:7b:9d:63:42:05:30:d2:a0:69:d7:55:3f:
c1:dc:29:01:e2:9e:b7:2b:d0:21:d4:82:51:d9:77:
41:0a:86:96:41:e4:ed:43:22:26:fd:83:d3:8d:e9:
f0:28:c4:9e:cf:64:e5:bf:a3:5a:e7:9d:4e:ba:54:
87:44:00:8a:cb:83:a0:37:9c:0c:b5:a7:07:8f:3b:
fa:55:b3:a7:d1:cd:38:38:1d:dc:a2:85:45:0b:e5:
97:bd:34:07:04:8b:1d:08:ad:cb:12:6c:34:aa:96:
c2:f6:3b:c6:5a:a0:77:09:4b:12:51:42:7a:33:c1:
c7:39:b8:1c:35:ac:7a:04:72:cc:3b:14:29:40:5e:
f4:c5:73:11:04:05:39:a0:e2:d3:f6:8e:e7:a0:77:
4c:14:6c:24:4b:ec:c2:cb:e8:d1:21:ff:f1:a5:e8:
1a:34:7d:5a:a0:0e:7f:3e:84:5c:18:62:a6:e3:22:
3d:ab:b6:72:a5:74:60:c2:a3:45:c0:7e:b3:5c:09:
75:51:e8:54:e4:f4:d8:96:29:c7:ae:46:35:fd:2a:
38:e7:57:45:16:6a:a2:d3:f1:73:bb:51:b8:ca:e2:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:37:82:80:7F:26:BF:35:02:84:83:A8:9F:EC:4A:09:91:CA:DE
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:b1:a8:11:30:22:4a:b3:78:89:8b:f9:41:f0:88:11:3a:
02:2a:ee:53:26:b1:3a:6b:c8:e3:0b:b0:a2:9f:b7:ce:cd:2f:
3a:46:d1:00:9b:a9:f1:24:b0:b9:48:14:62:fd:4c:b7:1a:68:
db:c7:60:ae:4a:75:b3:19:e4:2a:39:7b:fb:08:98:92:f5:f6:
66:d0:24:c9:a8:8d:00:34:7c:7f:72:bb:01:67:e3:5d:ac:04:
a3:db:3e:47:30:2a:bf:cd:61:c4:92:53:02:7f:85:3c:3e:6e:
eb:db:73:a1:d1:b6:be:ff:2d:77:d3:31:82:50:6e:36:d2:ce:
bc:ab:89:e1:3f:53:c4:d1:76:e2:4b:41:a7:3c:69:c9:f1:a5:
51:38:e8:62:7e:53:cb:7f:21:11:23:37:60:ce:35:ed:8d:b0:
27:25:7b:68:a3:72:e6:e3:81:b9:8a:2a:ad:89:af:27:b7:25:
db:8d:6e:03:71:53:c5:7e:46:1e:8a:88:d3:96:5d:92:5a:e4:
a3:7f:9a:17:b3:a9:ee:80:02:63:24:91:0a:1b:1f:84:5c:b4:
dd:00:d1:54:8a:e2:d4:8d:18:41:c9:ac:71:a6:d7:9d:51:ed:
cd:ce:57:e4:1e:28:dd:5f:bd:33:85:30:25:16:a3:e9:f0:01:
35:b6:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:01:54 2025 by rpki-client