This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: oaAm1imGty29L+VyGzL7DXqIbDTejPqvlAWiKsuKPf8=
Subject key identifier: BD:35:49:CD:48:9D:74:A9:9A:7C:55:10:9F:3D:75:D0:F4:0F:DD:AF
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019B0E9340DC88CDF8C55A2818733313CDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0E3B
Signing time: Thu 11 Dec 2025 18:01:29 +0000
Manifest this update: Thu 11 Dec 2025 18:01:29 +0000
Manifest next update: Fri 12 Dec 2025 18:01:29 +0000
Files and hashes: 1: C7ULwDGGDLspopWJvL9iddJcsoA.roa (hash: eXiH2Que0/hsKh26rBrekQ8hlPTu7doazMNc5MCmB1Y=)
2: W6VeJiHlvuRMQjeGZHv3mokER-c.roa (hash: qcyR5RW8f0zdUSnAWl6lW42oNtIicHOzXOEszMGa+ME=)
3: sLlY1jyLux_8WlPpVquZS_tXAMM.roa (hash: Ac6aebIzojMJX90LbFh/1SpU6qfnR41Si25oQuBA8+c=)
4: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: T8FXBVaSPtbDbslkwPgomu3S89TLsAxWw4eEO0IYGNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:93:40:dc:88:cd:f8:c5:5a:28:18:73:33:13:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Dec 11 18:01:29 2025 GMT
Not After : Dec 12 18:01:29 2025 GMT
Subject: CN=bd3549cd489d74a99a7c55109f3d75d0f40fddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:51:2a:07:5d:66:44:f2:07:a5:b4:1b:55:
10:eb:f6:fc:63:b6:58:66:ad:ca:ad:69:eb:6a:9c:
e1:1a:5f:8a:c5:1f:74:10:d8:31:85:05:f8:66:28:
3e:bf:21:24:4c:6a:78:d4:e4:60:5b:33:2e:0f:4e:
eb:26:e3:7e:c8:e9:51:4b:1c:dd:c5:c8:3b:3e:87:
62:bb:38:81:4c:19:5e:2d:ed:26:e2:0a:bd:66:7a:
af:56:ef:00:0f:0a:db:a7:fb:02:b6:28:81:88:3d:
95:05:7a:34:1e:f6:2d:eb:13:e4:55:da:32:1e:fa:
60:29:c8:51:51:63:2e:ad:7c:ea:3a:22:5a:4e:ce:
47:86:7a:bb:60:75:c1:77:99:f1:6c:5f:1c:e4:5f:
fd:0b:1c:ef:c9:6d:c7:7c:39:af:87:ed:18:27:97:
30:26:64:f8:4f:4b:ef:db:e6:9c:13:e4:30:e8:07:
ad:bc:e7:fa:a2:1e:dc:69:72:89:38:98:37:89:d2:
63:eb:aa:84:f0:a2:f0:ec:11:c3:20:fd:6a:23:3e:
43:ff:a4:e5:e5:7e:48:11:a8:a7:e7:94:da:35:b8:
0a:e1:36:10:37:93:03:86:bf:32:bf:7f:f4:93:c0:
fe:03:72:f2:bc:41:c2:50:27:f7:73:fb:cc:72:49:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:49:CD:48:9D:74:A9:9A:7C:55:10:9F:3D:75:D0:F4:0F:DD:AF
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:3a:44:da:91:66:bb:9d:b8:25:4f:c4:44:a6:82:30:0b:
df:12:22:ea:56:8b:a3:2e:71:df:d4:78:eb:82:03:0b:54:30:
68:82:ef:58:87:47:d8:d2:4f:99:0b:c1:04:c6:98:2b:3a:70:
d7:74:be:99:be:26:24:5a:70:fe:7e:fa:19:8e:37:94:87:c2:
68:43:a3:e2:94:0b:70:67:1c:35:73:8a:9b:51:39:48:ce:f0:
38:3c:9b:52:5d:fb:b3:0d:84:cf:8e:8e:c0:e6:5f:0b:91:8f:
18:94:89:b9:af:a2:66:38:b1:52:a0:3b:65:ce:0c:a6:9c:5a:
3c:c0:8a:61:ad:44:dd:e3:a6:33:d0:c8:2b:76:41:23:1a:5c:
9d:29:48:b8:59:9e:0f:53:bd:89:ca:a8:8c:8c:57:13:1b:32:
a0:41:a0:58:21:2d:a6:32:50:2e:41:50:53:76:cc:36:db:a9:
7c:22:4d:65:fb:f0:d1:7f:69:c7:0f:9a:a0:59:53:aa:cb:cd:
94:75:e0:70:6d:e6:9c:6c:18:13:6b:91:73:55:23:5f:26:9e:
8f:5c:73:c0:df:e1:0b:f5:b5:4a:ab:16:6c:0e:65:5e:d7:ee:
39:02:94:37:b0:41:9d:22:81:f9:7e:14:24:87:f7:b9:47:bb:
fd:17:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:23:15 2025 by rpki-client