This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: 1hgr8IVM7sXB7BNkJSu1FtRMVDnUs7Kx89P+GuMyF/A=
Subject key identifier: C0:19:A2:CA:50:AC:FD:25:09:FF:4A:A4:31:C4:5F:42:FB:94:0E:9A
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019B2FD4D31E2DC8C1B770AE6D02D383399D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 107D
Signing time: Thu 18 Dec 2025 05:00:35 +0000
Manifest this update: Thu 18 Dec 2025 05:00:35 +0000
Manifest next update: Fri 19 Dec 2025 05:00:35 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: DvXMb7y/tvlJim485txPol+eZey9DKfHCN2T4NuoH+E=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:d4:d3:1e:2d:c8:c1:b7:70:ae:6d:02:d3:83:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Dec 18 05:00:35 2025 GMT
Not After : Dec 19 05:00:35 2025 GMT
Subject: CN=c019a2ca50acfd2509ff4aa431c45f42fb940e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:e5:a9:b1:e2:cb:9a:c3:0d:7f:91:c0:36:
b2:52:c6:69:0c:27:b1:20:78:90:66:05:bd:29:e8:
21:db:29:be:66:02:2a:c9:dd:82:b6:06:db:c2:61:
bc:b1:a8:4f:d0:78:f7:07:f6:6d:db:a9:92:a8:a9:
9d:3a:8d:64:11:40:22:e3:2d:5f:0b:24:fc:fe:3f:
2a:91:40:16:63:59:ca:5c:0d:e4:3a:83:da:58:db:
0a:e9:49:d6:f6:15:85:19:48:83:fc:86:bd:be:f6:
af:60:24:13:cc:7b:79:0b:87:9c:7b:74:c2:94:16:
98:ab:d4:ca:79:25:da:42:93:a8:bd:5d:ef:a1:44:
cc:e2:2d:64:27:03:03:ee:43:f3:73:72:ea:90:17:
9d:ae:d9:75:df:2c:40:68:73:2e:27:7d:03:77:83:
45:8f:bb:b3:7f:f8:14:89:d8:b2:e3:86:ff:8b:07:
03:a7:3c:d5:7a:d6:b2:d7:ba:42:4e:ee:14:56:11:
4a:4e:32:6a:36:a4:ae:13:8e:90:62:ae:d4:0e:57:
48:22:a3:5a:72:89:43:66:34:c3:7a:42:48:3e:7e:
92:89:e4:46:4b:84:3b:80:27:ad:f5:e7:8a:ba:d1:
9b:c4:bc:4d:af:91:36:1f:99:8c:7d:20:67:27:63:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:A2:CA:50:AC:FD:25:09:FF:4A:A4:31:C4:5F:42:FB:94:0E:9A
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:59:11:f3:82:6f:2c:03:d5:47:0e:3b:5d:53:e8:5f:10:82:
22:43:eb:c4:c2:19:84:0b:aa:3a:8c:3b:7b:b7:8c:ee:67:9d:
8c:8c:93:fd:f1:11:21:fa:16:6a:39:ec:c1:73:c7:d0:13:e1:
fd:e3:37:96:b6:38:bd:7a:e8:f3:f0:95:23:31:b2:71:f0:5b:
1c:dd:65:8c:b7:41:84:ac:73:dd:65:e6:6f:c6:19:02:61:bd:
f8:27:bd:63:72:e0:10:29:d1:6b:a0:14:d8:bb:e9:b8:6c:ec:
92:19:a5:f4:f5:48:fa:0e:0d:a2:08:88:8c:ed:0a:ee:85:39:
3b:04:f9:8b:ef:f1:ce:9d:33:5e:d2:97:cd:44:57:fb:68:9b:
61:cb:0d:2a:90:e4:e5:c7:3f:5a:ec:dd:0d:c1:a2:9e:09:b7:
70:27:0f:1c:db:47:0d:cd:be:23:68:5b:d2:62:a6:00:84:f3:
b6:53:ac:ee:cf:18:5f:e8:77:6d:3a:d5:7b:3d:50:14:7f:da:
f9:f2:8b:64:1b:e3:66:96:cf:8d:65:11:ce:02:4a:d4:fa:2d:
97:b5:68:46:25:98:c9:ea:89:2b:93:31:f4:7c:0d:1b:16:30:
67:d7:c6:ad:fe:52:19:d0:12:3d:11:22:3f:36:a9:e1:b2:6f:
88:33:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:02:16 2025 by rpki-client