This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: 6vWJG0BuEefgTSWYRxkFNRR7TNItIbpvznsacLwJFXo=
Subject key identifier: C2:14:D8:7A:9E:9C:86:0E:14:10:97:A1:BE:3C:D4:9C:46:4C:13:FC
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 019B3AC6687E37F2DE791A4AB8CADEE5A14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 179A
Signing time: Sat 20 Dec 2025 08:00:39 +0000
Manifest this update: Sat 20 Dec 2025 08:00:39 +0000
Manifest next update: Sun 21 Dec 2025 08:00:39 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: PrgZyUOSRZNC5vgwwxhKtDuavyKRYoohXZ6xK7FObVA=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=)
9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=)
10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:c6:68:7e:37:f2:de:79:1a:4a:b8:ca:de:e5:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Dec 20 08:00:39 2025 GMT
Not After : Dec 21 08:00:39 2025 GMT
Subject: CN=c214d87a9e9c860e141097a1be3cd49c464c13fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:9a:16:a4:44:75:5a:ae:60:93:c7:1b:d9:
94:f8:91:32:5c:24:62:37:49:05:3e:08:66:1a:56:
c2:a7:4f:31:61:79:90:c1:cd:7e:0e:29:ef:59:fb:
6c:b2:df:c9:93:94:80:9d:5f:01:e2:ae:90:27:7d:
a8:ca:f9:ba:89:56:ae:82:12:7a:2a:91:f5:57:f7:
dc:7f:a4:fc:aa:dc:6a:87:45:f3:4a:72:51:bb:40:
d3:5c:85:78:5b:57:f1:db:aa:7f:60:f9:5a:91:6d:
e7:0e:b6:f9:4f:cd:05:39:01:b2:05:fe:cf:22:f7:
48:b4:f2:7e:4e:38:01:c3:d0:6f:b3:82:60:31:e8:
83:c4:b0:a1:8b:73:77:86:7a:ad:88:61:e9:19:53:
42:38:cf:17:66:05:2a:ee:c3:1a:07:2f:dc:51:79:
19:0b:da:8f:17:ed:94:6b:30:c0:f3:6c:31:14:9b:
c4:b4:91:ec:e8:8b:95:94:8a:3e:a4:e3:e5:99:1d:
73:8e:de:21:0a:8b:71:0a:81:c8:f2:a6:3b:a9:3f:
3b:73:19:08:5f:21:59:34:c6:fa:7c:c2:33:2a:5f:
d1:b9:0e:94:6f:6e:84:78:9c:6d:25:ff:a3:55:e8:
9a:00:5e:ab:28:71:cb:e4:d4:ca:39:da:f7:ac:7e:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:D8:7A:9E:9C:86:0E:14:10:97:A1:BE:3C:D4:9C:46:4C:13:FC
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:6d:0d:5f:e6:52:f5:b4:5d:66:65:d6:d0:55:18:e6:99:
31:e5:0d:c1:b0:84:45:1f:76:0f:f0:ff:22:20:fc:ec:b4:cd:
39:0b:72:2c:63:0d:de:6a:b3:a0:25:c4:81:db:a6:cf:b0:c4:
dd:6c:fa:78:12:64:12:4d:cf:60:36:35:35:90:e1:a5:93:7e:
17:4e:8b:c6:4e:29:61:51:12:41:4f:26:ca:92:20:72:59:cc:
44:84:b1:0f:f8:5b:d2:ec:98:9a:87:25:b7:d7:ec:1b:b5:0e:
68:8b:98:a9:eb:0d:05:02:b7:78:e5:1c:92:cc:b8:be:86:cb:
72:27:c7:49:2e:38:93:af:c8:55:ab:23:d7:66:98:9b:62:da:
24:25:f6:cb:38:3b:de:a9:f8:6e:e1:62:35:91:0f:8d:18:52:
9c:c8:76:8b:e6:9e:57:d7:38:12:11:18:f2:1f:93:87:c5:c0:
40:ed:e3:5d:98:92:a3:5e:3e:aa:cb:ab:b3:e6:ab:13:c9:48:
d5:43:dc:6e:8e:68:34:85:1f:c6:82:0d:d9:72:08:55:be:02:
67:e5:e2:9f:c6:ea:e0:a6:75:e1:a3:c9:ac:39:e1:cb:81:c0:
49:36:74:e6:5b:54:79:91:f3:45:68:55:e4:0b:0c:a6:28:ee:
f6:6a:07:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6xmh+N/LeeRpKuMre5aFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjUxMjIwMDgwMDM5WhcNMjUxMjIxMDgwMDM5WjAzMTEwLwYDVQQD
EyhjMjE0ZDg3YTllOWM4NjBlMTQxMDk3YTFiZTNjZDQ5YzQ2NGMxM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYmaFqREdVquYJPHG9mU+JEyXCRi
N0kFPghmGlbCp08xYXmQwc1+DinvWftsst/Jk5SAnV8B4q6QJ32oyvm6iVaughJ6
KpH1V/fcf6T8qtxqh0XzSnJRu0DTXIV4W1fx26p/YPlakW3nDrb5T80FOQGyBf7P
IvdItPJ+TjgBw9Bvs4JgMeiDxLChi3N3hnqtiGHpGVNCOM8XZgUq7sMaBy/cUXkZ
C9qPF+2UazDA82wxFJvEtJHs6IuVlIo+pOPlmR1zjt4hCotxCoHI8qY7qT87cxkI
XyFZNMb6fMIzKl/RuQ6Ub26EeJxtJf+jVeiaAF6rKHHL5NTKOdr3rH5HLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIU2HqenIYOFBCXob481JxGTBP8MB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDptDV/m
UvW0XWZl1tBVGOaZMeUNwbCERR92D/D/IiD87LTNOQtyLGMN3mqzoCXEgdumz7DE
3Wz6eBJkEk3PYDY1NZDhpZN+F06Lxk4pYVESQU8mypIgclnMRISxD/hb0uyYmocl
t9fsG7UOaIuYqesNBQK3eOUcksy4vobLcifHSS44k6/IVasj12aYm2LaJCX2yzg7
3qn4buFiNZEPjRhSnMh2i+aeV9c4EhEY8h+Th8XAQO3jXZiSo14+qsurs+arE8lI
1UPcbo5oNIUfxoIN2XIIVb4CZ+Xin8bq4KZ14aPJrDnhy4HASTZ05ltUeZHzRWhV
5AsMpiju9moH2g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:22:49 2025 by rpki-client