This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: 8lmXlreAWncqJlVmV3gwis9gVojJN9jYONhLGNhGPX0=
Subject key identifier: 71:45:EC:9C:7A:C5:57:DC:9D:92:CF:D2:87:22:16:93:CE:BD:8D:2E
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019B153A295F9AE94DDD6C3C5FC344961774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 14DB
Signing time: Sat 13 Dec 2025 01:01:31 +0000
Manifest this update: Sat 13 Dec 2025 01:01:31 +0000
Manifest next update: Sun 14 Dec 2025 01:01:31 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: RqDxjjAMsbku9bTZPa63iYraBKrlo7A4BeFeqDFkd9E=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:15:3a:29:5f:9a:e9:4d:dd:6c:3c:5f:c3:44:96:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Dec 13 01:01:31 2025 GMT
Not After : Dec 14 01:01:31 2025 GMT
Subject: CN=7145ec9c7ac557dc9d92cfd287221693cebd8d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:3d:2f:2b:85:ca:30:ae:73:c5:d4:77:b6:
20:c3:4c:e3:b5:8b:f1:6b:8d:15:00:d3:c8:05:5b:
5a:7e:11:14:cc:66:97:c6:11:c4:a5:60:6a:c5:6f:
85:a0:61:77:ab:b1:ce:4a:9f:a4:33:3a:19:4b:96:
30:e3:47:f7:02:92:11:07:16:03:9a:50:97:14:25:
1e:04:5c:70:92:12:11:58:b5:4f:1c:21:b4:82:5c:
6e:30:32:71:90:cd:d1:a5:d8:ba:dc:5f:a1:2b:51:
c7:fb:14:c2:2f:9a:d4:61:6d:87:aa:9e:7e:14:30:
d1:5b:02:1a:bd:91:c8:65:51:59:66:41:61:0e:0e:
8f:fb:89:87:c0:cc:9e:3e:b9:9b:87:56:5d:79:03:
6f:66:9f:e5:41:a2:43:fb:9e:fd:72:47:24:27:14:
d6:0e:d9:26:4e:8e:c5:c0:06:47:55:b8:63:47:de:
bf:c4:0c:51:44:7e:cb:d5:d6:f5:c5:a2:5d:d8:b6:
1d:b4:28:75:72:d1:70:03:7e:54:85:c7:ef:81:81:
c5:4d:b3:62:47:d6:81:61:b4:d9:23:9a:04:8b:44:
6a:84:2d:de:0b:58:89:ef:d8:ba:3b:e2:f6:dd:a7:
18:83:88:60:db:b4:bd:44:a0:90:25:a2:a0:eb:45:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:EC:9C:7A:C5:57:DC:9D:92:CF:D2:87:22:16:93:CE:BD:8D:2E
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:2c:b4:95:51:80:91:3b:6d:a6:e6:ea:6c:5e:d0:b6:59:
50:10:6b:2a:0b:32:40:28:27:df:e7:d7:aa:ca:6f:14:51:d6:
9c:bd:75:b4:39:e7:a9:10:83:b7:6d:c9:ca:eb:d6:ce:77:76:
c4:fb:62:51:e4:ff:b2:f5:8b:46:9b:7d:24:08:e0:75:e5:fb:
ab:7a:33:e6:71:59:02:4c:34:4f:3a:f6:ee:31:e5:67:ad:fa:
7f:68:26:4b:0b:3c:92:34:04:e7:39:ea:9c:d8:8f:38:af:65:
7b:45:c0:7f:51:45:93:d7:f1:a2:1f:93:b9:72:2b:48:bc:eb:
2a:56:b9:ee:23:19:8d:c2:8a:c0:e8:c7:ff:2f:81:44:b7:da:
bd:bb:e7:9e:0c:29:3f:bc:86:36:eb:5c:83:be:08:fb:1f:ba:
98:8c:14:c2:d7:03:69:5f:8a:76:ea:6b:0e:9e:ee:5e:70:3e:
84:9b:30:52:a1:ac:be:8f:d6:16:40:44:7f:59:27:81:5b:cd:
1d:2d:e8:2f:0b:73:77:d1:d5:5e:c3:bb:9c:d1:58:33:0c:32:
ac:b7:93:be:a8:16:87:7d:84:8c:f9:5d:47:96:10:a8:23:42:
a7:3d:3a:74:15:3a:1b:e3:33:93:c2:ab:1c:fe:e5:d6:82:bd:
de:d9:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 10:44:06 2025 by rpki-client