This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: 0xvIroAzIcX2w5Dv0cdvXc29lp/iTmgTSdCz8cAHIO8=
Subject key identifier: 79:BE:29:B8:08:A6:0A:0D:EF:A6:4B:11:49:AB:E0:72:A6:84:7B:3A
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019B1494D75DF06DCAB03FF5460AC6838C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 1775
Signing time: Fri 12 Dec 2025 22:00:57 +0000
Manifest this update: Fri 12 Dec 2025 22:00:57 +0000
Manifest next update: Sat 13 Dec 2025 22:00:57 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: Rxiv8z0yne0/QF+IZoqVXxy1QOwmI9oI9rtB2+/znv0=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:14:94:d7:5d:f0:6d:ca:b0:3f:f5:46:0a:c6:83:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Dec 12 22:00:57 2025 GMT
Not After : Dec 13 22:00:57 2025 GMT
Subject: CN=79be29b808a60a0defa64b1149abe072a6847b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:3f:e7:4b:f5:2f:90:0a:78:6e:84:49:b2:
60:df:18:ea:8e:42:2d:f5:98:6b:4e:73:eb:e7:ef:
64:76:ca:73:75:26:a5:8f:be:e9:fd:dd:e7:41:7a:
43:55:b0:48:0c:1f:38:09:50:17:79:9d:fe:21:cd:
77:90:98:0d:59:f9:31:80:69:a4:cf:62:3d:50:b5:
52:18:39:72:3e:06:0d:5b:0c:0f:ac:0c:87:2a:35:
0d:3e:a7:45:7f:70:31:0b:57:2e:a2:66:5c:2d:a8:
2a:45:da:ee:21:86:a3:38:7e:f8:0f:a4:01:2d:6b:
00:54:bf:fa:6a:17:6c:5a:96:3b:2a:5b:53:20:2c:
53:0b:01:6a:39:f4:e4:98:82:29:6e:80:3d:6c:43:
dc:a3:54:90:8b:c9:fc:95:36:bf:5e:f1:7f:75:e4:
6f:18:2e:50:21:b1:9f:28:44:c6:60:70:99:79:93:
43:41:5a:25:4e:5d:e5:3e:2e:ea:36:74:d9:0f:e3:
ee:22:15:cb:a6:2b:ef:f2:56:fc:31:72:ed:50:77:
41:d8:03:1f:12:41:4c:c3:cb:a9:d3:73:52:dc:5b:
45:eb:2c:69:12:27:a7:53:06:60:7a:da:bc:08:4a:
5a:80:2f:89:71:b9:fe:3c:f5:94:f0:e5:30:8e:90:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BE:29:B8:08:A6:0A:0D:EF:A6:4B:11:49:AB:E0:72:A6:84:7B:3A
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:0b:42:f2:b0:da:a2:ee:48:03:76:99:a0:33:0d:53:ac:
27:f4:c1:11:20:75:9e:c9:b5:ba:e9:09:55:41:ff:7b:26:aa:
9e:55:40:91:e4:9c:0b:58:ea:1a:4c:62:0d:c1:50:90:fe:eb:
c0:57:5c:14:80:45:f1:1b:f4:09:69:06:08:c9:d8:2d:f3:02:
5d:81:14:b9:8d:85:e5:54:b8:af:a6:d4:f4:51:24:f1:20:4f:
5f:d2:27:d8:4b:b5:83:7b:a1:17:5c:ee:0c:ea:2b:da:9a:c4:
20:6c:fe:0d:8c:3c:85:3c:29:b3:fa:b6:10:c4:23:1d:d8:81:
e6:a5:7f:ce:f6:77:50:a3:d7:76:90:a7:64:08:7a:f6:8c:c2:
5c:66:13:ac:fe:de:7b:fa:66:1e:02:03:41:9e:b8:59:c8:a5:
74:6d:fa:23:e9:fb:6e:2d:1c:bd:37:b2:57:1d:7e:c7:55:81:
86:c8:5d:73:f0:76:ec:c8:79:39:2c:0a:65:21:d4:36:09:f1:
4a:49:08:5a:08:4f:00:e2:b6:9e:cd:b8:7c:72:e8:2d:6a:fe:
d3:74:78:3d:ba:05:f2:99:b2:5e:6f:c1:ec:cc:3c:8e:0c:1b:
13:8f:99:6c:d3:33:db:16:c9:b2:fa:e5:09:84:5c:81:78:77:
7c:d4:20:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsUlNdd8G3KsD/1RgrGg4xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjUxMjEyMjIwMDU3WhcNMjUxMjEzMjIwMDU3WjAzMTEwLwYDVQQD
Eyg3OWJlMjliODA4YTYwYTBkZWZhNjRiMTE0OWFiZTA3MmE2ODQ3YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3o/50v1L5AKeG6ESbJg3xjqjkIt
9ZhrTnPr5+9kdspzdSalj77p/d3nQXpDVbBIDB84CVAXeZ3+Ic13kJgNWfkxgGmk
z2I9ULVSGDlyPgYNWwwPrAyHKjUNPqdFf3AxC1cuomZcLagqRdruIYajOH74D6QB
LWsAVL/6ahdsWpY7KltTICxTCwFqOfTkmIIpboA9bEPco1SQi8n8lTa/XvF/deRv
GC5QIbGfKETGYHCZeZNDQVolTl3lPi7qNnTZD+PuIhXLpivv8lb8MXLtUHdB2AMf
EkFMw8up03NS3FtF6yxpEienUwZgetq8CEpagC+Jcbn+PPWU8OUwjpAs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm+KbgIpgoN76ZLEUmr4HKmhHs6MB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9ALQvKw
2qLuSAN2maAzDVOsJ/TBESB1nsm1uukJVUH/eyaqnlVAkeScC1jqGkxiDcFQkP7r
wFdcFIBF8Rv0CWkGCMnYLfMCXYEUuY2F5VS4r6bU9FEk8SBPX9In2Eu1g3uhF1zu
DOor2prEIGz+DYw8hTwps/q2EMQjHdiB5qV/zvZ3UKPXdpCnZAh69ozCXGYTrP7e
e/pmHgIDQZ64WcildG36I+n7bi0cvTeyVx1+x1WBhshdc/B27Mh5OSwKZSHUNgnx
SkkIWghPAOK2ns24fHLoLWr+03R4PboF8pmyXm/B7Mw8jgwbE4+ZbNMz2xbJsvrl
CYRcgXh3fNQgYQ==
-----END CERTIFICATE-----
Generated at Sat Dec 13 03:58:49 2025 by rpki-client