This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: HO7bzEivHX9pElmTwSoqHZ6eMIeuzGLC7UzAi6eVr70=
Subject key identifier: 67:FA:4F:39:7B:1B:5D:C9:03:0B:34:83:62:6E:D5:3A:31:CC:FE:B1
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019B59ACA7C87EC5362E98878907DAAA4E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0F14
Signing time: Fri 26 Dec 2025 08:00:45 +0000
Manifest this update: Fri 26 Dec 2025 08:00:45 +0000
Manifest next update: Sat 27 Dec 2025 08:00:45 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: Zwnq2K5lIy/zNsk/hme6RMVRB2HCKTRcLoU41F/65Yg=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:ac:a7:c8:7e:c5:36:2e:98:87:89:07:da:aa:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Dec 26 08:00:45 2025 GMT
Not After : Dec 27 08:00:45 2025 GMT
Subject: CN=67fa4f397b1b5dc9030b3483626ed53a31ccfeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:e0:a4:6d:c2:a0:0a:50:f2:8d:7b:47:82:
e5:94:46:65:48:87:16:89:23:74:e6:91:ed:e7:94:
3c:a4:62:f7:d6:ac:18:92:dd:52:91:e1:55:34:6c:
c4:6b:68:f4:8e:5f:01:bc:b5:e3:2c:54:21:38:d5:
a6:f9:7f:22:48:68:da:5d:6f:fc:9e:81:31:32:bd:
7b:e9:a7:93:53:98:96:b3:12:56:06:94:f7:75:3a:
fa:fd:f5:c1:6a:6c:e4:88:d5:7b:8f:db:f4:e5:75:
e6:fe:01:fa:5b:dd:d9:58:70:a0:0d:ae:62:0a:89:
7f:f4:e7:a4:bb:11:e0:f2:fa:e8:9f:8b:db:f5:bc:
6e:45:39:d3:31:bf:17:66:7d:6c:61:ae:9c:27:b1:
be:ae:f1:fa:d2:56:ea:64:86:d5:42:c4:b9:5b:d9:
42:d2:47:d2:99:c8:f3:a1:be:cb:fe:b8:b9:3e:1e:
0e:37:4f:a9:5d:cd:e4:74:6e:47:a4:24:2e:25:12:
8c:fb:67:c3:16:0e:16:aa:4d:a9:e4:a8:a0:6f:4b:
9b:b0:e2:23:04:7e:c1:ad:86:82:d6:b5:a5:85:dc:
e6:95:de:25:db:40:0a:22:13:cf:4f:f2:bb:c8:da:
30:58:8e:61:17:f7:0e:09:f2:ec:1e:73:96:50:7f:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:4F:39:7B:1B:5D:C9:03:0B:34:83:62:6E:D5:3A:31:CC:FE:B1
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:68:60:85:a4:e3:a1:5e:45:44:1c:99:9d:fc:7c:24:88:
94:65:83:34:d6:73:7e:e6:bb:7c:cd:05:67:d1:db:e5:a4:03:
d5:f9:19:d6:0c:ea:de:aa:58:fe:80:6d:77:f0:65:26:d1:c7:
dd:7a:a6:65:aa:f4:85:15:ea:35:2d:f0:80:96:5e:56:c7:f0:
89:4a:b6:b0:40:4d:b0:65:39:c5:fd:a5:72:4b:86:11:e9:70:
b9:24:97:62:c6:4d:45:1e:94:a4:7e:ff:41:27:cf:db:6e:8b:
51:d2:10:1f:ec:f2:20:72:3a:53:4f:3a:f6:33:3e:63:58:73:
66:13:0e:45:ee:ef:c7:13:96:08:df:74:64:af:80:98:5a:80:
a4:4b:e9:cf:4b:50:ea:85:cd:9b:03:7a:f5:62:44:58:72:aa:
4f:f3:52:fb:d4:64:d0:12:29:72:d1:f7:d8:d0:a6:eb:97:b8:
09:8a:a3:ab:fb:2e:83:4b:c1:77:f7:58:23:e4:83:7b:0c:57:
e1:d0:ef:d6:26:dd:0a:05:e6:94:0d:52:e1:48:42:1a:f5:23:
f5:97:59:12:16:96:a1:4c:73:cf:f3:59:64:0e:d5:f8:ba:f2:
9f:dc:96:21:b7:f4:06:ff:42:e7:d6:69:ad:6a:7e:22:d9:41:
55:0b:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:43:25 2025 by rpki-client