This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: TUYX8l0DGdSs6Eu3EN+hCC1zvF5gqw3BHFtdsXgM3NU=
Subject key identifier: BD:0B:67:B7:DD:12:E2:69:F4:2F:B1:33:D0:19:F4:FA:A8:99:51:46
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019AF46554313424BCE8DF0248DE2F02E380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1769
Signing time: Sat 06 Dec 2025 16:01:12 +0000
Manifest this update: Sat 06 Dec 2025 16:01:12 +0000
Manifest next update: Sun 07 Dec 2025 16:01:12 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: IqeIWEJX0ql/+FQtNxx7vyBi2wHKo8wtSeBT+Z/iAMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:65:54:31:34:24:bc:e8:df:02:48:de:2f:02:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Dec 6 16:01:12 2025 GMT
Not After : Dec 7 16:01:12 2025 GMT
Subject: CN=bd0b67b7dd12e269f42fb133d019f4faa8995146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:5f:42:63:4a:0a:b2:fe:93:c5:0a:dd:24:
25:4a:95:25:d8:92:2b:f7:8c:ac:be:36:03:e4:6d:
09:18:e8:17:4b:26:cd:f7:37:4e:4e:51:48:17:26:
bd:99:1c:90:7e:c3:be:db:21:45:76:e4:89:2e:1c:
d0:29:ff:25:fc:7f:c4:8f:d7:e8:54:7e:9d:5d:b6:
8e:a9:85:09:a6:18:d7:c4:10:34:80:a6:b9:03:eb:
b7:2d:2b:7f:83:fb:57:be:59:9f:c1:ce:2d:8b:a0:
33:ad:37:c7:55:de:03:a3:d8:13:89:42:06:da:a1:
d7:b9:6e:b6:29:13:94:cc:01:65:c5:c7:1f:03:ec:
59:90:b6:17:62:01:ec:ad:11:75:68:23:1f:8e:66:
ed:ab:08:89:f0:d9:c2:93:a2:81:7a:01:21:4e:ab:
b2:9b:cb:80:1b:98:84:c9:0d:36:3e:c0:11:a2:80:
90:26:f2:01:53:bc:5a:d6:71:f8:3d:28:1c:40:72:
96:b3:c8:76:24:11:a6:86:f9:5c:09:df:4a:f3:21:
fd:5d:f7:5a:de:f3:09:71:99:66:7f:bd:94:25:d9:
99:aa:e7:8a:e2:1d:e0:98:04:aa:1a:72:8b:16:1a:
a7:18:57:6d:7e:8b:d9:87:f2:b7:4a:6f:c8:9d:d9:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:67:B7:DD:12:E2:69:F4:2F:B1:33:D0:19:F4:FA:A8:99:51:46
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:2b:04:5a:17:62:ed:b8:0a:08:65:e9:31:cd:45:c5:21:
a4:6c:c0:51:4b:9b:75:dc:7e:e3:06:26:2d:84:7d:03:8b:5b:
28:50:72:93:71:93:49:d3:b2:c6:20:36:63:c2:8f:05:6c:c9:
17:8e:12:37:a8:89:de:2f:27:9d:31:af:c8:22:5b:da:18:22:
43:b3:a6:48:1c:7a:94:91:bb:23:1e:c5:92:af:3b:c9:19:03:
fc:5a:55:33:1c:1b:23:0b:a8:15:9c:5b:97:46:57:65:9a:0d:
ec:c9:83:6c:e3:21:00:90:ae:8e:f2:b1:93:1c:1b:b0:35:99:
66:8c:bc:7c:89:a3:27:f0:ee:b5:ff:61:74:38:0e:87:64:26:
08:b3:6c:58:7c:99:f3:c4:0e:cb:28:ad:97:96:41:64:40:09:
67:fd:d3:51:4e:13:ab:63:53:84:a2:55:80:49:1d:c4:0d:ba:
01:9e:70:92:3d:29:a7:fb:ac:2d:dd:46:bb:d8:6c:3a:a6:65:
ce:c2:b1:99:73:e1:64:6e:d6:ea:24:9b:37:4d:34:5a:ed:68:
5a:d5:7d:ec:60:3c:a8:4c:06:8a:58:08:5b:ac:08:bb:40:78:
86:5e:7e:58:db:cf:39:17:77:db:70:2e:4b:63:26:9c:ad:71:
64:3d:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:41 2025 by rpki-client