This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: ZB9z7ceuVVs0hyRZi/SlBTwWi1l5FthlAeUm3+k1nZM=
Subject key identifier: 4C:4D:CE:89:D7:5B:48:44:EA:A6:0E:BE:7A:8D:9D:0E:EB:A3:CD:CE
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019AF12CF723E3BC1FB3127923449D6F5522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 01:00:47 +0000
Manifest this update: Sat 06 Dec 2025 01:00:47 +0000
Manifest next update: Sun 07 Dec 2025 01:00:47 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: 8I50ymBdzrESwZXrnkURBc7mjPo+WIovA7/UUSzHNFY=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2c:f7:23:e3:bc:1f:b3:12:79:23:44:9d:6f:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Dec 6 01:00:47 2025 GMT
Not After : Dec 7 01:00:47 2025 GMT
Subject: CN=4c4dce89d75b4844eaa60ebe7a8d9d0eeba3cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:a5:48:66:d4:ea:ca:18:55:54:02:d2:e9:
1c:e1:98:2e:f5:bb:44:91:89:4c:54:dc:35:65:69:
d0:c3:aa:bc:06:cf:e0:1f:ae:41:19:5f:76:b7:e4:
87:96:15:5f:05:fc:e9:b0:ce:81:69:6d:9b:bc:2f:
aa:5b:3a:c2:fd:3c:50:71:39:9d:df:06:06:67:4d:
c4:7b:4b:74:67:66:23:af:16:39:5f:1e:ad:aa:06:
3e:5c:5a:55:f0:ac:4b:0f:64:b9:34:a6:b3:00:ef:
17:0b:0b:2d:6e:5d:b8:53:19:52:94:09:f8:80:09:
b2:97:1a:0c:40:e2:d6:ea:ee:2b:44:96:42:65:0a:
5e:68:35:5a:48:d0:3f:e9:12:76:cc:c9:70:5d:ba:
51:30:42:db:f4:b1:5f:a5:c6:e2:88:f2:ea:3e:3f:
c2:59:d2:cb:e7:2f:09:9b:6d:f5:55:9c:14:d8:c8:
e7:32:87:48:0d:9c:88:55:17:4b:a3:e9:97:de:b6:
3e:42:bd:41:c9:d6:d3:0b:68:43:6e:03:73:d8:4b:
57:1e:87:91:38:cc:d1:21:30:93:3a:a4:aa:88:13:
7e:35:92:4e:85:79:f4:2b:ae:d0:8c:1a:f1:22:c5:
14:a5:45:2f:e7:94:96:76:f4:7a:eb:14:54:48:68:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:CE:89:D7:5B:48:44:EA:A6:0E:BE:7A:8D:9D:0E:EB:A3:CD:CE
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:a7:61:f0:22:f9:33:9b:1b:72:79:fa:8e:62:3c:07:f4:
b5:31:52:de:e1:88:df:95:b8:e8:62:fb:8c:70:d4:66:fd:5c:
71:da:ec:46:3d:7a:e8:60:b0:51:71:3c:16:ee:58:7a:42:5e:
08:2e:ed:9e:83:12:3a:6d:21:7c:49:54:67:4d:af:05:48:8c:
43:68:35:7c:90:07:db:17:40:8b:48:f8:a9:d9:ab:7f:64:db:
9a:25:26:00:aa:f5:fe:1d:1d:00:69:cf:57:cd:23:cf:32:b2:
c7:8b:66:e7:59:6a:b0:b6:41:7e:49:3a:67:e9:02:64:3a:44:
11:63:f4:89:cb:c3:10:36:3e:32:cc:11:9f:1e:62:91:ff:4a:
87:b1:48:c3:cf:13:72:bf:c7:f0:82:6b:c5:55:19:60:d3:4a:
5f:95:77:2f:48:67:69:93:4c:9e:16:a8:55:df:b7:b5:fb:82:
2e:7d:f3:29:66:c9:c4:eb:df:d3:6e:7c:bd:d2:aa:73:d8:85:
ac:7f:a3:80:1d:29:fc:a2:d6:42:08:0b:8b:43:15:da:03:9f:
3d:e6:38:9c:c5:e3:62:a6:f6:11:90:a5:47:35:b0:91:d9:d2:
6c:52:ed:1c:85:9e:3f:39:6e:84:e9:8c:f6:3c:3c:05:26:c9:
16:9b:bc:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLPcj47wfsxJ5I0Sdb1UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD
Eyg0YzRkY2U4OWQ3NWI0ODQ0ZWFhNjBlYmU3YThkOWQwZWViYTNjZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh2lSGbU6soYVVQC0ukc4Zgu9btE
kYlMVNw1ZWnQw6q8Bs/gH65BGV92t+SHlhVfBfzpsM6BaW2bvC+qWzrC/TxQcTmd
3wYGZ03Ee0t0Z2YjrxY5Xx6tqgY+XFpV8KxLD2S5NKazAO8XCwstbl24UxlSlAn4
gAmylxoMQOLW6u4rRJZCZQpeaDVaSNA/6RJ2zMlwXbpRMELb9LFfpcbiiPLqPj/C
WdLL5y8Jm231VZwU2MjnModIDZyIVRdLo+mX3rY+Qr1BydbTC2hDbgNz2EtXHoeR
OMzRITCTOqSqiBN+NZJOhXn0K67QjBrxIsUUpUUv55SWdvR66xRUSGhA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExNzonXW0hE6qYOvnqNnQ7ro83OMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkO+nYfAi
+TObG3J5+o5iPAf0tTFS3uGI35W46GL7jHDUZv1ccdrsRj166GCwUXE8Fu5YekJe
CC7tnoMSOm0hfElUZ02vBUiMQ2g1fJAH2xdAi0j4qdmrf2TbmiUmAKr1/h0dAGnP
V80jzzKyx4tm51lqsLZBfkk6Z+kCZDpEEWP0icvDEDY+MswRnx5ikf9Kh7FIw88T
cr/H8IJrxVUZYNNKX5V3L0hnaZNMnhaoVd+3tfuCLn3zKWbJxOvf0258vdKqc9iF
rH+jgB0p/KLWQggLi0MV2gOfPeY4nMXjYqb2EZClRzWwkdnSbFLtHIWePzluhOmM
9jw8BSbJFpu8BQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:59 2025 by rpki-client