This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: csIjN4vJCHRtNoBothoXpaC8dbTz06DZBAS7PdFCA4Q=
Subject key identifier: C8:EC:CC:61:0B:80:29:0E:00:41:79:E1:94:CC:5A:1E:2C:FE:B4:A6
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019AF12CC893A806D8E9F3CDF611B310575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 01:00:35 +0000
Manifest this update: Sat 06 Dec 2025 01:00:35 +0000
Manifest next update: Sun 07 Dec 2025 01:00:35 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: 5ogwcqbE1Kt6sZNzYjCnd5oCgjtbX6czj2OaKY2wt+A=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2c:c8:93:a8:06:d8:e9:f3:cd:f6:11:b3:10:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Dec 6 01:00:35 2025 GMT
Not After : Dec 7 01:00:35 2025 GMT
Subject: CN=c8eccc610b80290e004179e194cc5a1e2cfeb4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:5a:2a:c0:e9:64:30:35:aa:58:f5:63:d4:
6e:54:a1:40:c0:b1:e9:d7:d2:78:66:85:b6:2b:06:
35:62:a4:d4:e1:c9:7a:32:62:62:16:03:b5:0f:37:
16:07:e9:2b:72:34:a4:25:ae:15:32:29:a4:ce:f4:
e5:c6:41:5a:c3:11:d5:c6:0b:a4:d1:a7:c6:b1:c2:
72:85:14:0d:7a:5c:0d:c1:05:4d:6a:35:b0:38:e5:
76:f5:5a:a3:d4:59:c9:d6:39:ba:e2:f6:cf:cf:27:
83:fd:e1:c7:c4:32:4c:28:77:2b:46:d3:98:61:2e:
41:27:8c:9a:30:75:34:7e:32:2f:e0:74:d7:5b:ed:
3b:17:a1:e4:6d:36:15:90:a4:40:8e:b3:76:12:7c:
40:5c:3a:50:ee:b4:30:70:da:0d:09:80:8f:11:7e:
40:a0:26:2f:81:18:b1:0c:e6:69:16:11:c2:42:18:
fc:12:cd:f3:d6:05:7b:22:47:e6:e5:5e:e1:ca:44:
c6:bb:00:82:20:dc:66:36:5b:41:01:78:35:d3:7a:
64:0c:5e:75:47:a1:68:75:e3:99:a8:ad:54:26:ce:
2c:a0:29:ef:77:be:fd:42:d3:9a:24:74:3c:de:ef:
5e:a8:66:ec:23:b8:1b:ab:80:7d:6f:9c:45:a4:db:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:CC:61:0B:80:29:0E:00:41:79:E1:94:CC:5A:1E:2C:FE:B4:A6
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:08:be:b9:79:1f:7f:48:a2:a5:06:67:a3:d6:a7:36:42:
99:8c:bf:be:c1:c5:7b:f4:37:92:34:62:35:b1:eb:bf:f1:c8:
af:60:3e:99:03:fe:2c:4b:3e:83:62:55:7a:75:eb:9a:37:4a:
c3:83:01:03:9b:34:88:82:1c:c7:5f:d3:29:ec:d3:66:c7:55:
0d:17:df:8e:1a:bf:29:46:10:a1:ad:80:46:53:6d:21:e2:94:
61:ed:a2:d9:0f:7b:a8:85:f9:13:9c:95:06:19:0d:40:47:cf:
ea:80:3b:ed:45:05:53:cd:be:3d:79:3b:9b:cf:b4:97:6d:61:
00:a0:07:12:de:4b:9a:cc:09:90:7e:e7:f9:e2:51:f9:bc:58:
f5:30:70:c1:e1:b9:fe:ae:b3:fb:fb:c6:97:cb:f6:b9:17:b3:
b9:f9:c2:94:3d:4f:55:93:c9:c0:a2:55:b2:c4:5d:44:ae:a8:
f4:b5:fe:b9:70:ad:93:3a:d0:de:64:71:a9:a2:b8:7e:1d:fa:
ff:b7:81:d7:1a:59:3c:e2:51:78:a0:b6:9a:23:64:de:7d:30:
da:45:6b:5a:93:70:a3:2b:e5:76:37:1e:d4:52:ec:04:ed:90:
49:c4:9d:0a:40:cf:0f:00:60:72:08:0a:d9:2c:cc:00:1c:ea:
4f:1f:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:57 2025 by rpki-client