This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: /2IB/kCyLGaot5nL2byU/LdX+TAwtd+aNoG4XVJEfBc=
Subject key identifier: 57:7F:AA:21:66:72:E3:24:04:BE:97:F1:37:AE:C7:5E:59:D7:86:64
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 019AF2093B60EE2F134FF542815A43E77726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 1777
Signing time: Sat 06 Dec 2025 05:01:22 +0000
Manifest this update: Sat 06 Dec 2025 05:01:22 +0000
Manifest next update: Sun 07 Dec 2025 05:01:22 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa (hash: MPnb9N7UkomJ9P+V+pIw5n5BQ/plMrrPkuECb2IegXo=)
4: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: OAG3NEKNlt9ZmXH2JYagguBq5ITCUjl7peO9T0KxdUg=)
5: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
6: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:3b:60:ee:2f:13:4f:f5:42:81:5a:43:e7:77:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Dec 6 05:01:22 2025 GMT
Not After : Dec 7 05:01:22 2025 GMT
Subject: CN=577faa216672e32404be97f137aec75e59d78664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:d6:95:09:f6:26:d5:b9:20:01:ba:31:ff:
39:43:78:69:87:55:a4:a4:f0:52:5d:66:e0:17:6a:
71:70:75:fb:af:4d:20:60:e6:8c:11:a2:b6:3c:d3:
02:93:2c:8f:44:94:b5:58:ce:89:0a:ec:4f:2c:df:
d7:5d:fd:6b:c0:ff:d5:d7:1c:e3:8e:b1:8e:99:48:
45:18:b3:39:bf:6b:11:8c:43:f5:cb:c8:b6:fd:97:
d5:17:cc:b2:0a:f8:64:c4:8a:e8:eb:65:5e:26:a4:
3b:34:0a:33:82:27:b0:0b:5b:6f:dc:d0:7f:d3:b5:
82:94:d2:88:8a:04:7d:b1:d4:7a:a8:3d:ad:2c:ba:
6b:c2:8c:74:de:19:e0:17:71:cd:28:ba:9b:8c:11:
9e:fe:36:aa:4e:77:e4:92:16:6c:ae:df:e2:66:f3:
af:09:ad:bb:37:f6:68:8a:4f:f5:07:2f:1d:c6:e1:
c9:e9:46:cb:9d:7b:bd:7d:d9:e4:69:af:7a:00:12:
8d:3a:89:17:67:b6:d6:09:85:66:3c:fa:31:80:d7:
8c:f9:06:b1:8e:f1:f4:da:87:9e:94:8b:8d:2b:c9:
7b:57:92:62:96:d8:da:c5:2d:f1:99:22:d4:47:92:
0f:a4:86:90:98:8a:e4:72:26:f8:50:28:14:a4:e6:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:AA:21:66:72:E3:24:04:BE:97:F1:37:AE:C7:5E:59:D7:86:64
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:72:cd:36:32:75:cc:47:3f:c0:70:9d:08:62:06:82:a1:
b4:76:db:dd:76:2d:14:8f:fe:f9:26:bc:7f:27:fa:a3:6c:ad:
b2:e3:c6:6a:19:ee:92:a1:1d:43:78:8a:82:d8:53:45:1c:99:
1a:31:14:df:0a:bb:2f:fa:6f:15:1e:88:df:d0:83:c4:8b:6e:
fa:4c:4e:ad:91:7f:64:37:39:a5:50:6c:08:7b:bd:d4:6b:57:
3f:34:32:22:37:1b:a6:7d:83:c5:44:c3:3e:3b:b8:81:2f:98:
77:08:ed:fa:20:20:a0:b2:d3:0d:c8:7b:96:dd:1e:dc:23:c4:
9a:6b:6b:99:73:16:97:ab:f1:62:f2:79:13:71:71:8c:14:aa:
10:f9:82:ac:fa:68:a9:43:f3:08:d1:17:6b:ad:2d:7a:1b:9f:
89:e6:6d:d8:ed:26:1a:29:22:63:2a:45:04:2d:7c:b2:50:42:
00:70:53:c5:41:d0:f9:db:bc:1e:e7:ff:c3:61:55:d8:a7:55:
f7:81:71:55:76:07:ee:71:4d:20:ab:3f:ec:21:9e:4d:70:a6:
1e:9a:09:18:9e:3d:91:74:97:80:f9:bb:5e:d7:36:6d:6d:16:
7e:30:7c:33:70:bf:4d:90:d8:ea:de:33:2e:db:a7:ab:70:ac:
81:44:00:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCTtg7i8TT/VCgVpD53cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD
Eyg1NzdmYWEyMTY2NzJlMzI0MDRiZTk3ZjEzN2FlYzc1ZTU5ZDc4NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j/WlQn2JtW5IAG6Mf85Q3hph1Wk
pPBSXWbgF2pxcHX7r00gYOaMEaK2PNMCkyyPRJS1WM6JCuxPLN/XXf1rwP/V1xzj
jrGOmUhFGLM5v2sRjEP1y8i2/ZfVF8yyCvhkxIro62VeJqQ7NAozgiewC1tv3NB/
07WClNKIigR9sdR6qD2tLLprwox03hngF3HNKLqbjBGe/jaqTnfkkhZsrt/iZvOv
Ca27N/Zoik/1By8dxuHJ6UbLnXu9fdnkaa96ABKNOokXZ7bWCYVmPPoxgNeM+Qax
jvH02oeelIuNK8l7V5JiltjaxS3xmSLUR5IPpIaQmIrkcib4UCgUpOZpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd/qiFmcuMkBL6X8Teux15Z14ZkMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGVyzTYy
dcxHP8BwnQhiBoKhtHbb3XYtFI/++Sa8fyf6o2ytsuPGahnukqEdQ3iKgthTRRyZ
GjEU3wq7L/pvFR6I39CDxItu+kxOrZF/ZDc5pVBsCHu91GtXPzQyIjcbpn2DxUTD
Pju4gS+Ydwjt+iAgoLLTDch7lt0e3CPEmmtrmXMWl6vxYvJ5E3FxjBSqEPmCrPpo
qUPzCNEXa60tehufieZt2O0mGikiYypFBC18slBCAHBTxUHQ+du8Huf/w2FV2KdV
94FxVXYH7nFNIKs/7CGeTXCmHpoJGJ49kXSXgPm7Xtc2bW0WfjB8M3C/TZDY6t4z
Ltunq3CsgUQAVA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:53:58 2025 by rpki-client