This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier: UCZxZaR1mBqs78GHD152OJ0xf1SFvb3M77/eRXgWaf8=
Subject key identifier: CA:20:4B:53:1F:AC:33:FA:2A:AE:0A:86:D1:31:49:6C:77:A7:B6:F2
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 019AF6531B458FDA51DC719C53ABF6156B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number: 176E
Signing time: Sun 07 Dec 2025 01:00:32 +0000
Manifest this update: Sun 07 Dec 2025 01:00:32 +0000
Manifest next update: Mon 08 Dec 2025 01:00:32 +0000
Files and hashes: 1: 3wNNo-iI2pc3szTShzwRJQcPQ9g.roa (hash: UlE7Git4bpx6FDGabnpMDUtAooHhFae2TZHIhuwKgXk=)
2: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (hash: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=)
3: P7UI9wbXQO7767Ee_OeO-FbHpEk.roa (hash: 3nnbFB8QPYfC95SG+310oNK9akUzhHQ/muxTMob6BTg=)
4: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (hash: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=)
5: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: whPGaFer4HwHUDhnYrHUivblQuGVSdOAlFA3ErK7KPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:53:1b:45:8f:da:51:dc:71:9c:53:ab:f6:15:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Dec 7 01:00:32 2025 GMT
Not After : Dec 8 01:00:32 2025 GMT
Subject: CN=ca204b531fac33fa2aae0a86d131496c77a7b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:0a:7e:a0:f9:8b:c1:10:61:59:0b:de:1b:
eb:fa:da:d2:dd:ff:39:64:ca:7b:e0:1a:0d:92:3b:
9b:18:db:26:da:cf:79:2e:2a:55:1d:bf:ca:1d:98:
ba:91:f7:71:b3:5f:f1:8a:dc:f2:c1:67:8b:9d:5e:
f6:e4:78:1b:57:86:96:75:f6:94:d7:01:34:b8:f7:
7a:55:0c:90:17:10:ef:a3:d6:05:34:c4:2d:4e:f8:
b0:13:70:48:41:04:d1:83:a7:40:27:3d:11:4e:d2:
10:19:e6:41:74:f8:bd:b7:65:d7:87:5a:bc:53:82:
89:01:2f:77:f8:15:f8:5d:e8:e1:42:63:ea:e4:e3:
11:93:33:05:36:a2:f7:41:f5:81:a2:a4:6c:d9:00:
12:0a:24:0d:4d:bd:4d:9b:63:0d:8f:2f:fb:e8:3e:
ec:b0:6f:52:ca:f2:bf:d5:b0:23:12:19:9f:ad:1b:
ee:c1:8b:d0:86:0f:c5:df:c3:6f:1b:38:e5:d2:ff:
d1:04:c6:ec:ed:14:f5:24:a2:33:ea:57:d5:57:a1:
d4:cb:75:02:bc:0c:15:c6:14:18:39:f1:b8:05:3c:
53:bc:d2:bc:b1:1b:ec:6d:ac:9e:e7:05:19:52:dd:
04:53:9f:39:ff:09:08:5c:bd:54:07:89:a1:bd:e5:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:4B:53:1F:AC:33:FA:2A:AE:0A:86:D1:31:49:6C:77:A7:B6:F2
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:be:4c:54:b1:78:6c:e8:f0:a3:62:1d:3b:5c:fd:50:da:47:
d8:76:a7:e8:e4:d0:3e:c8:5a:c4:08:19:10:f0:0a:72:ef:80:
30:12:a5:e2:76:12:34:3f:11:e4:5e:1d:53:9a:68:8e:fd:5e:
ee:6d:8e:76:50:82:9d:a1:a1:ad:57:72:e3:8b:05:e2:14:2d:
e4:c7:c0:a8:c2:4c:1b:86:b1:b8:97:61:3d:5c:d6:6a:5e:42:
a5:f1:ad:b2:9e:3d:84:c6:4f:5c:3d:db:28:db:15:12:fd:0f:
be:10:ff:d2:6e:6c:bd:37:8e:a9:26:f5:26:b4:80:6e:6a:b2:
49:df:01:0c:62:1e:f1:cd:1e:77:00:e9:10:e7:48:d6:32:77:
cd:0d:48:fe:5f:c6:2d:2d:80:56:69:27:c9:dc:5c:54:4a:62:
bd:4f:cc:5e:44:97:66:ce:81:44:f7:f4:0c:5a:3e:73:16:db:
e9:5d:c0:70:67:cd:8b:73:15:c3:3e:f3:6a:ca:4f:fe:63:85:
1f:15:eb:4c:f0:95:60:24:d9:2d:f1:59:f5:e9:f1:d1:07:50:
34:28:6b:9e:2e:75:a8:0f:87:c6:05:e2:53:b5:0d:7d:f6:fb:
ed:ec:98:68:12:1c:7a:af:f8:71:7f:6f:d4:ff:df:a0:07:05:
a7:34:40:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2UxtFj9pR3HGcU6v2FWt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjUxMjA3MDEwMDMyWhcNMjUxMjA4MDEwMDMyWjAzMTEwLwYDVQQD
EyhjYTIwNGI1MzFmYWMzM2ZhMmFhZTBhODZkMTMxNDk2Yzc3YTdiNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vwKfqD5i8EQYVkL3hvr+trS3f85
ZMp74BoNkjubGNsm2s95LipVHb/KHZi6kfdxs1/xitzywWeLnV725HgbV4aWdfaU
1wE0uPd6VQyQFxDvo9YFNMQtTviwE3BIQQTRg6dAJz0RTtIQGeZBdPi9t2XXh1q8
U4KJAS93+BX4XejhQmPq5OMRkzMFNqL3QfWBoqRs2QASCiQNTb1Nm2MNjy/76D7s
sG9SyvK/1bAjEhmfrRvuwYvQhg/F38NvGzjl0v/RBMbs7RT1JKIz6lfVV6HUy3UC
vAwVxhQYOfG4BTxTvNK8sRvsbaye5wUZUt0EU585/wkIXL1UB4mhveWTlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMogS1MfrDP6Kq4KhtExSWx3p7byMB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuL5MVLF4
bOjwo2IdO1z9UNpH2Han6OTQPshaxAgZEPAKcu+AMBKl4nYSND8R5F4dU5pojv1e
7m2OdlCCnaGhrVdy44sF4hQt5MfAqMJMG4axuJdhPVzWal5CpfGtsp49hMZPXD3b
KNsVEv0PvhD/0m5svTeOqSb1JrSAbmqySd8BDGIe8c0edwDpEOdI1jJ3zQ1I/l/G
LS2AVmknydxcVEpivU/MXkSXZs6BRPf0DFo+cxbb6V3AcGfNi3MVwz7zaspP/mOF
HxXrTPCVYCTZLfFZ9enx0QdQNChrni51qA+HxgXiU7UNffb77eyYaBIceq/4cX9v
1P/foAcFpzRAYQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:14 2025 by rpki-client