This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: MFM57EgfEh/meNEQ/h8HSQXZX40I5kS7+h32WaDBM0Y=
Subject key identifier: 89:D8:19:4E:F7:FA:7D:1A:1B:2B:85:58:09:82:9A:6C:CF:78:3D:71
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019AF0F5D9C25AD0B3AF639C9F1833A25FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0ED0
Signing time: Sat 06 Dec 2025 00:00:35 +0000
Manifest this update: Sat 06 Dec 2025 00:00:35 +0000
Manifest next update: Sun 07 Dec 2025 00:00:35 +0000
Files and hashes: 1: 324h0IVENhrz26-GJdTRWk6dqhg.roa (hash: K4I0DJTQlqLsiypVZHI8ileZfP3AjOvHxCfU/BDE5JI=)
2: RtsZiXUfC477P_DYX-3X5X34UDQ.roa (hash: LLFpj2KpcJvUNnJuvkdnNa/s8rmD7AkhPqo4J1vK6IA=)
3: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: B+kBML9qdLJ6t4LBGibfk897xZx8A1k1kf/wwFzjXPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:f5:d9:c2:5a:d0:b3:af:63:9c:9f:18:33:a2:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Dec 6 00:00:35 2025 GMT
Not After : Dec 7 00:00:35 2025 GMT
Subject: CN=89d8194ef7fa7d1a1b2b855809829a6ccf783d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:7f:22:c4:c9:a4:19:06:08:35:39:c2:ab:
24:01:55:7d:46:76:af:4e:17:6c:d8:28:7b:7d:ec:
5c:5b:fd:84:ac:1b:e4:65:f9:6c:32:f4:f0:d0:59:
c5:4c:ca:bc:22:17:39:1b:00:74:f9:61:b6:de:05:
7b:0f:38:e7:79:33:e4:63:f2:c1:fd:d4:47:d2:4b:
6a:c7:48:51:44:1e:e2:0f:7a:b3:89:35:74:07:85:
9b:6d:6c:e1:1a:6f:ba:fd:e5:dc:c6:10:40:b5:cf:
79:db:44:6b:19:8b:11:8c:6d:e0:37:47:21:d7:5a:
f0:49:9e:5c:89:c5:ef:36:dc:50:fc:a6:6a:11:42:
39:b8:b3:e5:26:6a:43:c4:1b:89:7c:f5:15:cd:d9:
48:d6:54:91:a9:7e:1c:46:7e:9c:16:87:51:ee:c6:
be:92:72:39:02:be:5f:7a:3d:5c:cf:54:d4:95:cb:
6d:e5:3a:05:d6:1f:0d:52:b0:87:40:0c:69:a0:73:
84:48:3f:92:2f:c2:fd:a8:b9:3a:92:e6:e5:bb:93:
68:36:53:af:a4:de:a9:f2:8b:92:cf:7d:cb:95:a6:
04:88:5c:d3:88:5f:dc:80:a6:62:0e:6c:b6:a3:d1:
78:2e:97:05:54:29:4b:b9:c8:f2:e9:0c:32:ad:20:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:19:4E:F7:FA:7D:1A:1B:2B:85:58:09:82:9A:6C:CF:78:3D:71
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2c:ff:27:9c:82:56:11:53:50:0e:64:9f:81:a2:a5:24:42:
ea:80:2d:52:64:a5:de:3f:8e:0f:f1:ea:7d:d9:54:35:04:2a:
47:be:aa:e2:b9:9c:42:19:ea:57:3a:8c:0f:17:c7:e2:d7:7d:
7e:a1:c6:c8:4b:42:e5:a8:92:67:87:19:1a:8c:1e:bf:96:ad:
f7:f7:20:ef:71:9b:e8:a0:25:56:e1:fe:86:a5:8e:f3:83:f2:
85:a7:c9:92:9e:5c:a6:04:23:4f:b5:f0:f1:49:22:70:7d:13:
a8:5f:47:2c:50:83:01:8a:ed:79:4f:a8:a1:1a:f4:02:0a:bd:
6b:46:48:94:eb:55:b2:2c:26:d5:4b:12:f7:19:58:4e:ee:97:
e8:6f:1f:ce:04:09:25:65:82:c1:01:65:a5:5b:37:ef:6e:2b:
1f:f1:5d:3d:36:fe:fb:c4:6f:bf:ac:48:4a:ab:c5:80:d9:07:
97:1d:06:b5:b6:4e:60:ef:1d:89:29:ee:c3:6d:04:0a:4b:61:
3e:a4:6e:ae:9e:11:5c:61:68:93:3c:ab:26:5b:21:22:31:6b:
9f:6b:7a:dc:49:9b:87:3f:a7:4c:c6:c0:0a:6e:58:53:31:7e:
47:26:bf:1c:5f:99:fc:e0:6a:fc:28:d1:c5:83:f7:3f:93:9b:
17:0e:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:55 2025 by rpki-client