This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: 3/EyEDi4w8bcJvu8HhkVuCs+FWr+U/5kGaSOfXSigAE=
Subject key identifier: C7:46:D4:28:79:6C:8C:8A:17:73:A9:ED:41:03:53:33:D7:F8:61:4E
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019AF12D05CED5CC17021C8D1F2C6AE2A6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 15B7
Signing time: Sat 06 Dec 2025 01:00:50 +0000
Manifest this update: Sat 06 Dec 2025 01:00:50 +0000
Manifest next update: Sun 07 Dec 2025 01:00:50 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: X2Ciu8FEb2EP96A4jDFbe7ArCS3QoxgRrcjyufwGLy0=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:05:ce:d5:cc:17:02:1c:8d:1f:2c:6a:e2:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Dec 6 01:00:50 2025 GMT
Not After : Dec 7 01:00:50 2025 GMT
Subject: CN=c746d428796c8c8a1773a9ed41035333d7f8614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:ea:89:ac:45:ae:52:e1:52:4f:16:e3:85:
e1:f1:96:68:7f:09:eb:2f:13:0d:a0:ee:b7:b5:eb:
01:08:8b:06:25:a4:58:9e:fe:95:ea:e2:b9:7d:9f:
27:32:b8:ad:07:ea:1e:5b:3f:8f:eb:e7:93:d9:f9:
6a:20:16:6e:71:0a:7c:5e:55:41:0d:f7:b7:e8:90:
49:17:32:eb:12:8a:67:e1:55:90:ff:96:12:fa:d7:
97:03:db:3e:8f:35:39:b1:61:5d:13:64:a8:8f:d6:
3a:e6:03:a0:73:70:ad:60:d7:8f:ed:66:b7:5b:a9:
94:ce:fe:27:4e:5f:23:bd:5e:c9:13:e2:dc:45:f6:
4b:31:3f:c9:c2:bb:2f:ed:13:dd:55:30:68:f6:6e:
22:19:63:3b:6a:ec:d5:fe:de:83:08:d2:ec:c3:e2:
1a:b3:75:1c:18:08:e9:fa:6b:71:7b:16:19:68:4b:
1b:60:e2:8d:29:b2:1b:33:79:c3:af:7a:37:c0:4c:
ba:ec:50:b6:02:3c:e0:3f:8c:87:44:a0:69:00:b7:
fe:1f:88:5f:42:f1:0d:bf:ab:ea:d8:f0:da:e3:b2:
0d:88:3e:bf:11:8c:1e:76:cf:3c:d0:66:67:69:46:
97:74:e2:1c:d8:d2:aa:c2:2c:1f:aa:3c:91:22:15:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:D4:28:79:6C:8C:8A:17:73:A9:ED:41:03:53:33:D7:F8:61:4E
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:5d:5c:b2:da:e9:b4:47:e1:55:ef:40:3e:51:89:71:6c:
6e:e2:74:ae:5d:45:41:df:2e:c9:00:10:6b:ea:ee:aa:b9:e1:
8f:69:3d:3a:92:18:01:eb:1d:f6:b2:ca:1c:19:aa:cb:2d:00:
2e:d8:4c:5d:c0:55:10:cd:d5:df:b6:ac:db:42:f9:ec:14:3b:
fc:4c:b4:fd:5f:f9:10:01:12:46:4e:40:ef:95:49:eb:f8:d8:
82:a4:ad:dd:11:a0:6d:2e:1f:37:dd:0b:87:73:4e:09:d4:b0:
61:2d:9b:08:13:3c:0c:0d:4f:c5:85:10:f1:53:dc:d4:5e:06:
42:50:f9:39:25:b3:4d:01:aa:90:90:a9:9b:7f:2e:ca:49:65:
38:b5:7d:a2:01:e2:67:da:aa:00:8d:fc:d4:9b:cd:0a:ab:15:
48:60:03:fb:a8:93:98:2e:fe:dc:86:63:07:90:36:de:ec:47:
7b:7b:ee:25:11:12:99:29:e2:47:4a:4d:be:ee:97:18:3e:de:
ff:d3:d6:b4:c1:42:10:e7:55:86:b8:eb:80:59:9d:a9:3d:76:
7a:70:91:99:b6:a1:0a:0b:e7:19:3c:79:c2:32:e7:f0:4f:52:
45:05:2d:7f:11:f2:83:e5:81:3c:d0:6f:9c:ed:00:fa:e2:27:
5a:ef:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:18:39 2025 by rpki-client