This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: sDVeyJbxi7hXEZoOCO3G84qU/9ePH3mlg61tcRS3XmY=
Subject key identifier: EA:05:F5:7A:63:BA:EA:4D:6F:5D:A6:49:22:67:F7:98:13:76:90:60
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019AF3F7F688044351D6DED7C9E8AA8976A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 175B
Signing time: Sat 06 Dec 2025 14:01:45 +0000
Manifest this update: Sat 06 Dec 2025 14:01:45 +0000
Manifest next update: Sun 07 Dec 2025 14:01:45 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: Q7pl4fZDDUKinuriON4LTW0tY0jk4MWcSlojPsuau1I=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:f6:88:04:43:51:d6:de:d7:c9:e8:aa:89:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Dec 6 14:01:45 2025 GMT
Not After : Dec 7 14:01:45 2025 GMT
Subject: CN=ea05f57a63baea4d6f5da6492267f79813769060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e4:dd:2d:f9:3c:95:1a:77:2e:bc:5c:a1:
ac:04:f2:36:42:73:d8:be:5f:98:6a:c1:26:de:15:
b7:4e:76:77:7a:e1:87:e2:d5:79:ab:c1:6b:4b:41:
36:a9:c5:55:c4:50:0f:5d:24:92:80:43:68:6e:bc:
97:74:d1:06:7f:58:1d:04:00:a0:40:ce:7b:2d:02:
0b:d0:17:6a:3b:bd:f7:41:73:49:b0:3b:6d:1f:37:
cf:52:61:a9:06:5c:92:af:e2:33:9d:e6:a2:e4:c9:
bd:0a:5a:eb:17:dc:e1:55:da:65:fd:7c:91:6b:5e:
6d:d3:24:ae:5d:b9:b1:39:62:6c:45:31:23:a5:31:
c5:57:c1:77:78:47:4e:d6:d6:cb:1c:fa:5d:7a:86:
71:67:09:89:c6:14:e0:39:12:8b:07:fe:38:85:13:
43:1c:f7:74:9a:5c:73:70:8c:fe:fb:39:d6:7b:dd:
7e:14:2d:18:ac:91:41:ce:74:c6:84:b3:e4:32:f5:
14:4c:b0:ed:ab:0e:c2:ed:df:fb:cb:13:08:2f:5f:
27:d7:ce:36:53:87:fe:f2:34:90:e3:12:56:df:68:
e6:60:1d:6b:a1:20:64:b3:44:f4:83:63:12:68:77:
de:48:c6:d3:8e:3d:3a:08:16:e2:b3:a4:44:a2:1f:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:F5:7A:63:BA:EA:4D:6F:5D:A6:49:22:67:F7:98:13:76:90:60
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:75:ce:f1:4e:af:a5:38:e1:7b:a2:0e:c9:d3:46:3b:8d:
1a:c2:0f:5a:77:6e:8b:41:b7:76:fb:85:36:3c:4b:ab:25:c7:
32:7b:04:3f:dd:98:dc:40:01:49:22:79:60:c6:42:f1:ca:e5:
57:51:fb:42:1d:2e:85:fb:8e:77:04:00:a4:8d:27:e5:32:13:
2f:7a:e9:2d:94:57:a6:9a:f7:6a:2c:15:01:dc:8b:48:5a:b1:
ff:e5:5c:bc:3d:d6:d8:94:6f:2a:5e:d7:ce:34:d3:d2:8b:90:
44:73:8e:a6:17:54:29:59:29:4b:1f:88:4c:fd:97:ef:4b:17:
f2:c5:f1:33:c0:fa:2f:15:05:b7:94:db:f5:dd:7a:2f:e8:d0:
b1:39:81:c1:95:ec:2c:e7:5a:a8:45:76:cc:de:15:49:3f:0e:
e3:44:1c:f2:ee:1d:a7:ca:6d:3c:96:d1:11:d9:8d:5b:e1:69:
02:9f:bd:f0:5a:07:cf:46:3d:43:b1:67:fc:43:c5:e6:81:62:
ca:d6:ef:83:3f:d6:3e:17:3c:d2:b7:8a:4a:80:56:f5:39:20:
a8:75:c3:0e:5b:c9:92:a2:e0:a3:cd:0c:0e:22:f5:6a:7d:2e:
85:3c:ca:70:ed:9d:87:39:0e:07:b0:de:8f:a7:57:30:76:bf:
83:9f:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:31 2025 by rpki-client