This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier: yLwe2zZtwrFBh2nq/ReXCUiXIfPjPtza+VKNDU0Zgn0=
Subject key identifier: E6:4E:E7:18:AB:BF:B2:47:68:BF:D3:AE:5C:67:AB:FC:2F:F5:43:75
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019AF164064F727EEBA97B05D244588A3A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number: 1776
Signing time: Sat 06 Dec 2025 02:00:55 +0000
Manifest this update: Sat 06 Dec 2025 02:00:55 +0000
Manifest next update: Sun 07 Dec 2025 02:00:55 +0000
Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=)
2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=)
3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=)
4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=)
5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=)
6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=)
7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=)
8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=)
9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=)
10: sAE-Hl68vnhnSeOEkdOvbCITI3s.roa (hash: +zv5NFL3GNnw57mEaHIY7DHrB2enuzSZniAXWNA14go=)
11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: wLTlWgPQIg/dkwn0aFlL0c/juazlTgMpGtW0fSiNqRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:06:4f:72:7e:eb:a9:7b:05:d2:44:58:8a:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Dec 6 02:00:55 2025 GMT
Not After : Dec 7 02:00:55 2025 GMT
Subject: CN=e64ee718abbfb24768bfd3ae5c67abfc2ff54375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:d9:e3:3e:38:f3:c2:b1:fb:a5:06:36:6e:
47:27:3b:8c:e8:f1:1e:9e:7e:a4:c7:59:37:02:89:
0c:11:47:1e:15:e6:60:00:48:cb:e3:75:47:ec:12:
40:71:49:a2:b9:63:22:d2:b8:6f:b3:50:0e:07:1b:
da:67:05:b4:8c:52:46:21:9b:01:ec:bf:52:fc:fd:
3e:5d:25:a1:9c:3e:75:d9:19:d1:c0:9f:a4:03:14:
08:e1:4d:39:0b:6e:1e:4c:bb:73:49:ca:2e:d0:f7:
f2:40:43:43:19:4b:46:b2:5f:8a:7f:ba:77:7b:73:
64:3d:f6:fb:ab:39:dc:cd:9e:2c:7c:77:db:87:f4:
50:cf:f4:de:46:6b:f5:99:cc:24:ff:f4:1b:fa:3c:
75:de:45:3b:a5:05:59:e1:69:22:b3:0e:f9:01:01:
31:50:23:a2:16:ae:58:d5:75:12:3d:99:9f:8c:6a:
84:f0:e5:a9:ce:f3:83:6d:a6:a3:b5:33:02:43:01:
31:bf:a9:45:6b:61:ad:72:7e:af:bb:c0:15:74:65:
d1:ec:18:1c:72:1f:ad:80:14:5e:5c:a5:25:e6:02:
c9:e9:83:6c:9b:c9:d4:e0:cb:ba:a0:67:e3:fd:53:
4b:d3:e6:b0:23:53:c6:a1:18:ca:50:f3:35:1e:c5:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:E7:18:AB:BF:B2:47:68:BF:D3:AE:5C:67:AB:FC:2F:F5:43:75
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2f:2f:13:e5:e2:5f:cc:e5:16:59:4a:c8:e6:64:93:95:08:
72:f3:19:94:0c:b5:9c:42:11:11:89:5a:52:62:c3:2a:76:7a:
cd:cd:1e:ec:33:49:0f:96:33:e5:0f:5e:9f:ce:a2:d6:21:cb:
7f:66:46:98:d7:2d:61:9e:ce:47:1e:26:13:75:8f:2c:74:d4:
64:8f:c5:e2:58:94:52:6d:35:7a:36:ab:a1:9d:79:ae:98:98:
f0:2a:5c:ee:5d:ab:64:1c:a6:6f:85:4a:18:35:1d:76:0b:46:
8b:a2:e2:1d:b4:2d:51:a4:71:f2:ad:aa:1f:fc:c7:db:fc:33:
00:8a:a3:1d:25:1b:75:33:49:99:98:87:2f:91:0a:2d:ff:c1:
ea:1c:c7:e4:80:f1:18:62:7f:11:09:75:29:44:7d:6a:a9:ec:
19:55:94:06:e6:1f:81:7c:5f:a5:a2:7e:35:16:69:7a:6c:ea:
99:d4:fb:95:0e:10:d1:c9:26:bb:38:03:ac:23:bf:21:29:de:
02:50:71:f2:16:41:d8:83:36:d2:7c:1c:19:bb:a6:b5:76:70:
48:79:b2:42:b2:38:fa:60:b6:8c:97:78:be:c0:2c:d8:25:9a:
cb:da:28:6e:8a:f7:cb:7b:61:1a:96:fd:5c:3d:bc:a8:11:6b:
5a:bd:6e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZAZPcn7rqXsF0kRYijo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw
YzE0NWEwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD
EyhlNjRlZTcxOGFiYmZiMjQ3NjhiZmQzYWU1YzY3YWJmYzJmZjU0Mzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMrZ4z4488Kx+6UGNm5HJzuM6PEe
nn6kx1k3AokMEUceFeZgAEjL43VH7BJAcUmiuWMi0rhvs1AOBxvaZwW0jFJGIZsB
7L9S/P0+XSWhnD512RnRwJ+kAxQI4U05C24eTLtzScou0PfyQENDGUtGsl+Kf7p3
e3NkPfb7qznczZ4sfHfbh/RQz/TeRmv1mcwk//Qb+jx13kU7pQVZ4Wkisw75AQEx
UCOiFq5Y1XUSPZmfjGqE8OWpzvODbaajtTMCQwExv6lFa2Gtcn6vu8AVdGXR7Bgc
ch+tgBReXKUl5gLJ6YNsm8nU4Mu6oGfj/VNL0+awI1PGoRjKUPM1HsWjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZO5xirv7JHaL/Trlxnq/wv9UN1MB8GA1UdIwQY
MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt
ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0
LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS8vE+Xi
X8zlFllKyOZkk5UIcvMZlAy1nEIREYlaUmLDKnZ6zc0e7DNJD5Yz5Q9en86i1iHL
f2ZGmNctYZ7ORx4mE3WPLHTUZI/F4liUUm01ejaroZ15rpiY8Cpc7l2rZBymb4VK
GDUddgtGi6LiHbQtUaRx8q2qH/zH2/wzAIqjHSUbdTNJmZiHL5EKLf/B6hzH5IDx
GGJ/EQl1KUR9aqnsGVWUBuYfgXxfpaJ+NRZpemzqmdT7lQ4Q0ckmuzgDrCO/ISne
AlBx8hZB2IM20nwcGbumtXZwSHmyQrI4+mC2jJd4vsAs2CWay9oobor3y3thGpb9
XD28qBFrWr1ulg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:28:56 2025 by rpki-client