This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: sd8HE+WUFBZjWaWWvE16fGGIF8lARC20nnNm+76ch/w=
Subject key identifier: 4A:09:11:3F:C8:D7:33:DC:49:97:84:D1:21:69:A6:51:3C:58:A5:F7
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 019AF50B851A3664BA7B2D9F1000CD0779FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0E45
Signing time: Sat 06 Dec 2025 19:02:43 +0000
Manifest this update: Sat 06 Dec 2025 19:02:43 +0000
Manifest next update: Sun 07 Dec 2025 19:02:43 +0000
Files and hashes: 1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: nZ71/hHMluSgsrE6pakIh+r9o9eF+rViffFWXG2ZIcs=)
3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:85:1a:36:64:ba:7b:2d:9f:10:00:cd:07:79:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Dec 6 19:02:43 2025 GMT
Not After : Dec 7 19:02:43 2025 GMT
Subject: CN=4a09113fc8d733dc499784d12169a6513c58a5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:df:0d:95:69:01:0a:c2:54:74:d1:3f:74:
c1:7e:e5:b8:1c:23:04:3f:c9:cf:56:f8:23:39:53:
43:b2:78:c2:86:0d:9e:43:a5:cc:71:f0:3d:43:0c:
75:63:65:d5:86:c1:6f:06:1a:f7:1a:f8:62:20:b3:
10:4f:c7:b4:c9:65:21:42:3e:a8:c6:af:7e:cb:e6:
8b:2f:5f:84:54:9f:c1:c5:45:67:dc:cc:64:d6:e5:
74:44:99:90:20:66:37:5b:0c:fb:1f:ca:0b:4e:98:
7b:43:bb:1d:0c:24:2b:76:bf:d3:47:5e:eb:b0:1e:
da:fc:38:b0:cc:2b:20:7e:2c:5f:a7:0c:f3:52:80:
57:1a:bc:54:97:21:0c:56:cf:11:68:81:39:4d:aa:
22:c8:83:06:a4:f8:da:f9:d5:9b:5a:00:7f:5d:1d:
48:d3:5f:15:55:a6:40:7f:61:31:bc:83:b2:bf:42:
b0:19:0e:38:a1:a5:ee:ff:de:de:af:48:74:b7:cc:
cd:25:86:26:07:3f:65:8a:8e:29:f4:f8:7a:e0:15:
b6:bf:08:2e:cb:0f:8e:ba:37:b0:f3:a7:ad:26:86:
c4:7a:0a:89:0c:05:7b:1a:7e:fe:bf:4c:93:c7:a6:
53:2a:2a:e3:de:a3:d6:3c:e8:a7:f6:5e:88:0d:3e:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:11:3F:C8:D7:33:DC:49:97:84:D1:21:69:A6:51:3C:58:A5:F7
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:1b:1b:34:b2:af:cd:7a:8f:e3:2b:25:4c:a2:86:40:10:
96:26:37:c4:c9:4e:45:13:ef:48:74:1c:bc:61:eb:9e:4f:23:
7f:7c:5a:63:4c:08:61:a9:8e:3b:28:6b:cd:02:24:39:22:5a:
e3:a5:ef:c8:18:46:3f:a0:f9:90:e2:32:a7:e2:ae:a9:86:4d:
4d:8c:f5:e5:dd:58:cd:1c:d5:ed:95:93:c8:be:9b:11:f2:f3:
d0:51:bf:d6:20:df:21:6f:3d:98:f6:1c:2c:bb:0b:7b:22:2b:
a4:9a:73:43:8f:52:21:ac:d5:a2:b0:bb:a6:12:16:82:c3:1f:
45:92:ee:b8:4a:59:ff:df:a6:47:8e:9e:3e:cb:e7:7d:27:2b:
ad:03:b1:e7:8d:f5:90:f7:7a:6d:df:40:d3:50:95:cd:2a:a6:
ac:80:6f:b8:48:a6:73:40:01:d4:55:a1:64:88:72:e9:5a:af:
91:1b:05:c1:97:3b:54:22:0b:1a:b9:0a:f9:c1:8e:74:16:9b:
e9:9b:c9:d4:b5:d2:a9:1e:28:2c:19:5a:d2:41:2d:82:e8:8a:
e5:38:81:99:17:d0:12:a9:1d:dd:8f:9d:56:74:c3:86:0f:34:
70:16:be:b6:e1:ef:8c:81:f4:48:0f:a7:d3:58:87:6b:d9:4c:
e3:90:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:12:19 2025 by rpki-client