This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: 4d8p1PT/NpvUn7167O/dBoylD1bu5NDsPqi7wB2UpEg=
Subject key identifier: B0:48:E0:85:91:64:99:98:83:1D:A2:F1:E4:FB:75:15:1F:03:DD:1C
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019AF164922A83DACB9AA98A173FD866F110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 02:01:31 +0000
Manifest this update: Sat 06 Dec 2025 02:01:31 +0000
Manifest next update: Sun 07 Dec 2025 02:01:31 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: 0g5HVLF/P/fU63WmbFGg9H7to8VpFCiq2lhF7QJsFB4=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:92:2a:83:da:cb:9a:a9:8a:17:3f:d8:66:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Dec 6 02:01:31 2025 GMT
Not After : Dec 7 02:01:31 2025 GMT
Subject: CN=b048e08591649998831da2f1e4fb75151f03dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:4d:d1:d7:6f:ff:93:86:0f:9f:85:49:da:
58:8c:7e:7c:e1:be:ab:73:72:2f:d2:8b:22:be:5e:
95:8f:35:1a:15:31:ad:65:c9:e0:ad:68:9d:62:5a:
f1:4f:4f:00:81:db:8a:36:91:d6:f5:1c:cb:8e:89:
45:b3:91:87:fe:b6:15:18:4c:f5:64:05:cd:c5:b9:
58:bd:c5:da:b6:62:33:22:91:4e:48:21:83:b4:14:
d6:2b:12:7e:3f:71:db:3d:6b:79:4c:84:1e:a2:72:
dc:c1:70:15:3d:e7:2b:6b:1e:d2:ec:15:a1:e9:18:
9d:e3:08:7e:6b:9b:aa:71:45:aa:39:19:ad:bc:1f:
22:0f:02:2a:f6:c3:4e:a7:6a:da:65:50:fe:0e:81:
8e:9e:c6:e4:2c:1e:ce:1a:cc:23:a9:4b:6a:d0:77:
c9:33:65:4d:aa:ea:99:63:04:7e:1a:a6:d1:29:e2:
f0:87:4b:2d:80:b8:d2:9e:c2:83:1b:b3:85:40:b8:
80:bf:ab:e0:7c:da:df:7f:18:9a:71:df:a5:ff:f4:
6c:06:f7:91:d4:0c:13:c3:fe:25:f2:f3:fd:a6:c3:
ff:7d:82:ce:88:b0:a3:f9:84:21:59:f9:15:09:fb:
d6:7e:11:12:4b:83:28:19:a2:dc:2b:ac:91:43:74:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:E0:85:91:64:99:98:83:1D:A2:F1:E4:FB:75:15:1F:03:DD:1C
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:4a:ff:01:50:92:61:22:28:27:a7:02:a1:02:b4:7d:c7:
bc:ee:bb:ce:2d:41:8a:7c:d4:20:8d:c1:05:e8:ff:90:b0:a0:
39:5b:e5:6b:e9:f0:e2:40:7b:97:ad:90:d0:20:d0:74:ab:1e:
1f:d6:dc:1a:b9:93:a3:24:6b:b9:3f:55:c6:5e:51:fa:bc:3c:
88:e9:a2:6d:ee:74:b4:5d:45:d6:da:2d:63:fe:6d:f2:c6:74:
71:3b:c9:d5:96:2c:c1:2b:76:df:3e:f2:e4:52:36:5f:e5:45:
a3:ac:00:96:06:9a:c8:1c:fe:02:c7:53:0d:7d:a7:f2:f2:9d:
ee:74:66:ff:bf:ea:82:52:a2:d9:02:28:e8:7b:9e:37:50:98:
48:79:2e:b1:4d:19:21:66:77:af:04:78:79:41:16:ad:74:89:
2b:8b:4f:74:8b:75:b9:63:c1:c4:3a:ca:d6:b0:e7:ac:d3:ef:
49:06:27:d7:7d:9c:58:5f:83:64:b6:20:0e:1f:1e:8a:73:49:
b3:cf:34:57:c7:9c:a3:26:9b:5e:7a:40:d0:04:cd:2c:aa:57:
95:95:c7:06:e3:5f:34:45:d4:9a:71:2b:2c:ef:29:83:95:04:
69:0c:29:4f:c6:ab:a7:a9:93:de:dd:df:4b:19:44:3c:9f:3c:
e2:45:37:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZJIqg9rLmqmKFz/YZvEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTkwZjY4OTY2Nzg0NDJhZmFlZTFiYWFhYTZiMmEyZGVj
YWNkM2IwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD
EyhiMDQ4ZTA4NTkxNjQ5OTk4ODMxZGEyZjFlNGZiNzUxNTFmMDNkZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweZN0ddv/5OGD5+FSdpYjH584b6r
c3Iv0osivl6VjzUaFTGtZcngrWidYlrxT08AgduKNpHW9RzLjolFs5GH/rYVGEz1
ZAXNxblYvcXatmIzIpFOSCGDtBTWKxJ+P3HbPWt5TIQeonLcwXAVPecrax7S7BWh
6Rid4wh+a5uqcUWqORmtvB8iDwIq9sNOp2raZVD+DoGOnsbkLB7OGswjqUtq0HfJ
M2VNquqZYwR+GqbRKeLwh0stgLjSnsKDG7OFQLiAv6vgfNrffxiacd+l//RsBveR
1AwTw/4l8vP9psP/fYLOiLCj+YQhWfkVCfvWfhESS4MoGaLcK6yRQ3TvKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBI4IWRZJmYgx2i8eT7dRUfA90cMB8GA1UdIwQY
MBaAFLSpD2iWZ4RCr67huqqmsqLeys07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAt
OWQxODEyOTk5YTM1LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAtOWQxODEyOTk5YTM1
LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrpK/wFQ
kmEiKCenAqECtH3HvO67zi1BinzUII3BBej/kLCgOVvla+nw4kB7l62Q0CDQdKse
H9bcGrmToyRruT9Vxl5R+rw8iOmibe50tF1F1totY/5t8sZ0cTvJ1ZYswSt23z7y
5FI2X+VFo6wAlgaayBz+AsdTDX2n8vKd7nRm/7/qglKi2QIo6HueN1CYSHkusU0Z
IWZ3rwR4eUEWrXSJK4tPdIt1uWPBxDrK1rDnrNPvSQYn132cWF+DZLYgDh8einNJ
s880V8ecoyabXnpA0ATNLKpXlZXHBuNfNEXUmnErLO8pg5UEaQwpT8arp6mT3t3f
SxlEPJ884kU3nQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:37:11 2025 by rpki-client