This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: 3pzkpd35Cf5ZA3O0t0+3COT715S3RNLVvxmLNhHPi+Y=
Subject key identifier: D5:B4:E2:B6:17:7F:03:13:B1:96:D1:B2:73:7C:E7:76:01:1C:B2:F3
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019AF3C02F649E5754D8094EAD57F431DF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 13:00:49 +0000
Manifest this update: Sat 06 Dec 2025 13:00:49 +0000
Manifest next update: Sun 07 Dec 2025 13:00:49 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: eyAlj4VK2wo53uBshcTkJCb4N5vHUGyOpXD0D6G0+0c=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:2f:64:9e:57:54:d8:09:4e:ad:57:f4:31:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Dec 6 13:00:49 2025 GMT
Not After : Dec 7 13:00:49 2025 GMT
Subject: CN=d5b4e2b6177f0313b196d1b2737ce776011cb2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:75:6a:bf:bb:a3:96:ea:f2:5c:02:bb:4f:
93:6b:c1:dd:ba:9e:6b:18:37:fe:20:b3:6e:02:3c:
45:2d:77:1d:10:e4:99:88:e4:44:24:77:1d:8a:11:
20:51:cb:d3:49:91:ca:bf:3b:1f:7b:26:44:28:66:
1c:24:97:ed:ec:06:aa:f4:d9:65:44:50:3d:aa:ec:
e4:6e:ce:51:85:f0:ee:03:98:e7:e4:a7:62:a8:0d:
1f:a7:22:87:c5:90:fb:40:7c:48:c2:f2:7f:87:46:
65:ba:bb:85:8f:24:dd:6f:44:3c:18:68:f8:4c:dd:
c4:43:e8:4e:86:3b:f7:e1:1f:ea:eb:8e:1e:e5:7b:
db:ee:49:16:eb:33:48:3d:09:ac:ca:b0:01:f5:8e:
12:fe:00:4f:65:a6:5c:c8:7b:7b:89:65:1a:bf:d0:
7e:3b:bb:55:f8:f0:16:2b:a4:6c:45:31:3a:b4:3d:
ae:57:5c:a8:9f:11:11:95:89:9a:14:02:95:80:b9:
a1:3b:9d:95:51:e6:55:76:8e:f5:56:8e:4c:01:16:
95:5d:7d:c9:c9:bc:f4:1d:d3:6d:18:54:dc:c9:e5:
77:a9:d9:66:f8:f9:c8:c8:04:da:44:c6:dd:45:89:
33:70:1b:92:f6:e8:6f:a2:cd:14:8f:70:a9:d6:07:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:E2:B6:17:7F:03:13:B1:96:D1:B2:73:7C:E7:76:01:1C:B2:F3
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:9e:ce:ca:78:1b:bf:c3:52:7a:1b:58:8f:8f:e1:81:1e:
5a:e2:7e:83:5a:f6:64:c1:da:c4:74:65:16:9f:74:93:19:81:
66:2a:59:19:7d:50:26:e3:8f:fe:ee:94:3a:ab:69:b3:ec:d7:
c4:4a:14:f9:16:38:be:57:da:c4:5c:a2:d5:17:5b:1c:37:22:
ed:2a:26:bd:d1:bb:07:07:82:db:6f:ae:0f:ca:5a:67:8d:4f:
cd:ed:0f:81:de:3a:98:ee:bd:9f:cb:12:82:ae:82:55:8d:d8:
68:bb:dd:9a:fa:79:2a:0c:8a:0b:b9:9a:37:05:6a:83:c5:42:
0e:77:b4:8c:da:29:24:e5:3a:ba:41:3b:95:22:ee:76:aa:86:
1c:6e:ed:3a:bf:1e:9d:ca:71:24:13:b2:0a:15:99:7d:f6:98:
6d:98:36:8d:4e:d3:08:72:8c:54:c2:9f:ac:46:01:33:d4:0f:
13:56:c6:62:38:9a:f9:1b:21:c4:35:6b:a7:a8:a5:ee:51:ca:
18:43:54:60:f2:bc:d3:73:32:5e:b8:24:62:02:cc:09:6e:8b:
2a:04:48:9b:e2:35:9d:16:33:74:9a:14:db:44:16:e2:ed:07:
5a:09:f0:46:a0:2c:91:c5:28:8a:a1:e8:e3:20:80:8c:22:83:
b6:f6:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:56:15 2025 by rpki-client