This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: fcvH1CN7JjYLFs6GKdsPyCaluIGywUg96FJlEMnH4Bo=
Subject key identifier: 56:C7:13:5A:17:0A:D7:81:3F:9A:C3:F6:EF:8A:1B:CF:DB:06:01:24
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019B3A5876875EA711654336134BA7A5188F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 1286
Signing time: Sat 20 Dec 2025 06:00:34 +0000
Manifest this update: Sat 20 Dec 2025 06:00:34 +0000
Manifest next update: Sun 21 Dec 2025 06:00:34 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: tiJcKJ0wvT8kSDMD/Wi/eby341iTb53sK+7Xidma8aM=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
7: lg3As9QftSBug7tpmYrQWLTzXlw.roa (hash: Zav5DG+USj65sND09nTQM5cgapiwyx+unRcWKNxbfPM=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:58:76:87:5e:a7:11:65:43:36:13:4b:a7:a5:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Dec 20 06:00:34 2025 GMT
Not After : Dec 21 06:00:34 2025 GMT
Subject: CN=56c7135a170ad7813f9ac3f6ef8a1bcfdb060124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:dc:be:a4:27:78:73:ff:c9:dc:7f:4f:68:
09:84:5e:c3:b5:d2:64:d2:3b:b1:73:24:03:13:30:
0a:2e:a9:a5:b1:12:bf:79:bc:ae:41:46:63:00:0e:
9b:cd:4a:a9:fe:9c:a0:23:c7:d2:05:b3:80:6a:b5:
51:1d:b6:2f:ba:7e:fd:b6:30:2e:10:d1:b5:0a:f4:
dc:89:1f:b0:69:1d:4e:b7:39:6e:2f:a8:15:93:e3:
66:03:76:8b:ff:5b:3c:d9:6a:ae:39:8c:58:64:9d:
c6:fd:c1:65:2f:8a:e6:80:0f:ff:3a:00:81:3f:be:
ec:8c:a2:32:44:46:86:90:8d:96:f1:61:02:e7:30:
54:ce:c5:81:49:b1:91:4f:61:95:d3:b0:2e:78:3d:
f9:9e:d2:15:d0:ab:2a:68:82:be:63:8b:22:49:e1:
4b:d1:67:30:59:fc:23:a2:9a:f3:ce:17:d8:f4:c1:
b7:ba:97:a2:7c:a6:78:59:62:ce:f3:73:ed:9d:8e:
dc:39:c1:5b:45:37:fc:aa:0d:3f:c1:f3:90:f5:3f:
e0:26:51:c0:70:78:21:46:5d:ae:1a:e1:16:b6:f1:
d0:2f:1a:12:59:51:7c:82:0d:c2:2e:dc:e9:ba:33:
ca:ac:0e:dd:82:c0:3b:c2:e8:2b:6e:dd:05:9a:0d:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:13:5A:17:0A:D7:81:3F:9A:C3:F6:EF:8A:1B:CF:DB:06:01:24
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:c7:66:ae:8a:17:a8:9b:4a:95:eb:bb:cb:83:4b:5d:e2:
d1:61:91:03:3d:89:f7:e1:70:07:6a:62:42:b5:32:9b:d4:23:
00:e6:e3:5d:8d:90:fd:b8:74:0f:9d:3d:a1:4b:5e:86:99:6b:
2b:56:21:f0:63:db:00:64:5c:a9:72:cf:20:68:36:58:78:92:
fb:9d:dc:fe:b2:5f:87:7c:5a:2b:19:67:89:4e:0c:91:9d:e7:
ab:30:fb:6c:e8:1a:33:d1:f1:cc:b0:38:ff:ce:af:90:fa:de:
34:18:c0:36:e2:f9:d5:98:0f:60:a3:a7:45:88:bc:1c:09:2c:
22:7d:30:a1:ef:08:41:74:78:70:25:41:dd:97:b8:96:d3:7c:
0d:3b:bb:17:6c:d3:6b:4c:cf:88:81:88:fc:f5:5f:5c:e5:9b:
3f:5a:f5:06:3c:9f:bf:16:52:6d:96:dc:44:bc:45:05:b6:fc:
d8:e6:d8:f6:c0:bd:00:20:b0:c4:66:a8:e8:ff:33:60:de:b7:
84:33:f3:a0:c5:64:b0:61:ee:15:a3:92:a9:c3:ce:7c:43:f1:
75:2f:27:a9:ff:ac:15:25:54:4a:0a:fb:7c:5b:e7:29:27:c5:
29:0b:71:d9:ed:35:73:1b:7a:71:12:a9:c4:38:78:69:4a:02:
fa:cf:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:15:01 2025 by rpki-client