This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier: D9Au2D4gEsH5OBnrxtOOIOb0ss6fseEPbAJ2m63c06M=
Subject key identifier: 1E:C5:05:01:AE:C2:87:41:A5:90:17:97:E9:97:49:92:A1:1C:4D:30
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019B37217E09CFB61F1B225C1CFFC1B0540E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number: 17AE
Signing time: Fri 19 Dec 2025 15:01:40 +0000
Manifest this update: Fri 19 Dec 2025 15:01:40 +0000
Manifest next update: Sat 20 Dec 2025 15:01:40 +0000
Files and hashes: 1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=)
2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=)
3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=)
4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=)
5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=)
6: BtYymVysztiqPvFalU2qw0BxdUI.roa (hash: fnna/fe+7wvOm7SoakeRGOUh4jW8Mh/j9bKBLG7yuY8=)
7: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=)
8: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=)
9: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=)
10: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=)
11: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: ueuomr02TDWV007/BRO9QaOetd7XhRxsKngFupVNtdM=)
12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=)
13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=)
14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=)
15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=)
16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=)
17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=)
18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=)
19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=)
20: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=)
21: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=)
22: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=)
23: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:21:7e:09:cf:b6:1f:1b:22:5c:1c:ff:c1:b0:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Dec 19 15:01:40 2025 GMT
Not After : Dec 20 15:01:40 2025 GMT
Subject: CN=1ec50501aec28741a5901797e9974992a11c4d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:67:c7:6a:af:84:5f:89:95:15:0a:a5:a5:
e9:ab:74:b2:1a:0e:f4:f0:c2:3b:b0:7f:a1:bd:33:
48:e6:db:ba:68:12:6d:a5:86:2e:cb:c7:33:e0:39:
78:bf:d4:0b:93:1f:d6:62:6e:13:71:02:31:e3:37:
da:09:b1:b0:7d:bf:1d:cf:d3:ee:f2:ef:11:e0:d8:
f5:b9:9a:cd:94:35:b6:0c:97:b4:e3:46:12:90:22:
37:6a:36:ec:2d:a3:6f:15:19:bd:4c:9e:2b:36:1f:
32:05:32:df:de:76:53:d3:fa:a6:08:5b:07:31:14:
5d:80:fc:3c:bd:34:b4:a5:b3:43:ee:19:9b:3b:39:
e1:93:ad:28:0c:4f:54:5f:4d:ae:b7:a7:b3:d4:57:
8e:e3:93:85:0c:19:1c:06:42:0c:83:3a:d1:f7:62:
c0:fd:7b:b8:fd:3b:9f:8a:07:fb:59:a5:de:ec:31:
52:0e:ad:ff:24:c3:3a:89:df:7c:51:38:23:fa:89:
5a:68:d7:6f:9f:aa:ad:a2:f9:15:9e:c8:22:51:3b:
bc:18:17:cb:8b:dc:c0:40:fb:44:63:4b:bd:64:d8:
9f:53:95:6d:dd:77:e3:a5:a9:b6:c9:cd:37:90:6b:
30:ad:9e:59:26:b2:34:88:8b:25:ca:bf:ad:d5:6a:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:05:01:AE:C2:87:41:A5:90:17:97:E9:97:49:92:A1:1C:4D:30
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:a0:31:82:14:32:4b:35:d5:fc:67:fd:0a:5f:df:f3:11:
3b:89:de:71:5a:b4:38:25:a1:2a:b8:b3:11:ba:73:eb:70:23:
50:15:b0:7e:01:8d:b5:cf:ea:0c:04:a6:d5:79:e5:bf:77:9b:
35:aa:21:63:36:51:63:85:9e:f4:76:59:7b:73:10:44:ec:a4:
90:0b:cb:6f:7a:37:07:5a:bf:ae:32:5a:3f:18:73:23:dd:5a:
3d:6b:cc:6b:e3:e5:0c:ed:85:5f:4b:ef:0b:2b:59:bc:74:84:
de:af:02:35:b2:9c:04:fe:5b:fa:7b:dd:f6:af:1d:39:b4:a2:
69:77:b9:20:5f:38:37:c4:98:d5:bf:ec:25:4f:03:91:7f:f4:
04:88:9c:b4:d4:94:d6:bc:36:52:b8:97:43:49:97:29:14:56:
3e:89:4c:45:cc:4d:8c:5e:ee:8d:98:3f:a4:e6:14:ad:f2:2c:
94:d8:72:60:e5:85:32:9a:12:c2:10:32:3b:97:fd:d1:74:b8:
ec:28:09:5d:d4:cb:6c:05:60:47:7e:4d:d6:ad:a9:3d:0f:a3:
c1:20:7c:ff:b3:e9:96:77:47:0b:9c:3d:b9:f3:91:3b:6b:d3:
2b:e2:17:67:4a:75:c4:92:d1:49:2a:cb:ce:f0:6f:1d:9e:2e:
0e:93:e6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3IX4Jz7YfGyJcHP/BsFQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUxMjE5MTUwMTQwWhcNMjUxMjIwMTUwMTQwWjAzMTEwLwYDVQQD
EygxZWM1MDUwMWFlYzI4NzQxYTU5MDE3OTdlOTk3NDk5MmExMWM0ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVpnx2qvhF+JlRUKpaXpq3SyGg70
8MI7sH+hvTNI5tu6aBJtpYYuy8cz4Dl4v9QLkx/WYm4TcQIx4zfaCbGwfb8dz9Pu
8u8R4Nj1uZrNlDW2DJe040YSkCI3ajbsLaNvFRm9TJ4rNh8yBTLf3nZT0/qmCFsH
MRRdgPw8vTS0pbND7hmbOznhk60oDE9UX02ut6ez1FeO45OFDBkcBkIMgzrR92LA
/Xu4/Tufigf7WaXe7DFSDq3/JMM6id98UTgj+olaaNdvn6qtovkVnsgiUTu8GBfL
i9zAQPtEY0u9ZNifU5Vt3Xfjpam2yc03kGswrZ5ZJrI0iIslyr+t1WoMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7FBQGuwodBpZAXl+mXSZKhHE0wMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzmgMYIU
Mks11fxn/Qpf3/MRO4necVq0OCWhKrizEbpz63AjUBWwfgGNtc/qDASm1Xnlv3eb
NaohYzZRY4We9HZZe3MQROykkAvLb3o3B1q/rjJaPxhzI91aPWvMa+PlDO2FX0vv
CytZvHSE3q8CNbKcBP5b+nvd9q8dObSiaXe5IF84N8SY1b/sJU8DkX/0BIictNSU
1rw2UriXQ0mXKRRWPolMRcxNjF7ujZg/pOYUrfIslNhyYOWFMpoSwhAyO5f90XS4
7CgJXdTLbAVgR35N1q2pPQ+jwSB8/7PplndHC5w9ufORO2vTK+IXZ0p1xJLRSSrL
zvBvHZ4uDpPmOQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:01:47 2025 by rpki-client