This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: y0+Dqb6Sai+Uebyk2xh2gIiE//eDubDO5ZxR6Pc4zq4=
Subject key identifier: 3C:AD:5B:D7:54:2E:B8:94:EA:BB:D2:4C:32:FC:63:5F:AD:A5:1A:47
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019B3BD942F2D34F6C2D7450AE1AB0E557F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1775
Signing time: Sat 20 Dec 2025 13:00:52 +0000
Manifest this update: Sat 20 Dec 2025 13:00:52 +0000
Manifest next update: Sun 21 Dec 2025 13:00:52 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: ZHIEhlrh9u1+k4jbmRBCPUpOoWrWE2Q0M+N+waCN4R8=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:42:f2:d3:4f:6c:2d:74:50:ae:1a:b0:e5:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Dec 20 13:00:52 2025 GMT
Not After : Dec 21 13:00:52 2025 GMT
Subject: CN=3cad5bd7542eb894eabbd24c32fc635fada51a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:6c:d8:fd:97:83:60:b7:32:a2:81:2c:ad:
1e:05:fa:18:89:28:75:8c:1c:1f:6d:71:63:f4:3b:
83:6b:42:2f:c5:c7:aa:0b:d2:b9:78:db:0a:d3:b8:
4d:0f:f5:3d:cf:44:2c:31:d0:92:e9:be:00:58:f0:
a3:22:a8:f2:c2:33:a5:02:58:a0:6b:65:4d:87:76:
59:33:40:0b:6a:92:5c:5f:4c:46:0f:dc:9c:43:6d:
33:36:89:ed:01:d9:75:a1:98:d7:0a:10:61:78:da:
c1:3b:21:c4:6d:a9:4a:45:c7:ad:5a:b9:25:e3:a5:
f8:db:70:74:d2:8b:0b:49:4b:54:f0:d5:4d:d9:99:
ff:24:2c:41:e1:97:f9:d4:04:09:ae:21:ab:b5:e7:
2a:ca:59:a9:ce:28:96:d6:d0:28:98:ee:85:32:23:
7d:22:cd:2c:30:c1:6c:fb:2c:48:e8:23:ad:61:e7:
c1:a2:60:32:51:c9:5a:99:09:05:7e:5a:2f:b8:dc:
ba:be:91:c4:d4:e0:d5:dc:88:4c:ea:39:92:69:a2:
92:ce:cc:2d:8d:6e:6b:bb:73:d9:cb:04:c8:16:ee:
7f:b9:28:7f:b9:57:89:72:34:a7:c7:a8:20:6d:9c:
4f:24:4e:ae:51:a3:bf:2f:a2:d4:00:60:f4:46:65:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:5B:D7:54:2E:B8:94:EA:BB:D2:4C:32:FC:63:5F:AD:A5:1A:47
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:19:24:96:26:b6:32:ba:40:61:99:58:b1:82:9f:7d:be:
a5:74:72:06:11:1a:23:78:02:06:b5:93:e9:c2:4c:3a:65:71:
f4:b2:0e:be:2c:7c:9b:95:ed:22:cf:66:ce:02:73:2d:75:d2:
0d:72:0f:cf:d2:08:2d:0d:a7:38:c2:eb:10:3e:5e:29:63:28:
57:af:04:ac:a1:a3:ac:88:d0:a1:27:ad:a6:e2:16:d8:01:69:
d8:3e:b6:fd:bc:eb:3c:0e:2b:65:80:5b:36:85:cb:c5:f7:0f:
5a:9c:be:68:ab:3c:de:26:25:54:12:d3:ef:9b:22:47:c4:61:
c2:0d:0e:c4:62:d6:8f:0e:d7:1a:3e:2e:5c:ca:32:32:4e:cd:
58:2c:c0:7d:b7:ef:cd:82:79:91:56:c5:96:bb:73:39:c3:3d:
ff:d4:25:53:71:bc:3b:de:95:f0:8e:6b:98:ac:8e:57:24:0e:
a8:a9:9e:77:24:3a:e7:e7:7c:88:3f:c5:da:bd:2c:45:98:2a:
de:c3:e6:d6:c4:34:a9:f4:bc:da:f7:42:e8:ff:4a:5f:b1:41:
22:55:3f:3e:ed:ac:bd:bc:c2:92:9a:f7:b7:96:b3:66:aa:f5:
58:70:e3:85:bc:ec:d4:5f:52:e7:42:ab:e8:08:fb:25:01:1c:
89:7f:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:33:30 2025 by rpki-client