This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: RRqgcsrTUhmguaJ9TxAUNFvdduzfyOTwFze4Ze+K4zE=
Subject key identifier: B4:AF:10:57:62:17:05:AE:DA:C1:B1:66:E3:1A:F4:15:35:3E:F0:43
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019B3E6C89B837C165C4D81A8E3C6ECECDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 01:00:59 +0000
Manifest this update: Sun 21 Dec 2025 01:00:59 +0000
Manifest next update: Mon 22 Dec 2025 01:00:59 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: egOeSrCSpWir4VTKzyp8vXTCpDHzPJw67gSrBxQAgM0=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6c:89:b8:37:c1:65:c4:d8:1a:8e:3c:6e:ce:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Dec 21 01:00:59 2025 GMT
Not After : Dec 22 01:00:59 2025 GMT
Subject: CN=b4af1057621705aedac1b166e31af415353ef043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:74:70:9d:40:a1:2a:8b:38:91:a2:cb:db:
40:1e:f3:57:0a:8d:fc:6c:44:18:c3:f0:26:c0:e1:
3c:12:98:3a:93:82:e6:13:a5:2a:31:75:51:8e:2f:
be:83:30:56:d8:ce:34:10:e6:cc:44:ac:43:a0:37:
22:0a:db:69:83:39:7d:e6:df:0f:f5:25:b4:d3:66:
43:15:0f:11:aa:3b:be:14:4e:c1:7d:14:43:fa:07:
82:cb:7f:c8:f5:41:4e:44:2f:57:5e:8e:a4:2c:18:
3b:78:c5:0d:9d:4f:b5:07:ee:21:5c:e7:ad:b9:58:
99:2c:98:2e:8f:78:ea:83:29:30:e1:65:61:52:1e:
b5:d6:38:0b:99:2a:31:db:f9:65:66:fb:ef:74:7f:
06:40:88:df:81:6c:af:56:58:16:ef:75:9c:ae:95:
38:1a:7e:25:45:2a:07:85:09:84:6e:f2:be:8c:e3:
03:d6:d0:29:35:7c:cd:d8:49:ed:b9:72:61:42:20:
a4:bd:76:b3:f4:26:3e:f8:3a:46:f7:72:b2:61:37:
45:7a:e7:45:56:6a:3f:9e:cb:82:10:f8:ed:66:a0:
37:54:fe:f4:74:f6:6d:7a:7b:4f:77:6b:33:7d:44:
f5:68:b8:2a:80:cf:66:7c:7a:33:cb:bc:d2:bc:61:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:10:57:62:17:05:AE:DA:C1:B1:66:E3:1A:F4:15:35:3E:F0:43
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ee:61:46:5e:e7:74:7f:74:68:e5:64:73:c7:fe:4c:a6:fd:
56:07:f2:a3:03:63:a9:ca:3b:23:2b:c2:08:6d:9a:50:ea:e9:
0a:86:49:1e:06:fa:29:19:af:82:10:2a:3f:49:17:bc:7c:6e:
8e:6a:fc:4d:0e:8e:c8:37:0a:a1:82:c4:ce:c1:80:a7:dd:c8:
79:10:34:ff:4c:d2:35:30:2e:c8:ff:bb:85:dc:4c:f1:aa:05:
a2:c3:fc:da:80:31:40:1c:8d:7d:be:c6:01:e7:59:44:7d:34:
5f:c3:7f:3f:4c:82:71:38:5b:e5:e3:40:c9:ec:a1:7c:19:28:
b0:cf:7d:b3:d3:38:a7:88:fb:60:82:26:d8:7a:52:d4:e3:9e:
d1:02:29:2c:af:d8:95:3d:cd:b5:83:eb:76:59:89:af:be:d9:
2b:fb:a3:71:35:8d:06:55:2f:30:b7:ea:57:6e:9b:a4:85:b1:
4a:7b:79:f0:ec:6c:2c:2a:de:f1:71:e6:fd:c0:df:0f:b1:fb:
6c:28:82:ef:a1:60:5e:6b:3c:7d:43:91:3e:c0:40:96:24:a0:
14:39:10:35:6a:d1:4c:a9:f8:6a:c4:c7:e4:05:f8:a1:81:c3:
75:0a:02:be:67:9f:cf:77:34:cf:16:bb:da:25:1c:02:80:59:
68:93:9d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bIm4N8FlxNgajjxuzs3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy
ZTBmM2UwHhcNMjUxMjIxMDEwMDU5WhcNMjUxMjIyMDEwMDU5WjAzMTEwLwYDVQQD
EyhiNGFmMTA1NzYyMTcwNWFlZGFjMWIxNjZlMzFhZjQxNTM1M2VmMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXV0cJ1AoSqLOJGiy9tAHvNXCo38
bEQYw/AmwOE8Epg6k4LmE6UqMXVRji++gzBW2M40EObMRKxDoDciCttpgzl95t8P
9SW002ZDFQ8Rqju+FE7BfRRD+geCy3/I9UFORC9XXo6kLBg7eMUNnU+1B+4hXOet
uViZLJguj3jqgykw4WVhUh611jgLmSox2/llZvvvdH8GQIjfgWyvVlgW73WcrpU4
Gn4lRSoHhQmEbvK+jOMD1tApNXzN2EntuXJhQiCkvXaz9CY++DpG93KyYTdFeudF
Vmo/nsuCEPjtZqA3VP70dPZtentPd2szfUT1aLgqgM9mfHozy7zSvGFjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSvEFdiFwWu2sGxZuMa9BU1PvBDMB8GA1UdIwQY
MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt
NzE1ZjljZDYzMDg2LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2
LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1u5hRl7n
dH90aOVkc8f+TKb9VgfyowNjqco7IyvCCG2aUOrpCoZJHgb6KRmvghAqP0kXvHxu
jmr8TQ6OyDcKoYLEzsGAp93IeRA0/0zSNTAuyP+7hdxM8aoFosP82oAxQByNfb7G
AedZRH00X8N/P0yCcThb5eNAyeyhfBkosM99s9M4p4j7YIIm2HpS1OOe0QIpLK/Y
lT3NtYPrdlmJr77ZK/ujcTWNBlUvMLfqV26bpIWxSnt58OxsLCre8XHm/cDfD7H7
bCiC76FgXms8fUORPsBAliSgFDkQNWrRTKn4asTH5AX4oYHDdQoCvmefz3c0zxa7
2iUcAoBZaJOdnw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:30:34 2025 by rpki-client