This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: w1ppmGu3eCw2FIG5OV4aEbja3e/0hfsNsOLhnpsd90Q=
Subject key identifier: CF:F4:A4:EA:AC:EB:F6:60:31:44:AD:BE:8A:E2:89:1B:44:7F:2B:98
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019B52CEA2DD293079479C293E22F0FB5907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1799
Signing time: Thu 25 Dec 2025 00:00:32 +0000
Manifest this update: Thu 25 Dec 2025 00:00:32 +0000
Manifest next update: Fri 26 Dec 2025 00:00:32 +0000
Files and hashes: 1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=)
3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: ekXF8bXM2QgGkFnAj2WOzssn53JRW46lfe1kSaX5e2M=)
4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:ce:a2:dd:29:30:79:47:9c:29:3e:22:f0:fb:59:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Dec 25 00:00:32 2025 GMT
Not After : Dec 26 00:00:32 2025 GMT
Subject: CN=cff4a4eaacebf6603144adbe8ae2891b447f2b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:b1:41:1f:53:ea:d8:f5:88:84:34:fd:25:
bb:13:3c:02:6e:9b:ea:07:a3:53:f7:3f:90:f7:65:
a7:40:8c:8b:af:8d:b5:91:50:47:40:ef:08:20:a4:
b2:43:ba:dc:60:b8:a8:c6:f9:49:94:20:ac:53:5c:
ac:7b:21:dd:5b:ca:66:b9:3a:d1:b6:f4:c5:aa:45:
0f:f1:ed:c1:b5:ef:45:ef:ee:90:be:2b:60:5b:0b:
9b:8d:c4:d2:56:15:3e:93:c2:14:d2:a7:8f:d8:be:
3c:bd:2c:bf:c3:65:9d:d0:1b:f4:4d:26:16:5b:9a:
a4:1d:a6:6e:a6:0e:df:84:34:1e:77:a2:82:3f:ff:
57:0b:0b:3a:99:62:b3:53:03:af:34:37:39:e4:77:
1a:71:60:b7:43:16:8c:27:2c:7c:50:ea:3b:ac:63:
f4:2a:4b:21:0e:1f:da:d2:bf:8e:52:9c:c4:ae:7e:
be:4c:ee:cc:f2:89:8b:84:bb:fe:4d:e4:76:67:d0:
9e:66:c5:ae:14:06:b7:dc:ea:08:9b:8b:24:31:25:
94:85:ef:7f:86:e9:73:e2:b2:b1:07:7a:da:ea:49:
1b:2d:6b:d4:7b:67:a6:c3:99:e7:83:f0:86:3d:e5:
74:9e:3b:d4:bf:31:c9:6e:73:31:c1:08:bb:5b:39:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:A4:EA:AC:EB:F6:60:31:44:AD:BE:8A:E2:89:1B:44:7F:2B:98
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:a3:4d:19:37:60:8a:10:96:6b:06:eb:4d:21:70:71:e6:
09:0e:d5:49:f1:9a:4a:e6:ef:5a:fc:5d:8e:76:a4:4a:6f:d3:
85:85:7e:3f:90:1a:3c:88:db:f1:41:72:d7:74:25:ba:04:53:
76:8b:ae:4c:7c:43:8a:2e:9f:9b:ea:7a:02:3d:72:4a:25:4a:
0c:ba:30:60:e7:dd:38:4c:8e:21:f0:f8:c2:a1:11:5e:e4:c5:
d7:34:fd:c7:3f:c6:18:fe:80:68:ec:6b:6a:00:63:c2:01:21:
0f:93:3e:bb:f6:ce:b5:58:72:f2:87:63:9e:2d:bf:1b:85:bd:
d7:9b:28:69:18:d5:ee:45:1d:30:17:11:8c:a3:67:24:33:bc:
76:a8:e6:d6:52:0d:a0:da:35:0a:44:d9:e5:f1:10:20:06:5d:
f3:9e:fd:fc:9d:10:1b:d6:e6:52:63:e2:97:b7:b9:dd:61:c2:
80:26:3a:86:f7:92:b1:6d:65:f8:04:e5:91:d7:fd:fa:75:f1:
38:9b:cd:3a:15:d9:c4:25:90:eb:5e:12:2c:fb:47:b9:c7:24:
5c:44:f1:3f:d6:75:e1:cc:92:ca:31:99:29:70:f9:dd:d6:8c:
d3:c2:e4:b2:1b:ee:af:5e:b2:ad:2a:3e:11:ac:d8:0b:37:14:
f2:7e:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:35:45 2025 by rpki-client