This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: TcsC05IsgA5eBXRhY08uXpdSVqbuNZOnCnnlDzSuumw=
Subject key identifier: 1F:AD:5B:CE:44:33:72:37:D3:A8:D9:63:9F:13:24:29:33:B8:5D:46
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019B4437FD9E70E207C42A4A90F813EC9F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 178F
Signing time: Mon 22 Dec 2025 04:01:18 +0000
Manifest this update: Mon 22 Dec 2025 04:01:18 +0000
Manifest next update: Tue 23 Dec 2025 04:01:18 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: ojwfiLHyEX2CNaFmLfPCjzRm6HmTpKclz622DAu8xx8=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:37:fd:9e:70:e2:07:c4:2a:4a:90:f8:13:ec:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Dec 22 04:01:18 2025 GMT
Not After : Dec 23 04:01:18 2025 GMT
Subject: CN=1fad5bce44337237d3a8d9639f13242933b85d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:bd:4a:92:8d:f1:11:d3:88:d3:8b:d8:e4:
30:a7:d4:cf:64:fc:95:aa:a0:0d:1e:77:5b:97:29:
f2:c3:cb:05:07:40:dd:b5:0b:42:2c:4b:8c:2c:ba:
b0:e0:3e:8c:5c:a1:78:e8:21:4a:38:e1:f5:14:cc:
0f:80:cc:36:e5:1c:7c:d7:fb:67:0f:6d:af:ed:62:
1c:5e:95:47:97:73:1b:a4:a0:8b:85:b7:e1:03:e3:
4d:ec:93:5c:91:39:6f:03:81:54:51:5c:14:68:2b:
08:bb:a6:e1:d9:c1:e0:79:1b:79:01:cf:4a:89:d9:
e7:f5:ff:dc:a2:25:66:29:ca:bb:31:c0:39:19:85:
79:c8:2e:cd:70:80:b2:19:36:19:42:3a:c0:b3:58:
bd:67:9b:73:90:ef:ee:9f:04:61:67:de:ad:45:b3:
7d:2b:cc:66:45:f8:86:86:54:35:01:72:f0:59:a4:
37:f1:e8:24:2e:ef:96:39:ba:6a:df:92:a4:a4:2e:
69:d2:3d:ec:10:ed:a1:45:dd:fa:7b:66:40:d6:6a:
e6:d7:ce:d1:4d:f5:2d:e7:67:42:1a:4f:7e:c6:ec:
b1:14:55:68:85:c4:1b:3d:5e:57:64:4e:6a:36:dc:
f9:0c:0f:10:a6:f1:9e:b4:85:d5:78:82:da:ab:85:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:5B:CE:44:33:72:37:D3:A8:D9:63:9F:13:24:29:33:B8:5D:46
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4d:dd:26:dc:7f:f7:2a:8f:5e:66:62:cd:ae:df:d1:60:d3:
8b:ba:ff:ba:24:30:de:8e:35:4e:c4:38:8b:c3:5c:eb:91:81:
e4:88:24:39:66:ab:e2:66:49:70:0d:13:64:18:48:32:37:8f:
e9:bb:ed:c9:cf:4c:16:88:85:94:d5:21:67:5a:47:4f:9b:29:
79:6e:2c:c8:e2:ae:ca:69:38:7f:aa:7d:ea:36:88:a0:00:9b:
f5:16:11:3e:2f:00:32:4f:d6:45:4e:a7:fb:d3:7d:5d:f6:2e:
25:c0:46:d7:2b:2e:d0:95:57:69:89:52:a0:86:22:2b:d0:b6:
74:8b:65:49:75:c0:ea:68:6a:a0:40:d4:df:cd:1e:8d:ac:8b:
a0:e7:b6:09:df:12:ca:c5:88:ee:4f:92:24:65:30:15:3e:64:
08:3a:32:95:cf:de:54:1a:97:80:e7:df:06:d5:86:1f:ad:47:
67:81:5a:22:bc:3c:42:52:c2:39:09:32:ed:b7:6b:58:44:5c:
d3:ff:8b:e8:fa:ac:fa:10:26:8b:81:0e:46:66:10:c5:72:fa:
0f:4c:65:5a:25:8b:35:27:1e:db:be:72:50:b2:25:0b:63:21:
31:27:13:64:03:8b:d8:77:e0:06:18:c6:c3:72:50:12:5b:d1:
73:46:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:56 2025 by rpki-client