This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: XNNwkvrLSEQpTaVz/n686arHE2O7yt7tKdRe/RmxtB8=
Subject key identifier: FB:F0:76:08:DB:1E:20:64:A4:FE:0C:3E:9F:E3:ED:31:36:8A:BD:B3
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019B619D4A2E3B41D5FFE6CF7DC7592851BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0E66
Signing time: Sat 27 Dec 2025 21:00:56 +0000
Manifest this update: Sat 27 Dec 2025 21:00:56 +0000
Manifest next update: Sun 28 Dec 2025 21:00:56 +0000
Files and hashes: 1: C7ULwDGGDLspopWJvL9iddJcsoA.roa (hash: eXiH2Que0/hsKh26rBrekQ8hlPTu7doazMNc5MCmB1Y=)
2: W6VeJiHlvuRMQjeGZHv3mokER-c.roa (hash: qcyR5RW8f0zdUSnAWl6lW42oNtIicHOzXOEszMGa+ME=)
3: sLlY1jyLux_8WlPpVquZS_tXAMM.roa (hash: Ac6aebIzojMJX90LbFh/1SpU6qfnR41Si25oQuBA8+c=)
4: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: 7QCpiN0lxXLuZPNptFB/B71MhdZSVVwFjjHO7n+egzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:61:9d:4a:2e:3b:41:d5:ff:e6:cf:7d:c7:59:28:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Dec 27 21:00:56 2025 GMT
Not After : Dec 28 21:00:56 2025 GMT
Subject: CN=fbf07608db1e2064a4fe0c3e9fe3ed31368abdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:71:12:00:cb:13:ac:df:df:81:61:c4:a3:
f1:89:a8:7b:43:94:21:d3:1d:50:50:64:fe:ea:85:
94:86:1f:f4:fa:63:21:50:90:0c:52:ab:dc:69:76:
27:ba:8d:70:93:9f:a3:6e:4a:5f:0b:2a:20:8d:93:
63:bb:13:08:74:0b:95:4f:a6:03:d2:27:36:da:1d:
0d:40:81:93:24:08:1c:25:54:f1:66:ec:e0:4b:b8:
2e:ae:40:34:17:e7:a9:16:d3:38:81:67:97:6d:f7:
f4:e6:9d:19:03:67:44:f2:33:3b:80:7e:c3:12:83:
ff:cd:81:88:8a:2e:31:b8:2c:c1:93:81:79:5c:54:
9e:bd:43:d1:1f:cb:84:55:0a:b9:01:a7:cc:62:bd:
7f:69:d2:8b:d6:cf:89:82:04:45:7d:0f:ad:d8:44:
57:c7:e3:44:80:5b:f2:06:a0:b4:22:a4:ac:42:a8:
08:70:f4:65:10:e6:5b:ae:b1:82:b2:7c:be:81:e4:
ea:32:c2:2f:0c:8b:f9:77:5c:9c:a9:72:89:37:44:
86:0c:74:33:e8:42:5f:03:bf:b4:43:c6:0e:24:b4:
ef:34:3a:cf:a8:41:c5:50:a2:bb:68:a7:c4:0c:23:
3b:c3:d1:99:4c:ab:77:5f:fc:44:f0:fc:d0:4b:71:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F0:76:08:DB:1E:20:64:A4:FE:0C:3E:9F:E3:ED:31:36:8A:BD:B3
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:70:ba:fe:bf:c6:92:ee:c6:83:f4:d7:69:65:69:60:d8:9c:
fd:ae:47:5c:02:de:1e:b6:35:15:a4:53:b4:88:b0:c4:59:5e:
d7:21:03:cc:4e:e9:fd:b4:b7:f4:70:36:62:c7:03:7b:c9:7f:
c6:66:36:dd:1e:59:79:d2:7f:6d:c8:54:31:46:be:68:b2:d4:
d2:aa:18:4f:58:3b:20:49:be:7d:89:1f:ee:5d:7a:af:2f:54:
07:5b:0e:a8:10:1e:0c:f9:6c:17:e6:38:64:dd:5b:26:41:36:
03:a7:0e:29:49:59:f2:e4:16:77:4f:19:8b:fe:b5:ab:fc:82:
00:fe:32:6a:f6:ca:ed:04:ef:48:53:8c:8a:34:92:49:81:f6:
c4:b5:03:ce:b9:da:3c:a3:c1:4e:57:05:b3:d7:7e:48:ee:16:
6c:15:5a:43:e4:5f:c5:8b:e8:e6:a0:99:95:f2:8b:1b:4e:bb:
4c:01:a6:02:ed:95:5b:c3:8d:2d:7b:e7:ea:ef:07:9b:b5:cb:
66:23:af:1d:31:0e:fc:e2:9c:6a:ca:a1:70:84:0d:b6:0d:e9:
f2:01:da:62:28:da:81:66:b3:0b:b7:1a:87:91:b3:b5:9a:bf:
51:00:80:de:0a:a9:55:fe:dc:f0:af:92:0c:20:c7:6f:36:90:
ef:27:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 03:18:06 2025 by rpki-client