This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: FPsNPjNmp8dYOsDXmGiw1roacWCtmh8ZoxU7QwhXRXg=
Subject key identifier: 43:D3:03:21:4C:D3:2E:7F:2A:1A:9B:BC:14:76:DF:C3:0C:C6:CE:AB
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 019B3D5A1D730F211C6BB288FF6A5235C83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0955
Signing time: Sat 20 Dec 2025 20:01:14 +0000
Manifest this update: Sat 20 Dec 2025 20:01:14 +0000
Manifest next update: Sun 21 Dec 2025 20:01:14 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: gDFkALF1NvKEHqDThDFkTf0Bm3/mFPXoUstoRfWzJFU=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:5a:1d:73:0f:21:1c:6b:b2:88:ff:6a:52:35:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Dec 20 20:01:14 2025 GMT
Not After : Dec 21 20:01:14 2025 GMT
Subject: CN=43d303214cd32e7f2a1a9bbc1476dfc30cc6ceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:0d:42:ce:77:fb:b5:a3:2a:9e:bc:6c:36:
ea:b4:16:d5:b9:84:25:0e:ae:f7:bb:51:24:97:4b:
42:3e:68:0c:a2:05:02:35:42:24:24:db:7b:29:80:
d1:7b:e9:6e:0e:f4:4f:a2:d0:d0:0b:8f:46:c3:82:
0b:d3:48:5f:5e:03:dd:d8:d5:78:e2:d5:79:92:05:
27:5d:89:61:0d:3e:c6:a5:23:8c:8f:8f:ba:1e:8a:
ea:09:a0:3e:51:82:c2:6d:2d:b1:c0:97:f5:c7:e7:
ef:8a:4f:50:05:b3:10:42:e1:75:c3:a8:3c:12:df:
17:f6:1a:29:18:c3:29:c7:46:d3:72:70:de:db:f9:
fe:3f:af:b0:cf:3a:00:d3:92:d8:7d:d5:14:75:f3:
39:99:6c:b4:0f:61:09:1a:23:c9:9b:12:91:c7:ad:
cf:7c:ea:23:aa:29:0c:8d:64:aa:cc:4f:b9:a1:2c:
7b:bf:a3:1d:83:6a:d0:af:4f:f1:c7:63:91:3b:67:
6a:61:24:99:55:19:b8:d8:26:e7:85:1e:fb:67:ac:
8b:1f:5f:3e:c5:f2:71:3e:8f:6c:a5:19:18:e8:44:
52:c8:27:57:3c:19:49:c1:f7:5f:b7:2c:a1:99:ce:
11:93:eb:68:5e:95:a9:d3:3e:12:d1:e4:1a:ba:ce:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:03:21:4C:D3:2E:7F:2A:1A:9B:BC:14:76:DF:C3:0C:C6:CE:AB
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:98:06:ad:b2:17:74:9b:d7:a1:42:c3:4c:01:7a:5a:55:2d:
d4:fb:b3:ea:7f:52:95:61:19:b9:3b:e3:7e:5e:ea:d6:ba:35:
aa:ee:cf:1f:1d:90:6e:91:d2:79:27:f1:a8:08:7f:ab:d5:ef:
93:2a:b5:15:03:a0:47:fa:64:f0:8e:32:7b:3d:ef:10:12:06:
87:b4:8a:7b:db:6a:4b:08:9d:97:4c:7f:8c:0a:e3:6c:ac:08:
c7:55:40:c1:51:f5:c4:c7:e5:80:c7:d9:23:54:89:5a:07:cf:
ba:e4:a9:51:21:38:4d:83:4e:be:a6:ff:60:4a:a5:42:cc:8d:
7c:71:b8:91:eb:55:21:8a:bf:83:f2:07:89:af:58:de:65:60:
07:32:2e:c6:31:61:a7:63:c7:83:8f:48:42:1b:7e:72:fb:84:
41:99:7d:72:1e:30:a3:ab:4f:d6:b2:ff:3d:7b:44:fc:f3:57:
08:48:83:cc:74:b2:2a:f0:f0:bd:fa:4e:f7:af:43:c0:ca:7a:
d5:51:0a:cf:df:03:03:d9:ed:7a:28:ff:fe:d3:66:45:86:9f:
95:6c:91:16:01:cd:c4:6b:bd:9f:35:38:66:3a:00:6e:0a:04:
b5:45:ab:0a:1a:2f:59:90:9f:53:3b:7e:10:cf:65:af:fd:4b:
71:1c:73:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9Wh1zDyEca7KI/2pSNcg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1
OWJhYjYwHhcNMjUxMjIwMjAwMTE0WhcNMjUxMjIxMjAwMTE0WjAzMTEwLwYDVQQD
Eyg0M2QzMDMyMTRjZDMyZTdmMmExYTliYmMxNDc2ZGZjMzBjYzZjZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8NQs53+7WjKp68bDbqtBbVuYQl
Dq73u1Ekl0tCPmgMogUCNUIkJNt7KYDRe+luDvRPotDQC49Gw4IL00hfXgPd2NV4
4tV5kgUnXYlhDT7GpSOMj4+6HorqCaA+UYLCbS2xwJf1x+fvik9QBbMQQuF1w6g8
Et8X9hopGMMpx0bTcnDe2/n+P6+wzzoA05LYfdUUdfM5mWy0D2EJGiPJmxKRx63P
fOojqikMjWSqzE+5oSx7v6Mdg2rQr0/xx2ORO2dqYSSZVRm42CbnhR77Z6yLH18+
xfJxPo9spRkY6ERSyCdXPBlJwfdftyyhmc4Rk+toXpWp0z4S0eQaus6ZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPTAyFM0y5/KhqbvBR238MMxs6rMB8GA1UdIwQY
MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt
OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi
LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApgGrbIX
dJvXoULDTAF6WlUt1Puz6n9SlWEZuTvjfl7q1ro1qu7PHx2QbpHSeSfxqAh/q9Xv
kyq1FQOgR/pk8I4yez3vEBIGh7SKe9tqSwidl0x/jArjbKwIx1VAwVH1xMflgMfZ
I1SJWgfPuuSpUSE4TYNOvqb/YEqlQsyNfHG4ketVIYq/g/IHia9Y3mVgBzIuxjFh
p2PHg49IQht+cvuEQZl9ch4wo6tP1rL/PXtE/PNXCEiDzHSyKvDwvfpO969DwMp6
1VEKz98DA9nteij//tNmRYaflWyRFgHNxGu9nzU4ZjoAbgoEtUWrChovWZCfUzt+
EM9lr/1LcRxzVw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 00:41:44 2025 by rpki-client