This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: wU4gHbEtTXTc4eu1gsq6Qp0e7TnHbtoaXeIE3c44Ado=
Subject key identifier: 2A:4D:AF:77:21:43:EA:2D:AE:0D:28:EF:81:B8:71:F3:55:F7:43:34
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 019B3E355F111ADA4808B831A40E949A02B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0F39
Signing time: Sun 21 Dec 2025 00:00:43 +0000
Manifest this update: Sun 21 Dec 2025 00:00:43 +0000
Manifest next update: Mon 22 Dec 2025 00:00:43 +0000
Files and hashes: 1: 7YKudBQqaU86zuBwTkjjChXm9G0.asa (hash: eDBUQ1qq4EhZv8hhm9LsQRUdUzcOW1N16EN/4FMNBbA=)
2: QBK8lPoVvs-33OqaHsy4GGD-WkU.roa (hash: 0GUBtBrdWkItfU5ir9EaRdqIIGetsONKxZfwhY7ap78=)
3: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
4: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: M9iCbP5LdlEQjkp4CBSTOd5kWYR9XtCCxCc6d83vRMI=)
5: tdMNK9TEqxpF4VZ5o4_bR4yE7Hc.roa (hash: XOeW5f83fNYsxiZeF2CyzZjG5tuKR78BMMUdvSarePY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:35:5f:11:1a:da:48:08:b8:31:a4:0e:94:9a:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Dec 21 00:00:43 2025 GMT
Not After : Dec 22 00:00:43 2025 GMT
Subject: CN=2a4daf772143ea2dae0d28ef81b871f355f74334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:09:50:5c:95:32:f1:2e:ba:4b:58:fc:0f:
97:53:9d:c5:7e:d1:c9:d4:1b:a2:27:6d:d7:47:49:
1e:85:1e:e9:ff:2f:e5:d1:d4:13:07:87:0f:3e:e8:
6f:fd:9e:08:db:0a:b1:b4:24:fb:94:1d:af:d0:17:
69:8c:65:d1:57:36:9c:fc:fa:e9:fb:72:d3:b9:66:
93:02:99:47:65:a7:ec:b0:4c:65:ad:ff:10:e5:7a:
24:16:47:a9:3d:17:2c:76:86:26:a8:70:18:5b:8d:
32:23:2c:4c:e6:b4:22:60:38:76:da:31:50:cd:bc:
fa:a9:d4:93:80:ad:69:66:bb:48:20:5b:61:88:ac:
ab:a7:bc:00:dd:44:bc:15:4a:cb:c3:a0:47:79:69:
0e:61:e8:bb:11:2d:b0:09:76:7f:50:0d:2a:0e:ef:
f7:3d:04:3f:bf:d8:33:62:aa:b3:71:58:2c:f7:70:
68:bf:5e:ef:d8:10:82:17:31:ef:fd:63:a0:c0:4c:
c0:58:f0:74:1c:6d:dd:2e:dd:dd:95:97:de:60:49:
90:52:b8:e1:2b:c7:4f:09:14:e6:b8:c3:d4:8a:bf:
8a:a8:b5:9d:af:2c:e1:52:ea:fc:f5:30:a5:e5:b7:
7a:11:ee:ca:ba:ef:83:8b:af:8e:80:a3:54:de:e9:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:AF:77:21:43:EA:2D:AE:0D:28:EF:81:B8:71:F3:55:F7:43:34
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:51:f3:a8:a1:6e:48:f9:73:18:13:7f:b9:69:a2:8a:e0:c1:
89:da:05:2f:26:b7:6d:17:7b:fe:37:c9:f1:9c:7c:be:f9:e4:
e4:67:35:03:48:68:ee:e5:15:6a:8f:18:b9:27:81:6e:18:49:
6a:07:15:d2:c2:4a:31:cb:58:d1:93:be:48:f7:b8:05:0d:8b:
5b:81:5f:75:d8:a6:ef:53:82:6d:57:08:b0:67:36:48:55:97:
8c:5e:52:0b:b1:5a:b7:e7:f1:be:de:7d:6c:5d:a9:6d:57:e1:
69:aa:d0:9e:f9:1b:65:98:22:c2:99:02:ee:c1:f7:aa:af:1e:
92:7c:27:88:bf:56:02:74:20:3e:4b:2c:d0:ad:8a:ed:4f:5f:
c9:9f:fc:9b:45:86:4f:a9:50:b0:67:d6:52:bc:78:63:de:45:
e4:08:08:31:8a:01:54:86:d1:03:f2:22:df:10:5b:ec:d8:26:
b0:5b:c5:83:67:c7:f6:22:5b:d2:af:31:81:73:cd:15:41:ac:
dd:13:21:6a:6a:b9:7b:76:02:bc:43:24:7a:07:fc:5f:2a:a1:
72:07:3a:b5:a5:03:49:f3:5c:97:a7:26:dc:e3:f7:ad:17:b5:
51:2f:5f:b1:b0:47:c6:09:a9:cc:fc:77:37:0b:6d:4c:73:45:
73:ab:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:43:11 2025 by rpki-client