This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: aFC6Ma+AM4BxhGSgygSWdTt7KJjaSJJaSpxGO5SF/uk=
Subject key identifier: E3:E4:99:3A:E3:7E:43:1C:CC:81:D2:83:79:5E:7A:0C:8C:36:56:7B
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019B3CB51DFFB01058E8C320AF870CBD688C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0C3E
Signing time: Sat 20 Dec 2025 17:01:01 +0000
Manifest this update: Sat 20 Dec 2025 17:01:01 +0000
Manifest next update: Sun 21 Dec 2025 17:01:01 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: ePrYCr1Bh5rM29yCQPixgs0uwY3qqhIfHr4GSb0680I=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b5:1d:ff:b0:10:58:e8:c3:20:af:87:0c:bd:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Dec 20 17:01:01 2025 GMT
Not After : Dec 21 17:01:01 2025 GMT
Subject: CN=e3e4993ae37e431ccc81d283795e7a0c8c36567b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:e2:bb:9c:b7:9c:fd:5c:e8:be:45:67:1c:
a9:f9:83:09:3a:d8:66:92:fb:eb:c2:17:97:9b:a5:
90:39:0c:0e:d9:a5:b2:9a:a4:e8:61:72:f7:ce:9d:
c2:bb:0d:2a:54:2e:e9:e3:79:32:a3:c2:7d:ca:99:
3c:2a:c8:9b:75:a7:a6:92:56:68:0d:31:e9:4d:c2:
b4:00:68:48:dd:34:f8:80:00:57:9f:d4:87:cd:e7:
2f:8f:b9:c7:19:47:35:3a:90:76:15:18:1c:1d:bf:
6f:fe:f0:cc:22:dc:36:3a:db:99:45:66:d2:6e:19:
6c:92:55:a5:92:08:e0:09:0d:b3:1c:8a:45:d5:e3:
82:91:7b:c9:24:4d:f9:59:f7:e4:9c:70:97:75:3c:
68:bd:62:de:17:97:c1:19:ca:4d:cd:4f:ce:4f:f3:
ee:e9:c6:dd:76:11:9e:f3:e3:c5:4a:87:45:2b:a9:
bb:eb:f1:60:48:c0:73:38:eb:44:14:c7:1d:b4:39:
9e:04:31:0d:9c:24:b1:9f:de:e8:c6:f2:8c:b7:30:
f7:3e:a3:99:b2:4b:64:e8:62:18:c6:cb:56:9b:6d:
29:8c:ad:65:4f:e9:b1:85:93:d1:9f:b2:7f:4c:c4:
cd:96:f7:aa:55:35:30:07:85:6a:2c:23:dc:76:f0:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:99:3A:E3:7E:43:1C:CC:81:D2:83:79:5E:7A:0C:8C:36:56:7B
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d1:8e:be:f3:13:bc:e7:5d:e2:23:49:52:28:83:51:72:79:
fc:b1:bf:a4:15:70:d9:c8:81:45:18:7e:e2:db:10:4d:bd:fa:
7d:bd:6d:a6:d7:9a:df:a1:42:4a:17:bf:73:8d:d2:a5:d1:ac:
dc:41:af:d1:0c:ed:64:9b:69:09:3f:4c:61:e1:a3:92:d2:aa:
66:11:f6:ef:88:a0:36:47:0c:73:91:9f:91:99:fc:a5:b8:d7:
1d:ca:bb:b6:9c:28:13:5c:db:fe:eb:52:1e:31:ef:65:29:0d:
da:74:1a:9e:55:e1:cb:11:7a:0e:1e:33:11:b3:6f:39:c4:ea:
ef:e5:cc:32:dd:88:c3:c6:bc:7a:a3:3c:d2:ad:ea:43:98:2a:
cf:06:3a:fa:ea:e6:ff:76:a3:f1:b6:ba:c5:42:f6:32:fd:32:
00:db:59:34:bf:fc:65:22:9b:15:c3:16:35:83:de:88:99:05:
56:1d:a5:5b:4a:40:40:d8:97:c1:cb:9e:4e:9f:d5:0c:d3:61:
9c:69:7b:5f:45:3e:69:4c:c1:bc:aa:ec:e5:7f:57:7d:fc:c7:
b8:9d:82:58:e7:7a:13:73:4c:b6:6f:36:5f:2c:12:b2:3e:0c:
02:b0:6d:2b:be:36:15:86:22:3b:70:e7:50:5d:fa:13:6f:dc:
66:20:49:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8tR3/sBBY6MMgr4cMvWiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUxMjIwMTcwMTAxWhcNMjUxMjIxMTcwMTAxWjAzMTEwLwYDVQQD
EyhlM2U0OTkzYWUzN2U0MzFjY2M4MWQyODM3OTVlN2EwYzhjMzY1NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13/iu5y3nP1c6L5FZxyp+YMJOthm
kvvrwheXm6WQOQwO2aWymqToYXL3zp3Cuw0qVC7p43kyo8J9ypk8KsibdaemklZo
DTHpTcK0AGhI3TT4gABXn9SHzecvj7nHGUc1OpB2FRgcHb9v/vDMItw2OtuZRWbS
bhlsklWlkgjgCQ2zHIpF1eOCkXvJJE35WffknHCXdTxovWLeF5fBGcpNzU/OT/Pu
6cbddhGe8+PFSodFK6m76/FgSMBzOOtEFMcdtDmeBDENnCSxn97oxvKMtzD3PqOZ
sktk6GIYxstWm20pjK1lT+mxhZPRn7J/TMTNlveqVTUwB4VqLCPcdvAvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPkmTrjfkMczIHSg3leegyMNlZ7MB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdGOvvMT
vOdd4iNJUiiDUXJ5/LG/pBVw2ciBRRh+4tsQTb36fb1tptea36FCShe/c43SpdGs
3EGv0QztZJtpCT9MYeGjktKqZhH274igNkcMc5GfkZn8pbjXHcq7tpwoE1zb/utS
HjHvZSkN2nQanlXhyxF6Dh4zEbNvOcTq7+XMMt2Iw8a8eqM80q3qQ5gqzwY6+urm
/3aj8ba6xUL2Mv0yANtZNL/8ZSKbFcMWNYPeiJkFVh2lW0pAQNiXwcueTp/VDNNh
nGl7X0U+aUzBvKrs5X9XffzHuJ2CWOd6E3NMtm82XywSsj4MArBtK742FYYiO3Dn
UF36E2/cZiBJSw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:26:33 2025 by rpki-client