This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: uR6W00ibaIlwIISY2N7WKPoZHCrGDh95SOMS3yQfzIU=
Subject key identifier: 0C:E3:C4:E9:4C:28:96:73:6A:17:CD:CE:67:59:1D:A6:0D:78:34:2E
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019C44DA3359567C13F55442AF760898AB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0B5B
Signing time: Tue 10 Feb 2026 00:01:16 +0000
Manifest this update: Tue 10 Feb 2026 00:01:16 +0000
Manifest next update: Wed 11 Feb 2026 00:01:16 +0000
Files and hashes: 1: tSoyf098BzWvypOitt6w4PZYh1E.roa (hash: g79EXU28zyYLa6d3o4fUqKiOYkBLt7sppLFGfj7W4Es=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: nxVvYsVU+HAElP+S3DCBV9RIRomiSX728KIO3mVi/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:33:59:56:7c:13:f5:54:42:af:76:08:98:ab:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Feb 10 00:01:16 2026 GMT
Not After : Feb 11 00:01:16 2026 GMT
Subject: CN=0ce3c4e94c2896736a17cdce67591da60d78342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:0d:cb:87:5a:b9:64:96:bb:49:58:8e:77:
64:88:b7:ce:6d:d1:33:06:f7:65:1b:be:89:a8:97:
07:eb:4c:99:67:65:6a:c2:cf:89:ea:79:a2:c1:b7:
c1:3b:0c:5b:d3:42:6d:c2:37:8c:a0:6b:31:25:7a:
8d:a5:66:38:7a:dd:2e:4e:51:28:c1:67:ce:57:3c:
1e:4d:03:56:d4:e6:90:47:d6:1a:d7:80:2e:d1:4c:
ee:d0:d3:74:bf:43:66:da:9a:3e:fc:f9:b6:6a:22:
91:36:c8:3f:55:5c:f6:ec:4e:8c:fe:1d:c7:c4:3c:
b9:d8:c4:70:37:3e:e2:52:23:14:d9:9e:d3:a2:c8:
e0:f9:c1:e3:b6:b9:9c:5c:32:1a:85:e3:03:85:e4:
b5:f4:4c:87:d8:2b:fd:5d:d8:89:9e:e2:de:e5:98:
f9:1e:68:00:20:69:80:f8:4a:d3:0a:7e:68:b0:a1:
12:c2:f6:e0:53:4d:ed:37:22:14:92:f2:08:05:8d:
b3:26:52:6a:98:39:c5:d5:eb:a4:0d:98:77:02:33:
9b:82:95:2d:e6:ea:a7:ff:d3:b0:75:8e:82:ef:3f:
88:c5:93:3a:f6:97:3d:ba:f2:91:69:78:2c:87:34:
dd:4c:cd:e7:d5:37:ad:68:6a:8d:50:04:a6:9f:3a:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:C4:E9:4C:28:96:73:6A:17:CD:CE:67:59:1D:A6:0D:78:34:2E
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a6:fb:10:a2:4b:14:5b:57:67:8a:89:ca:cd:e2:ff:ca:57:
2e:1f:42:3d:98:3a:ab:44:80:97:25:79:59:92:36:79:57:c4:
40:69:d4:ce:94:a1:27:ba:b7:9e:af:cd:c0:12:44:e9:a4:36:
ce:17:38:ed:eb:af:41:b1:eb:e0:fa:df:94:94:e2:fe:0d:8b:
fc:57:23:45:0f:02:8c:75:2e:8d:b3:68:7f:7a:2f:ae:52:38:
79:e3:d8:4a:cd:86:6b:79:fe:54:1d:70:19:54:a4:71:a1:64:
0b:d0:8c:b1:e0:dc:af:c1:dd:35:d3:9c:60:6d:73:54:d0:a7:
f1:74:e7:d5:c7:9d:f0:e9:50:3d:c9:e1:bd:40:0f:e8:c3:a1:
18:03:7a:dd:4c:03:45:1a:47:3b:08:e6:a2:61:b9:79:1b:62:
09:6e:e4:02:48:bd:de:35:aa:da:24:4b:39:6a:8d:10:63:cd:
c4:65:c6:51:d6:e6:de:4c:46:a2:82:f0:70:ab:03:97:07:0e:
c5:96:ff:20:69:8b:0e:6d:cb:f9:56:33:ae:a7:27:8d:dd:73:
1c:12:1f:2e:75:7f:93:e2:d8:0b:db:58:56:31:a3:9b:a2:3c:
47:c8:be:0f:e7:b9:e4:8f:9e:cf:c8:20:7c:e2:74:6e:27:fe:
69:f7:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:02 2026 by rpki-client