This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: eij0OnhoCvg1mPWW236u+v4JNnn+jvLuQcJQAAf5fYs=
Subject key identifier: 6F:0B:D0:F8:13:70:8D:F8:33:A7:B7:D1:53:83:52:51:73:AA:49:9E
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019BF8087DED4A732EAEF3716E8976307CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 12EC
Signing time: Mon 26 Jan 2026 02:01:04 +0000
Manifest this update: Mon 26 Jan 2026 02:01:04 +0000
Manifest next update: Tue 27 Jan 2026 02:01:04 +0000
Files and hashes: 1: 1-y_IdByEhn8iG3365qsDy0gWV1Y.roa (hash: VS0T4i9Pv0/1fxgKv6PoNA1S1TKYjVElMHVoIv5HPww=)
2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: kfccsXBbQ4Hdxe7669S1H1ssAPVubLGqiaK+pEDkuXE=)
5: mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa (hash: A+YQ/4Az7bNkzemJO71ARj4rjsy96lN9Lz8BWv7V8fg=)
6: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
7: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
8: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:08:7d:ed:4a:73:2e:ae:f3:71:6e:89:76:30:7c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 26 02:01:04 2026 GMT
Not After : Jan 27 02:01:04 2026 GMT
Subject: CN=6f0bd0f813708df833a7b7d15383525173aa499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:d8:62:cd:2a:6f:9e:0c:e3:70:df:c1:b1:
4f:9b:1d:24:21:25:19:83:62:cc:7f:bc:c5:ab:a7:
2f:86:30:37:72:39:21:67:ea:7a:d1:38:32:81:73:
94:36:d5:24:60:11:ec:b7:a7:68:f5:33:c0:3b:fd:
f4:ed:d6:f7:9d:bf:94:8a:4e:d5:25:a4:8f:2d:ee:
7a:a3:a7:1c:f5:c4:8a:48:69:bc:8e:31:a8:12:1b:
91:50:3d:fb:8c:ed:fc:44:78:52:ed:88:f7:59:d6:
39:cd:69:de:2f:b1:27:9b:07:02:a2:f9:5b:d0:b2:
fe:b4:9d:ac:03:70:3a:ac:be:93:b1:b9:32:f5:03:
c7:68:4d:cf:96:a9:75:cd:68:fb:6c:f8:07:d5:48:
2a:07:c3:07:7f:a4:76:b3:41:d7:30:74:5b:95:93:
c7:c1:d4:7d:03:c3:a3:c7:5d:b7:61:97:e1:5d:fc:
47:08:3f:cc:44:d3:2f:22:53:62:80:5e:75:af:a0:
18:f3:e2:03:21:3d:09:65:e5:f8:ae:29:e8:c8:21:
2d:ef:44:4e:28:0b:74:45:00:50:cb:a1:c8:cf:2f:
45:c8:0e:00:a2:bb:e7:ff:97:a8:a8:04:c1:05:2e:
a9:dc:3f:a4:9e:4c:4a:96:be:60:c0:6c:2d:5d:9c:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:D0:F8:13:70:8D:F8:33:A7:B7:D1:53:83:52:51:73:AA:49:9E
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:a0:d7:d9:a5:0d:25:02:07:b1:19:05:76:f4:ed:59:8d:
f4:84:cc:93:ca:83:2c:c2:41:b2:5c:c0:74:e5:59:89:8a:14:
66:8e:2e:c5:08:08:c0:57:b3:48:c3:70:70:65:81:1c:06:06:
9a:f9:3e:3f:4a:53:50:cb:e7:16:62:83:57:24:a6:c9:72:84:
e2:04:2b:e7:34:ce:8b:12:d7:51:f0:1f:f7:8d:9b:50:f8:78:
94:69:41:25:9a:0b:a0:06:46:53:fd:77:c1:d2:eb:89:a8:7a:
7c:46:3a:99:54:52:0c:d3:c6:ef:08:49:fa:49:c4:c1:2f:70:
83:9f:6c:a5:89:bc:68:07:bb:d3:fc:7f:0d:40:b9:ea:d3:0c:
f6:71:47:74:a8:c7:1f:35:26:c4:11:83:18:de:4a:b5:a8:95:
e8:0b:82:8d:44:fe:56:fb:93:c3:bb:f5:88:39:26:35:52:76:
fd:0a:c8:07:40:d9:80:13:bb:5c:e1:72:67:9a:c1:2d:2c:84:
25:0a:b3:2c:c7:f4:6d:12:7b:a5:b1:03:7c:5a:d9:d2:f7:73:
ea:8f:5d:72:2b:3d:97:2e:4f:4d:2c:aa:10:26:58:99:9e:b7:
0f:6e:27:4b:73:74:1a:66:d1:98:ff:f4:c6:ad:84:af:00:e4:
9c:3d:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:25:43 2026 by rpki-client