This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: N0bZ+K8QnAOUoh4aKYn3F/4hU6hcY2BMAJXKL2LpZJ0=
Subject key identifier: 23:25:CF:F1:1A:B4:ED:45:21:98:AE:98:70:64:65:A2:21:17:A9:2F
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019C43221522AAD8E3B9481894E8C54789DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0F36
Signing time: Mon 09 Feb 2026 16:00:32 +0000
Manifest this update: Mon 09 Feb 2026 16:00:32 +0000
Manifest next update: Tue 10 Feb 2026 16:00:32 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: 7f/CHzmG6A12LgdlHt/xaE6+b3Ah0adK2E/1cjYhOPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:15:22:aa:d8:e3:b9:48:18:94:e8:c5:47:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Feb 9 16:00:32 2026 GMT
Not After : Feb 10 16:00:32 2026 GMT
Subject: CN=2325cff11ab4ed452198ae98706465a22117a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:5e:9c:ef:eb:55:d7:a9:b7:d2:31:ff:ee:
e3:b6:2f:36:98:dd:cf:04:e8:b0:83:20:6d:38:ed:
a9:e1:85:ec:81:03:1f:ec:19:ad:72:46:16:bb:7e:
98:a9:04:9f:2b:10:29:b0:e2:72:ca:5a:47:1e:10:
77:7b:d3:b0:3f:20:3a:0e:54:8b:0d:2a:5b:b6:59:
db:b3:fd:67:9d:21:50:85:e1:d7:b0:c0:81:8a:5c:
eb:7a:d9:6a:21:8a:f7:35:19:55:f4:7a:57:5d:71:
5f:88:e1:e6:bf:60:14:f1:7d:9e:a7:49:03:f7:85:
9c:6d:c9:d6:10:49:91:a1:47:b6:64:3a:a6:e2:d8:
8c:98:97:97:97:a1:b1:c7:17:c9:c8:a8:95:72:77:
17:1d:d3:11:cc:ec:2f:9a:d0:94:92:5d:bb:81:ff:
01:3c:62:e0:7e:2b:0c:bb:be:f0:df:c5:5f:c4:a7:
be:53:af:3c:aa:96:0c:40:28:14:c4:54:4a:50:50:
23:69:9a:d6:96:64:bc:1d:28:ba:41:d5:99:56:d6:
9c:b2:3b:ae:46:84:5a:34:ab:9b:82:d5:9d:de:22:
94:18:23:8a:ee:3e:23:fd:a2:f1:57:3c:e0:0a:30:
c8:09:89:ba:6b:a8:04:d2:aa:55:c2:7f:58:a6:fe:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:CF:F1:1A:B4:ED:45:21:98:AE:98:70:64:65:A2:21:17:A9:2F
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:54:ef:02:d9:53:87:b4:b0:95:5e:a7:e4:73:44:c6:f6:
57:1c:e5:15:83:10:6a:52:d5:bd:69:f9:d4:f0:3b:92:b6:86:
e7:42:5c:19:10:d7:d7:40:19:c9:4b:b6:0a:50:b0:0e:97:58:
5d:8f:48:f7:9d:46:dc:8e:7d:82:eb:93:f6:2a:58:92:7a:11:
ed:13:e1:14:6a:2f:52:6c:11:60:2a:23:4d:1a:1b:2e:de:ec:
35:43:f4:30:f8:72:2a:fa:d8:f8:17:19:ff:58:0e:f2:db:34:
fa:c5:2d:95:1e:95:9a:8a:e7:60:00:18:2d:6c:b1:d7:7b:d0:
52:a4:88:b3:5f:5e:2e:42:64:c3:56:14:b7:96:c1:65:46:a3:
62:d6:82:58:35:67:4a:07:49:f9:93:7e:92:55:da:b8:c9:2c:
10:ce:ca:48:4f:6d:b1:5f:f7:66:4a:ab:22:2c:d7:cd:8a:75:
86:1c:74:ac:cb:16:b2:8a:17:ef:e8:03:ee:7e:40:4e:ca:05:
f1:55:bd:d6:1d:da:be:47:34:7e:08:fe:2d:6f:a0:04:3b:d9:
24:fd:28:7a:76:99:8b:8c:2d:28:11:76:fa:84:86:79:6f:30:
85:8a:1d:65:78:20:ab:12:93:f9:0c:de:8e:4d:99:5f:5d:eb:
5a:cd:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:57 2026 by rpki-client