This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: blG8TDevUBC+r+JFttU61mbrbY7AROZ9Td99AUo24P4=
Subject key identifier: 5F:3E:33:66:57:06:A0:7D:F2:16:7F:4A:49:B2:A0:6A:7F:16:A5:FB
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019C413399B30FD104957933D067A61E0278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 099C
Signing time: Mon 09 Feb 2026 07:00:26 +0000
Manifest this update: Mon 09 Feb 2026 07:00:26 +0000
Manifest next update: Tue 10 Feb 2026 07:00:26 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: dFfB8mVFCa9aUGoxMK2C1f3idGKRMVvsBQruaEiwwEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:99:b3:0f:d1:04:95:79:33:d0:67:a6:1e:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Feb 9 07:00:26 2026 GMT
Not After : Feb 10 07:00:26 2026 GMT
Subject: CN=5f3e33665706a07df2167f4a49b2a06a7f16a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:46:7b:fb:a0:97:40:a4:cb:15:07:10:f0:
c1:ce:64:5c:39:07:b2:8a:be:fa:b1:e9:a0:a7:08:
df:4e:25:6e:68:59:95:b7:1e:9f:d4:18:d9:65:c3:
6b:2e:d9:33:24:f5:bf:f3:78:7c:23:18:dd:1e:1c:
99:dd:aa:af:69:79:aa:d4:04:57:9c:7f:06:89:6e:
cd:72:89:fa:cd:7e:13:f8:6d:c3:66:fd:26:01:f4:
38:42:27:9e:17:5a:1b:5d:bf:9a:43:43:1f:ac:3b:
ee:62:49:ae:99:68:a4:ef:9a:98:ab:93:b8:0c:67:
83:b3:8f:25:2b:3e:97:6f:2b:6e:f4:f5:0e:3b:ae:
46:d5:61:98:65:db:71:ef:81:aa:2c:21:ff:b1:f3:
6a:27:0b:fd:d4:35:5a:47:8e:52:4d:e1:34:c5:3f:
aa:0f:ce:7e:cb:5b:7d:3f:37:83:8d:2a:c6:44:64:
8d:e5:24:42:10:29:c7:f1:4e:16:02:34:6c:99:43:
31:9a:9c:ca:b1:d9:4e:4c:ee:85:ba:98:29:2f:3a:
ae:95:c7:56:fd:26:a3:e0:7f:a0:a1:68:94:54:d3:
3e:52:4a:fd:0e:18:93:2c:c0:6d:39:56:c2:7d:c4:
82:06:70:3c:5d:40:8f:f6:fc:9b:b5:3e:b5:70:ad:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:33:66:57:06:A0:7D:F2:16:7F:4A:49:B2:A0:6A:7F:16:A5:FB
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:99:73:6e:f1:83:4a:c9:3f:a6:00:ed:45:e0:17:9c:18:
b6:e7:31:85:17:dc:06:d2:40:70:f7:80:67:c0:57:e4:7e:da:
81:b6:f0:6a:e1:37:27:7c:29:2d:ec:d8:4b:fe:3a:2f:50:03:
f3:05:ff:82:9b:84:b4:06:d4:07:35:a7:c1:fa:ba:bf:04:39:
68:79:05:0e:58:1b:4e:2c:42:81:c9:25:b6:3c:f4:93:86:38:
ae:d0:fa:9a:e2:c9:74:5e:23:62:1e:53:22:7b:a9:dd:83:c7:
36:c9:8d:ac:32:fb:89:60:01:7a:80:9e:c8:df:bf:80:fb:f4:
61:6d:38:eb:f7:f3:34:be:35:6f:18:c0:7e:3b:b9:22:42:a5:
4d:0d:87:59:23:45:3d:65:2d:68:f3:5b:9a:0c:c2:2e:a3:08:
bb:83:5b:de:17:eb:00:1e:db:10:e4:88:dc:f9:13:ba:89:ff:
7c:0a:f0:b2:2e:de:b2:21:03:79:1b:01:9a:45:cd:2c:69:e4:
b6:25:1a:18:83:6e:a3:18:3d:93:11:5f:be:b0:f9:2b:0e:12:
ae:be:5e:8f:89:5c:2e:d0:ff:e1:86:0c:59:68:41:c7:62:1d:
91:85:5d:3f:1b:6c:71:01:46:a2:d8:e7:a1:3c:3b:0e:61:ac:
23:ec:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:44 2026 by rpki-client