This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: rt4G5eDzMdllC6Kxoiyw+YYsIF+BzDuOdZzp15dRmkM=
Subject key identifier: F2:78:F6:82:15:1B:12:F8:12:90:22:F2:AC:77:0D:BD:B6:6B:46:23
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019C1E035C3426567D6E600CF3B13ACCD69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 17EB
Signing time: Mon 02 Feb 2026 11:01:02 +0000
Manifest this update: Mon 02 Feb 2026 11:01:02 +0000
Manifest next update: Tue 03 Feb 2026 11:01:02 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: gG0pah2NPIu0KtotrzyJREaDqk5N9fn4m1HY3ccxoQ8=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:03:5c:34:26:56:7d:6e:60:0c:f3:b1:3a:cc:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Feb 2 11:01:02 2026 GMT
Not After : Feb 3 11:01:02 2026 GMT
Subject: CN=f278f682151b12f8129022f2ac770dbdb66b4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:db:b8:30:3e:06:4b:80:8d:3c:27:fa:d6:
09:a4:95:31:3a:7e:cb:bc:af:61:b9:18:54:9d:9d:
19:17:bd:17:f2:da:c3:63:ba:f8:2f:51:b7:68:fb:
5f:3d:9f:9e:b5:95:66:03:c7:1c:30:a5:05:0d:0b:
5a:00:e8:66:55:15:53:d8:93:a8:36:57:e6:58:bd:
df:11:e8:61:f9:1f:95:a1:74:d5:04:b6:57:de:77:
38:e1:a9:1c:38:28:60:ba:7a:a7:99:80:bd:db:f0:
a6:c9:a8:3e:33:fe:50:a3:89:eb:5a:7c:81:54:ed:
41:09:2f:b5:87:38:42:49:11:21:90:62:fc:50:96:
11:2f:09:92:fa:17:5e:94:44:dd:d7:2a:3c:06:5d:
20:f0:5a:de:81:07:2c:06:0a:c1:87:20:71:02:b7:
9a:d5:00:98:57:37:ec:e7:90:89:92:5d:c2:b1:a5:
b3:a0:ab:0a:63:02:b4:92:31:f1:26:fd:5d:06:43:
97:a3:af:79:fb:d3:e8:ab:b6:63:64:39:16:ff:9d:
1a:15:99:3f:bd:6f:7f:e8:dd:68:6a:00:2f:e4:31:
b3:7a:23:8b:f3:5f:6c:65:ad:fb:01:0a:29:76:d5:
8e:cd:46:73:9f:45:7a:43:4c:8f:21:28:91:b4:dc:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:78:F6:82:15:1B:12:F8:12:90:22:F2:AC:77:0D:BD:B6:6B:46:23
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:52:5f:a5:11:41:e9:63:2d:d1:58:25:cb:5f:21:48:1f:
96:b7:c3:f1:b5:bb:f4:2e:14:2c:4f:05:9e:90:59:5f:6f:9a:
2b:27:5b:34:96:34:e4:95:4d:a5:d8:11:25:74:2e:01:55:aa:
02:10:c8:ba:bf:6d:5e:cf:97:5d:cc:d8:d7:7b:92:8b:60:16:
a6:d1:b0:61:4e:06:a9:fa:82:1b:fc:13:84:9e:de:2c:9c:87:
bf:1a:7c:be:ab:74:b9:02:1a:a6:6f:b5:7c:2d:b2:53:79:34:
30:2d:77:e8:10:4b:8e:8f:26:2f:91:2c:7e:7a:72:fe:2f:0e:
15:c7:9e:ff:0e:8e:ea:56:a3:96:aa:c7:a1:0c:11:6e:ee:d0:
a5:1a:66:17:8c:50:d7:03:a5:09:c8:5d:60:10:9f:e6:45:59:
b1:4a:fe:eb:21:c6:e5:49:a3:26:81:82:04:b6:10:c0:4c:21:
ed:34:ef:f1:27:48:38:23:4b:a8:fb:69:11:11:9f:64:98:fb:
e0:b6:0f:0f:92:cf:88:75:b9:3d:73:da:7f:82:a5:81:a1:93:
67:3a:1b:c2:bb:50:53:22:9c:5a:a8:d2:c1:fd:fa:32:29:a9:
ba:e4:2b:0e:e1:ae:7d:9f:5d:67:3c:fe:c8:83:3e:89:71:07:
ca:de:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:53:46 2026 by rpki-client