This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: k84C3HS/XjAR25u8KTKrV/Us6Cw8i5Uk7oM557UfWGM=
Subject key identifier: 20:4C:5C:2D:9C:5C:3D:52:6B:55:4C:C7:33:16:30:EC:B0:8F:E2:9C
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019C41340F0E82D4DC6AB0B576B1CC45AAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0CB7
Signing time: Mon 09 Feb 2026 07:00:56 +0000
Manifest this update: Mon 09 Feb 2026 07:00:56 +0000
Manifest next update: Tue 10 Feb 2026 07:00:56 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: QzPeWPg+MOXXDMB9sc8dBGqTiCa2/oPX8gQ7Z8f8LGo=)
2: uglZN3e0ur2TkFYxywC2Q5oDa8c.roa (hash: W5cX7fhh2nzjYIuvg0tzN9PC2FGwU2Yio9kqI45+MPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:0f:0e:82:d4:dc:6a:b0:b5:76:b1:cc:45:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Feb 9 07:00:56 2026 GMT
Not After : Feb 10 07:00:56 2026 GMT
Subject: CN=204c5c2d9c5c3d526b554cc7331630ecb08fe29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:e3:96:ee:b9:a1:4a:ac:f7:65:d9:9f:aa:
ba:c2:f0:07:f1:32:02:c6:02:5f:ff:e7:13:54:2a:
b8:7e:67:53:be:03:af:61:40:28:04:15:e1:c6:70:
77:ca:cc:34:5e:15:3f:a0:27:3f:32:70:e8:f9:81:
76:55:75:80:93:ad:5f:3c:e4:b1:3a:be:0a:27:77:
ac:a5:e5:46:66:df:78:3a:ce:e9:70:05:35:d4:d1:
ef:f3:17:c2:d0:b2:42:e8:05:84:f1:a6:00:2e:34:
f2:74:68:66:b6:b2:3b:07:81:20:4b:21:2a:ae:86:
5c:2a:c9:cf:c4:8a:f7:dd:02:8e:67:25:a2:46:2f:
5e:3b:e5:f7:7a:b2:31:4d:f4:e9:2e:c3:b3:41:67:
5d:d9:9a:d2:18:39:9b:d6:75:fc:f2:6b:22:b6:78:
60:70:57:a5:c5:a5:39:39:c6:a0:b1:4f:49:69:60:
6c:d6:55:80:1c:4f:e7:a8:e8:38:e9:34:38:42:80:
56:26:e3:6a:d1:9e:cc:a5:81:6f:30:e0:35:33:47:
44:97:7a:7e:b8:2d:f7:25:3a:f7:10:51:07:d8:d0:
46:5f:f6:cd:79:aa:4d:3d:f8:93:e1:ca:9a:13:65:
cf:56:58:0f:c6:d7:fe:79:2d:ae:06:bf:24:cb:64:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:5C:2D:9C:5C:3D:52:6B:55:4C:C7:33:16:30:EC:B0:8F:E2:9C
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:06:71:ee:e1:77:ea:ee:b4:0b:27:9d:dc:51:43:18:7a:ce:
d0:75:48:ea:e8:22:4a:c3:12:c3:ae:64:13:04:67:4e:0e:08:
9b:11:d2:64:1a:0b:13:6f:3c:29:fb:06:b5:f8:dc:42:bf:f4:
8d:73:47:ce:83:7e:a3:59:bd:2c:37:84:c6:c3:59:eb:72:6b:
59:52:ff:7d:e9:b2:35:ef:96:5d:fb:81:f1:38:ec:4f:b4:27:
2f:ab:db:ff:5e:82:9d:bd:a4:8a:35:8f:19:da:d9:22:47:4b:
ab:d4:96:e9:65:e3:8b:07:71:09:e3:f8:1c:b7:02:9e:c5:bd:
32:68:e9:dd:06:70:c1:f5:25:ba:c3:8b:12:96:28:aa:02:b0:
1c:cd:c5:a3:51:cf:66:22:2e:0c:56:7a:4f:6b:d9:bb:26:e8:
76:1c:07:2a:2d:78:da:9a:61:5a:91:4a:92:a1:1a:4e:f6:9f:
38:f6:10:58:70:2d:9d:b5:04:69:8f:2e:c4:ef:50:4e:ee:84:
59:09:8d:d3:45:12:ca:7e:fb:7c:9f:5e:6a:3a:62:09:2d:8c:
35:c3:41:d2:20:d0:dd:14:59:08:e9:9e:4d:bf:3e:b9:b4:49:
b0:20:e8:2d:b0:31:3f:e1:11:98:6e:80:76:86:33:2d:af:43:
0b:4a:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:33 2026 by rpki-client