This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: GGPKI+yOK4j+g/BWNY8R568sX7EN4GMgxog70yUaooo=
Subject key identifier: 88:7C:94:BB:58:2F:66:32:B1:A8:D0:6E:99:8D:33:BB:63:64:D3:F5
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019C20CE7CF96690B3DD0EBDE2EB453C471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 1801
Signing time: Tue 03 Feb 2026 00:02:09 +0000
Manifest this update: Tue 03 Feb 2026 00:02:09 +0000
Manifest next update: Wed 04 Feb 2026 00:02:09 +0000
Files and hashes: 1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
2: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (hash: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: 5U/Cu/2vX3wsfauFOdoWRMqH524UI4IRHOX/D2ZKtso=)
4: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 21:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:20:ce:7c:f9:66:90:b3:dd:0e:bd:e2:eb:45:3c:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Feb 3 00:02:09 2026 GMT
Not After : Feb 4 00:02:09 2026 GMT
Subject: CN=887c94bb582f6632b1a8d06e998d33bb6364d3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:6b:6b:11:26:b2:ac:b5:fc:af:1e:6d:cc:
93:5d:2e:fc:be:be:db:25:3f:db:51:6e:92:e9:7c:
fe:d3:9e:e7:b1:b1:b2:ba:ea:89:48:72:7b:57:bc:
dd:cb:9d:ec:36:b5:39:dd:58:6f:f5:93:c0:b6:13:
4e:c9:6c:28:28:94:01:34:ef:7e:6f:6c:6c:df:13:
2c:2d:cb:ad:37:98:5a:db:2c:be:9c:f1:5e:ec:40:
85:71:f9:c4:1f:06:be:e0:04:08:7b:1d:ae:14:13:
51:90:f4:22:b3:19:10:a9:e1:30:53:a9:53:b7:b0:
71:14:c8:bb:c6:a9:1d:cb:48:44:47:c7:72:75:72:
5d:77:15:0c:f9:7d:37:86:ee:3d:d6:fe:39:d8:7d:
1a:de:c5:d7:2c:e9:1b:23:4c:d6:64:60:26:05:de:
6d:df:5d:cf:cb:df:10:e3:6d:e8:e9:24:40:44:84:
b3:53:f9:d4:a8:5d:3d:a5:7e:e4:f3:d5:75:c0:58:
17:ee:17:ed:91:d0:35:6e:4d:b4:98:b1:29:00:76:
f6:18:61:59:63:0b:37:c2:aa:c5:1a:c9:2a:b6:a1:
05:24:20:20:2f:ab:0c:49:66:2f:65:3f:06:9c:f5:
b4:e9:21:62:d4:a9:af:b8:11:6f:aa:e2:74:0b:d7:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7C:94:BB:58:2F:66:32:B1:A8:D0:6E:99:8D:33:BB:63:64:D3:F5
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:4a:c2:05:01:6d:05:3d:d5:f9:89:36:31:dc:ef:5e:9c:
64:91:34:05:df:c9:cd:73:74:8c:60:c3:ce:22:77:e2:6d:d1:
10:a9:2f:46:ac:cd:d9:2e:e8:14:74:4a:22:1f:62:b2:bc:5d:
74:eb:e7:df:c9:24:90:ea:70:c7:cf:86:3e:5c:a6:a5:15:75:
16:7c:76:8f:df:ec:b4:fd:18:03:62:95:2f:ba:03:3c:16:c5:
6f:89:29:45:34:ec:34:0b:1e:3a:9a:64:66:69:0a:32:d3:5c:
53:3f:e1:90:59:76:86:8a:d3:a6:ff:60:d5:f0:72:fe:47:0f:
4a:7c:14:b2:ea:ef:14:c4:2c:e7:ed:83:e7:48:c4:bf:8e:94:
32:68:14:6c:d9:77:70:4f:53:ba:d8:f8:17:d2:56:43:d2:b2:
bb:96:4a:00:2d:63:c2:59:50:ae:67:2a:ab:d2:90:fa:62:92:
eb:91:c1:45:d7:e4:08:80:3c:4e:86:c0:16:6c:ed:3b:d0:4a:
0d:fc:6d:c2:b7:d9:20:2d:ca:25:d4:7c:23:e9:cf:5f:86:74:
1c:94:c4:b6:b8:2e:cd:49:3a:68:90:b5:1f:14:9d:9e:49:8d:
d1:77:14:9f:a8:ca:d3:d2:25:59:16:eb:6c:b5:fb:13:d5:a8:
c9:6f:e9:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwgznz5ZpCz3Q694utFPEceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy
ZTBmM2UwHhcNMjYwMjAzMDAwMjA5WhcNMjYwMjA0MDAwMjA5WjAzMTEwLwYDVQQD
Eyg4ODdjOTRiYjU4MmY2NjMyYjFhOGQwNmU5OThkMzNiYjYzNjRkM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KVraxEmsqy1/K8ebcyTXS78vr7b
JT/bUW6S6Xz+057nsbGyuuqJSHJ7V7zdy53sNrU53Vhv9ZPAthNOyWwoKJQBNO9+
b2xs3xMsLcutN5ha2yy+nPFe7ECFcfnEHwa+4AQIex2uFBNRkPQisxkQqeEwU6lT
t7BxFMi7xqkdy0hER8dydXJddxUM+X03hu491v452H0a3sXXLOkbI0zWZGAmBd5t
313Py98Q423o6SRARISzU/nUqF09pX7k89V1wFgX7hftkdA1bk20mLEpAHb2GGFZ
Yws3wqrFGskqtqEFJCAgL6sMSWYvZT8GnPW06SFi1KmvuBFvquJ0C9emCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh8lLtYL2YysajQbpmNM7tjZNP1MB8GA1UdIwQY
MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt
NzE1ZjljZDYzMDg2LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2
LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4NKwgUB
bQU91fmJNjHc716cZJE0Bd/JzXN0jGDDziJ34m3REKkvRqzN2S7oFHRKIh9isrxd
dOvn38kkkOpwx8+GPlympRV1Fnx2j9/stP0YA2KVL7oDPBbFb4kpRTTsNAseOppk
ZmkKMtNcUz/hkFl2horTpv9g1fBy/kcPSnwUsurvFMQs5+2D50jEv46UMmgUbNl3
cE9Tutj4F9JWQ9Kyu5ZKAC1jwllQrmcqq9KQ+mKS65HBRdfkCIA8TobAFmztO9BK
DfxtwrfZIC3KJdR8I+nPX4Z0HJTEtrguzUk6aJC1HxSdnkmN0XcUn6jK09IlWRbr
bLX7E9WoyW/pPA==
-----END CERTIFICATE-----
Generated at Tue Feb 3 04:56:06 2026 by rpki-client