This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
File: TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft (raw, json)
Hash identifier: QwHrnQ1puuOozsNha2RCRGI4SWOf8NQONwzKm3Q1JlQ=
Subject key identifier: 52:73:1A:FC:6C:41:C8:73:85:61:3F:9C:43:08:E7:0A:9F:CC:11:D7
Authority key identifier: 4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
Certificate issuer: /CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Certificate serial: 019C42B441B68C48D3433523BE8208032ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
Manifest number: 27
Signing time: Mon 09 Feb 2026 14:00:35 +0000
Manifest this update: Mon 09 Feb 2026 14:00:35 +0000
Manifest next update: Tue 10 Feb 2026 14:00:35 +0000
Files and hashes: 1: TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl (hash: +qeyKvbp2CseHUYAjvjPjvsLiLiQx7bPR7Dji3oORYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:41:b6:8c:48:d3:43:35:23:be:82:08:03:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Validity
Not Before: Feb 9 14:00:35 2026 GMT
Not After : Feb 10 14:00:35 2026 GMT
Subject: CN=52731afc6c41c87385613f9c4308e70a9fcc11d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:42:0b:86:5d:d9:a2:82:eb:6e:2a:97:a0:
3a:bf:42:8c:78:09:aa:54:d4:4b:23:52:1b:0c:3f:
c8:d2:99:70:ff:d0:61:74:c6:87:5f:3f:66:09:fe:
45:fa:bb:c3:42:c0:87:fc:08:d5:aa:2a:cb:92:6b:
0f:16:fe:04:9f:75:4e:44:34:a4:e9:9f:23:e1:ad:
15:3d:0e:3f:2b:8a:c3:a7:e6:37:07:67:46:bf:26:
80:40:ba:37:59:07:21:49:ef:31:06:05:0e:a0:b8:
fe:1e:78:1f:84:d6:5d:d5:b4:0c:99:30:7b:6f:7f:
6f:bb:24:18:68:e0:47:c9:b2:da:fd:62:c9:b4:3b:
4f:f1:53:1e:ae:92:c6:84:5f:53:01:d1:b1:ab:b9:
59:8f:37:e3:4b:93:e7:f2:52:0b:fc:fe:9a:8d:37:
25:d3:cb:a8:8e:d2:41:b5:ee:b9:85:4b:71:6d:88:
81:4c:19:72:f7:fe:13:d0:1f:f1:9f:30:1c:dc:6f:
60:49:ab:c9:aa:1e:5d:c3:9d:b6:bd:74:28:ad:7e:
dc:27:19:78:b2:40:8a:b7:61:fa:fb:be:8c:ef:55:
24:30:1e:65:80:5e:fd:8b:e8:14:e5:7f:5b:f9:aa:
9f:cd:c0:91:1e:1c:45:6d:b4:da:c6:33:dd:42:18:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:1A:FC:6C:41:C8:73:85:61:3F:9C:43:08:E7:0A:9F:CC:11:D7
X509v3 Authority Key Identifier:
keyid:4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:44:45:a8:ec:35:dc:df:60:eb:39:77:ec:88:b5:7d:45:8d:
0f:82:d4:3f:f5:ae:58:1d:10:e1:89:67:a4:8c:02:06:ff:fd:
7c:2e:95:75:37:48:a7:d3:30:13:6e:16:05:cf:9f:25:9a:8f:
18:0f:87:68:85:90:36:26:a8:11:af:22:2e:26:1f:62:7f:01:
c6:5d:0d:a0:20:a2:9d:c5:9f:ac:db:13:12:1e:a9:31:b5:ce:
a9:d4:2b:97:37:73:bd:33:3d:71:8f:ae:96:22:91:c4:ad:3d:
da:11:c9:0f:ef:fc:a5:8b:83:e6:39:5f:9e:57:25:bb:96:ae:
a2:27:76:f6:e4:33:c5:17:75:fc:5f:d5:9b:52:ad:87:de:4f:
03:90:96:c6:3a:1b:73:07:80:53:83:24:83:5a:5a:e6:a5:7e:
18:1f:9c:0d:cd:16:86:a6:bd:22:a8:6e:dd:51:41:01:e6:d5:
25:ed:d0:08:9f:53:e4:7a:b7:a9:b8:c5:52:5b:4c:ff:cb:45:
b5:20:aa:34:0a:70:37:41:f5:c2:a1:20:5d:cc:58:3e:f1:41:
8e:e1:1d:cc:55:5b:d0:c8:1e:72:f5:f8:f6:a2:89:b8:c4:28:
ae:80:18:b2:0e:ce:72:87:9c:20:fc:a8:11:d4:70:07:7b:48:
57:44:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:41 2026 by rpki-client