This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: DX5BL491lNqQrX8ma24+04EMD93M9Sc7nGV0SDmfb4Q=
Subject key identifier: F1:6A:BF:33:9A:40:FA:A2:BF:3D:81:41:94:A3:87:91:72:DF:81:4D
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019C438FAD2C24AE50368587127F9119410C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 18:00:15 +0000
Manifest this update: Mon 09 Feb 2026 18:00:15 +0000
Manifest next update: Tue 10 Feb 2026 18:00:15 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: UHEFam8jl3RPnyMyt0edVxDzMqmNvyfA519bfOedEBI=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:ad:2c:24:ae:50:36:85:87:12:7f:91:19:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Feb 9 18:00:15 2026 GMT
Not After : Feb 10 18:00:15 2026 GMT
Subject: CN=f16abf339a40faa2bf3d814194a3879172df814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:84:98:9e:06:58:ef:fd:d7:08:90:84:30:
b6:d0:15:0e:97:5b:c9:d4:66:fd:d0:b0:13:3e:e4:
41:79:62:8c:94:66:13:74:9d:e5:e3:e5:bf:c8:b4:
cc:c9:5f:5f:91:08:1e:87:74:a3:f9:19:da:8e:89:
9f:6a:61:d9:88:aa:f9:0b:6c:6c:42:0b:25:e3:7e:
ee:f7:9d:ec:5e:f7:bd:27:b4:f3:e4:db:a6:57:9a:
42:88:59:03:0b:ba:bb:54:05:ef:23:8b:63:9a:ae:
48:eb:16:de:98:ff:25:46:74:d5:0f:bb:e8:fb:1f:
93:ea:e2:99:02:11:d0:fc:b3:d9:4e:1c:44:2c:ad:
a2:92:30:6e:9e:10:a0:a3:0d:8a:3d:c3:a5:a7:2d:
a8:fe:d1:dd:b5:92:c7:de:88:84:5e:ea:ce:ae:3a:
c1:7b:c0:eb:e4:71:5c:f4:89:9b:41:9a:39:b7:ae:
a4:ca:d9:6e:9d:4d:fa:03:7d:44:5b:e6:f1:c9:88:
ff:bc:b6:59:ba:84:93:e4:65:26:59:08:1f:57:4f:
1f:3b:44:88:be:7c:cc:5a:46:c6:0d:88:a9:00:d5:
e6:5f:40:95:29:68:56:c1:90:04:1d:10:3f:28:f1:
84:9c:6a:7d:aa:d7:89:51:d4:68:8a:47:89:10:ca:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:BF:33:9A:40:FA:A2:BF:3D:81:41:94:A3:87:91:72:DF:81:4D
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:32:c2:37:88:32:92:37:3d:a2:71:d3:21:2e:7a:02:5d:68:
c1:cf:9e:40:c5:e6:e2:c4:1c:49:dc:cd:d1:ba:53:d6:56:16:
4e:41:f6:91:b5:97:8e:5a:30:b1:68:c2:72:20:67:02:e7:89:
3b:d8:3a:1c:95:93:43:70:e1:47:bc:88:89:c6:53:14:44:77:
5c:0a:73:df:8e:50:e7:79:87:c1:25:b9:80:bc:d4:6b:e8:1c:
9b:58:b2:db:b6:d6:27:8b:c9:a3:72:7c:7d:01:09:4a:b4:30:
57:f6:40:dd:0a:c2:22:ab:9a:ce:9e:aa:45:5b:81:d6:59:6a:
c4:3a:82:10:cc:8c:d2:2e:7c:df:30:74:eb:fa:cf:eb:28:77:
11:55:7e:d8:58:74:a8:06:99:ba:1c:d2:ba:cd:e5:f8:94:93:
2a:ff:1f:ef:60:ff:66:87:a3:ce:63:4b:15:07:c5:24:f9:ae:
27:29:80:89:a7:cc:0e:79:46:d2:f0:1b:e2:24:27:34:31:4d:
25:27:31:64:96:a3:83:f7:5b:c3:70:2e:8e:14:4e:eb:ae:d3:
ef:4c:0b:e7:29:90:8b:c8:4d:44:4c:f3:24:17:a1:6b:b9:a1:
87:b6:63:c6:b7:36:93:14:21:1d:f8:70:10:f7:8b:f4:58:c2:
eb:e0:95:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj60sJK5QNoWHEn+RGUEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjYwMjA5MTgwMDE1WhcNMjYwMjEwMTgwMDE1WjAzMTEwLwYDVQQD
EyhmMTZhYmYzMzlhNDBmYWEyYmYzZDgxNDE5NGEzODc5MTcyZGY4MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOEmJ4GWO/91wiQhDC20BUOl1vJ
1Gb90LATPuRBeWKMlGYTdJ3l4+W/yLTMyV9fkQgeh3Sj+RnajomfamHZiKr5C2xs
Qgsl437u953sXve9J7Tz5NumV5pCiFkDC7q7VAXvI4tjmq5I6xbemP8lRnTVD7vo
+x+T6uKZAhHQ/LPZThxELK2ikjBunhCgow2KPcOlpy2o/tHdtZLH3oiEXurOrjrB
e8Dr5HFc9ImbQZo5t66kytlunU36A31EW+bxyYj/vLZZuoST5GUmWQgfV08fO0SI
vnzMWkbGDYipANXmX0CVKWhWwZAEHRA/KPGEnGp9qteJUdRoikeJEMpLdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFqvzOaQPqivz2BQZSjh5Fy34FNMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDLCN4gy
kjc9onHTIS56Al1owc+eQMXm4sQcSdzN0bpT1lYWTkH2kbWXjlowsWjCciBnAueJ
O9g6HJWTQ3DhR7yIicZTFER3XApz345Q53mHwSW5gLzUa+gcm1iy27bWJ4vJo3J8
fQEJSrQwV/ZA3QrCIquazp6qRVuB1llqxDqCEMyM0i583zB06/rP6yh3EVV+2Fh0
qAaZuhzSus3l+JSTKv8f72D/ZoejzmNLFQfFJPmuJymAiafMDnlG0vAb4iQnNDFN
JScxZJajg/dbw3AujhRO667T70wL5ymQi8hNREzzJBeha7mhh7Zjxrc2kxQhHfhw
EPeL9FjC6+CVEw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:48 2026 by rpki-client