This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: G7/Bjae6th/s7XIkUbYo1ly2NrKpXphEnkP0eSCcdz4=
Subject key identifier: 6D:8F:1F:F3:EB:68:45:E2:CF:49:31:D1:56:5D:4D:08:35:43:81:66
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 019C42463EDB4DC1FD3C924A70527F886019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 12:00:25 +0000
Manifest this update: Mon 09 Feb 2026 12:00:25 +0000
Manifest next update: Tue 10 Feb 2026 12:00:25 +0000
Files and hashes: 1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: 9x71IgJe590E5pB6Uo+U5I/3b2re2rO3w3h0iuyaSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:3e:db:4d:c1:fd:3c:92:4a:70:52:7f:88:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Feb 9 12:00:25 2026 GMT
Not After : Feb 10 12:00:25 2026 GMT
Subject: CN=6d8f1ff3eb6845e2cf4931d1565d4d0835438166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2b:14:a0:ac:74:da:51:e8:ac:ee:2b:6d:5f:
83:b6:07:79:ae:0e:02:65:83:06:31:66:59:f7:e8:
2d:a8:54:61:0d:4c:b1:c7:f1:9b:3f:d8:4a:e3:12:
75:84:b6:02:3f:ad:fa:a8:10:e1:9b:56:04:72:80:
51:bd:72:af:fb:1f:22:51:a2:b2:80:f5:80:68:28:
57:0c:3e:93:dc:d1:6b:0c:87:8a:98:9e:28:6f:a7:
e4:49:fc:47:63:ea:44:77:52:68:0f:81:a9:ad:5a:
2a:a1:67:78:fd:90:dc:5e:5d:f5:fd:1d:4e:f4:77:
b1:82:3e:21:a1:15:90:21:be:18:cd:0f:6c:56:24:
1e:82:d4:5f:b5:d4:4e:f4:26:1c:e0:8d:ea:ef:8f:
80:ab:f5:04:dc:4f:84:cc:74:2d:ff:26:c3:df:0d:
51:0a:3c:1b:06:a5:62:f5:82:c4:f4:32:62:46:60:
71:5c:5b:fa:46:f8:6e:bb:99:62:12:90:34:9c:17:
fc:70:f3:99:82:84:89:70:f6:6a:1a:66:3a:36:f3:
de:c5:70:7a:0d:80:5a:9d:ab:9a:31:01:aa:25:35:
f3:1d:7b:23:eb:b3:1e:d7:d5:a0:fe:40:69:87:69:
e9:ce:e5:a7:87:32:a7:53:26:44:c5:ff:56:2d:56:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8F:1F:F3:EB:68:45:E2:CF:49:31:D1:56:5D:4D:08:35:43:81:66
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2b:d4:e0:17:78:5f:39:0c:e6:10:e5:08:82:1b:80:d3:dd:
20:76:29:f3:3c:8a:b6:9e:a3:80:2b:f2:57:1b:54:4c:d8:f1:
e1:59:35:4e:1a:c2:82:76:37:3f:41:11:dd:b6:9c:8c:b1:7d:
ff:50:d7:82:1e:f2:a3:58:b4:a8:ee:59:78:5c:de:4b:f4:9a:
4a:4c:d3:4d:53:64:15:d6:d0:58:1d:17:46:b8:c2:44:5a:c1:
ac:20:a5:c2:85:d4:1e:92:a4:c7:e8:7f:e4:ce:0c:51:4e:19:
3d:a8:f0:4b:de:d1:5d:48:00:31:66:a4:43:27:b6:31:0b:09:
bf:0c:ff:8f:9c:61:6c:f5:3c:5d:72:16:a8:85:94:4d:ab:9a:
83:49:7a:14:03:59:85:82:e3:00:74:44:4b:43:03:8c:86:83:
83:4e:7c:94:d3:83:d7:74:2b:5e:ff:d7:3b:f9:b2:2e:27:54:
20:17:40:d8:0b:3c:7e:71:13:51:a9:85:29:89:eb:eb:9d:bc:
f1:1b:12:a5:02:dd:aa:ec:37:1c:27:7d:f9:0d:10:7f:1b:2d:
21:c0:9f:c5:d8:5e:60:56:19:97:f6:92:85:65:34:d5:df:66:
76:83:73:82:ad:1a:2b:1d:4c:08:39:32:69:b0:cf:d4:21:05:
04:b8:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:25 2026 by rpki-client