This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: XxY+chSQ+ZP0YJQg1iwh2BA6fmcfNg38r6QB3nlHeYs=
Subject key identifier: 07:65:62:EB:19:35:F7:FD:5E:C7:51:2C:94:9A:7F:54:F4:E2:F6:31
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 019C446B983E7D9D0A98120E2CA18D722E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 1556
Signing time: Mon 09 Feb 2026 22:00:27 +0000
Manifest this update: Mon 09 Feb 2026 22:00:27 +0000
Manifest next update: Tue 10 Feb 2026 22:00:27 +0000
Files and hashes: 1: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: cuCUICKgthI+i3tt0sq6NvdeuB6Rq9BY9hyLAPotioM=)
2: lRIjNj0BHQE6hiLGxFavKUdyoeg.roa (hash: PocADE6/FL6eoSgXxu0JdSE+M73YHwsz3KQP93yGopU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:98:3e:7d:9d:0a:98:12:0e:2c:a1:8d:72:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Feb 9 22:00:27 2026 GMT
Not After : Feb 10 22:00:27 2026 GMT
Subject: CN=076562eb1935f7fd5ec7512c949a7f54f4e2f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:e0:2d:9c:fe:f5:8c:90:34:29:94:c3:11:
ec:08:95:03:b2:a4:c9:b5:42:7e:2d:84:b8:1c:99:
89:2b:0c:fc:fb:d0:d5:eb:4e:cd:b9:eb:00:6e:58:
ee:22:79:7f:51:5b:5c:e1:d4:90:84:63:a8:ba:ea:
b1:c6:68:5f:c7:b9:54:32:58:41:14:77:e0:89:80:
1d:68:0d:71:ab:c2:80:2f:85:ed:ef:87:c1:da:12:
83:f6:e8:25:e5:dc:f3:3c:61:d5:53:43:7b:c0:48:
d4:d7:ed:95:60:19:28:77:d6:0e:3f:09:c2:d2:a7:
2d:c4:96:42:bb:59:2d:a6:7f:ac:a1:de:19:76:94:
15:33:58:5c:e7:15:d9:f6:90:1e:72:f9:bf:50:f1:
15:27:44:b9:a6:b4:e5:1a:98:94:4a:4d:c4:7b:51:
38:8b:f5:63:48:2b:88:9b:97:62:ed:18:8b:4d:0e:
0d:a2:cf:7d:0d:55:f3:47:24:4e:89:33:ce:5e:28:
ea:cf:63:45:53:b5:0d:c2:02:f5:92:26:af:22:92:
52:c6:0f:d7:9e:93:07:cb:a6:ec:9f:0e:e4:10:5c:
23:94:df:a8:7d:ce:47:af:b5:46:d4:98:ef:a9:43:
30:4d:97:39:38:bb:c0:aa:91:85:b6:22:bf:85:f6:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:62:EB:19:35:F7:FD:5E:C7:51:2C:94:9A:7F:54:F4:E2:F6:31
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ef:50:68:74:f5:3a:e0:82:d8:e4:c8:dd:fa:94:10:11:a1:
14:c6:b8:a3:66:b0:60:d9:5d:bb:14:bf:dd:01:77:c1:a5:d0:
46:83:6f:79:d5:c8:9e:65:39:3d:5d:bb:9b:a6:28:a8:15:9c:
31:da:3f:3a:7b:f6:17:ac:24:7e:07:3c:6e:62:f1:56:8a:f5:
7d:53:62:0f:ea:64:bb:3c:c9:0d:91:62:5e:02:4a:70:79:ec:
f6:ca:1c:13:ea:8e:98:a3:76:90:19:63:0d:ea:2c:21:bf:06:
67:67:a0:b7:72:22:56:13:1f:95:4d:32:68:6e:ef:06:05:f0:
f9:73:ee:e6:9e:23:d7:b6:35:d3:19:4a:03:11:89:be:40:3c:
a6:34:4a:bc:83:f3:88:29:f8:07:e8:37:10:be:36:86:f8:77:
dc:54:fd:df:09:ad:37:99:99:6f:4b:ce:59:b4:ea:f9:00:59:
f3:b5:03:0c:ab:a5:d6:55:09:09:b7:e6:9f:3f:2b:bc:48:91:
da:32:ac:57:14:fc:82:f9:ad:ac:de:40:44:e3:f9:52:71:8b:
f1:42:9d:24:44:0a:6f:19:1b:06:7e:fe:67:2b:57:9b:cf:e2:
31:c0:8e:ba:91:13:58:d1:df:a5:ff:d0:8a:76:f5:ba:4e:00:
2f:f4:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:44 2026 by rpki-client