This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: UFaA4JteP4R5B282RBClcpFphb18RzQ9p3/NFQ4tq2c=
Subject key identifier: CD:56:C7:32:1E:27:CE:49:A2:57:9F:B0:48:70:1F:01:CF:D1:EF:57
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 019C43220BFA1E37D284BAF99A3B0B9A2B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 16:00:30 +0000
Manifest this update: Mon 09 Feb 2026 16:00:30 +0000
Manifest next update: Tue 10 Feb 2026 16:00:30 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: E48aDqIHZsTI06ywdfG3mm0B8hgO2JZY1JmRDuX5WNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:0b:fa:1e:37:d2:84:ba:f9:9a:3b:0b:9a:2b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Feb 9 16:00:30 2026 GMT
Not After : Feb 10 16:00:30 2026 GMT
Subject: CN=cd56c7321e27ce49a2579fb048701f01cfd1ef57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:48:ec:78:92:56:bd:25:fb:da:e5:95:41:
f5:74:04:91:33:7c:a0:76:ad:8d:25:a2:d2:13:ea:
a9:b6:7b:db:17:0d:44:ce:5b:01:01:3f:7d:e1:34:
ea:a7:fd:bb:73:7a:fe:93:89:07:b2:5d:82:4c:2b:
f6:7c:29:e4:ff:44:6d:2d:70:78:9c:d5:db:36:00:
4f:be:8f:4c:26:76:21:a6:f1:c0:aa:2e:85:86:8a:
dd:76:79:da:57:dc:9a:1c:dd:6a:81:65:9c:c9:82:
38:b4:eb:e4:e4:65:28:03:8f:2a:ea:e8:07:4c:94:
0b:e3:d3:80:b5:7c:17:c9:13:1c:35:b1:c7:9b:d1:
29:27:81:e9:4d:98:c2:3a:be:66:c7:c3:1e:1d:84:
52:c5:92:d7:46:05:73:24:80:19:23:a4:48:db:22:
d3:98:4f:3b:8a:06:9f:2f:1c:ee:8a:c1:70:ec:eb:
de:70:a5:9a:ce:1e:90:40:bc:75:a0:0a:4d:14:f7:
41:b8:10:45:48:ef:ba:b7:04:ac:5e:10:e7:2f:88:
09:ef:78:39:75:ae:4d:8a:17:cf:8c:68:84:af:89:
2b:a9:50:3d:d9:06:d7:92:bf:90:22:91:f4:77:f6:
fd:1e:3a:f3:cc:78:57:1f:58:fc:57:ad:84:cd:58:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:C7:32:1E:27:CE:49:A2:57:9F:B0:48:70:1F:01:CF:D1:EF:57
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:16:f1:f6:aa:69:cc:4e:40:18:77:18:45:4f:05:3a:13:4c:
3d:06:26:9d:02:a7:9c:92:80:9a:d9:1f:71:43:06:97:4f:be:
3b:84:10:54:f6:2a:a9:f4:c6:cf:83:fd:a6:5a:a6:a0:5c:c1:
85:b9:eb:51:55:d5:2e:63:73:82:71:66:86:b7:5c:9b:12:e2:
b2:8c:c9:cb:1e:8f:17:79:b8:37:04:e9:99:81:fd:d5:28:ce:
14:c6:a9:25:49:4a:8b:5d:f8:c1:0c:2e:36:d1:19:65:0b:0f:
9b:35:fe:f4:7f:03:f8:33:54:23:1d:bb:35:c5:99:93:c5:13:
b1:97:90:52:88:a2:9f:e4:c0:72:1a:4f:1e:0f:22:39:5c:11:
99:da:7b:1f:e8:d9:a4:68:51:a3:ef:cc:f0:f0:50:1a:54:f4:
3b:f1:8d:b9:0d:e7:c6:e6:1d:ee:87:3f:a6:af:aa:52:88:fd:
6c:1d:32:2e:6b:99:d6:11:08:fe:6b:9b:1c:4f:3b:85:0c:3c:
26:88:c9:e5:cb:30:84:02:c7:19:36:f6:d0:51:3e:5c:89:9c:
d7:61:e9:fa:47:dd:c4:ac:dd:b4:92:30:f7:96:60:7d:e4:ec:
f0:a2:fe:b4:1a:ee:c4:35:3e:13:e6:c7:bc:0e:e7:98:64:46:
2f:93:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:15 2026 by rpki-client