This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: IWWB/l7GE5l1kqFh4HVBCqrApSgs5M6+ZwOyKhTmX/k=
Subject key identifier: 78:30:87:A1:7E:72:81:DD:3D:B3:5A:AF:B6:51:97:05:4A:C5:0C:9E
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019C1CF0DABC9F2D8EA1F8B2F76D4F5C72AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: 8C
Signing time: Mon 02 Feb 2026 06:01:12 +0000
Manifest this update: Mon 02 Feb 2026 06:01:12 +0000
Manifest next update: Tue 03 Feb 2026 06:01:12 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: E5zZBfI7Z9Fm0nxpCXX/DXUoBGDyWo9JwmCLtp8/7wM=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:f0:da:bc:9f:2d:8e:a1:f8:b2:f7:6d:4f:5c:72:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Feb 2 06:01:12 2026 GMT
Not After : Feb 3 06:01:12 2026 GMT
Subject: CN=783087a17e7281dd3db35aafb65197054ac50c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:d2:4b:80:78:9c:21:3d:f8:d7:e8:5a:82:
65:77:5f:9f:d7:fa:fe:91:43:ce:9a:94:bc:da:03:
89:be:44:c9:e3:dc:fc:b2:41:a0:0a:84:b7:e7:ac:
48:25:a1:f4:9c:4e:88:92:cb:55:7b:80:f8:29:63:
b3:88:de:ba:e4:e7:0f:3c:e3:a4:30:2c:29:5f:f9:
c9:a6:72:5b:aa:0f:96:6e:d8:04:35:ad:d1:37:d4:
4a:68:b6:2a:13:6e:d7:ce:0e:61:bc:13:35:06:50:
11:91:7b:4c:42:2c:09:f1:51:be:e9:80:b5:25:9e:
be:8c:2d:4c:50:00:8c:d8:a2:4a:1d:cc:16:64:d8:
66:de:b3:8a:b9:9d:7a:16:e0:ac:89:c6:7f:79:db:
29:66:66:40:50:4c:34:e0:05:cf:24:f5:de:75:5f:
ae:8d:32:02:9e:b0:60:e6:30:d4:df:6e:1b:0d:52:
c5:64:10:44:ee:66:3b:55:62:7f:d3:a5:49:c6:b9:
1f:c7:5b:2b:10:ae:4c:33:3e:a9:04:c8:b7:50:db:
33:0d:a3:f8:22:22:c2:a0:16:ac:a5:f2:94:f1:3e:
9e:53:db:e1:cc:45:00:3b:7f:2c:5e:90:4d:7a:ce:
b6:1b:56:3a:48:f2:52:cf:56:a3:25:5a:d5:e4:b4:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:87:A1:7E:72:81:DD:3D:B3:5A:AF:B6:51:97:05:4A:C5:0C:9E
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f5:f5:02:fe:d1:4c:6a:7f:e6:c9:a3:51:e7:98:ce:62:34:
3b:85:88:c4:20:09:f7:79:50:b0:42:e5:1b:1a:a0:7b:1b:9d:
94:93:34:3a:05:d2:5d:5e:5e:53:e0:e5:ce:c5:6e:74:26:f3:
f2:a7:63:df:61:05:44:ef:0a:4f:1b:fa:94:f8:b1:8f:f3:20:
11:54:09:c2:7c:51:5f:08:ca:ea:4d:1d:41:89:a9:72:7c:92:
16:32:f9:60:c4:3d:43:60:31:f6:b8:1f:15:46:f5:82:01:67:
40:e5:f3:28:96:bc:1f:08:bb:5c:90:60:e7:a5:b1:77:01:5e:
ac:f6:f7:94:12:fa:f5:73:98:01:5d:c1:3d:b0:5d:42:14:17:
db:bc:3f:d5:f9:5f:b9:b5:52:92:f3:46:50:2c:9b:06:3d:af:
fa:5b:0b:25:39:0f:af:f4:92:2d:0b:72:47:ab:d1:38:d9:68:
46:05:dc:56:a7:fc:74:53:78:d6:cd:c3:8c:d4:23:b7:bc:24:
4c:95:6b:12:cd:aa:21:bd:05:ff:72:ec:16:5c:7f:a8:31:c3:
e2:79:8f:aa:9b:4b:25:ff:09:42:4d:f9:96:51:f8:2d:0e:98:
57:d0:07:da:16:8f:30:d8:c7:c1:1a:82:8c:bb:b0:af:6b:2a:
05:a7:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client