This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: 8KmrozqC/Ym4Gg2m8Ad4k0u0WJ5AOC+0zYLZFuLRLXI=
Subject key identifier: D6:51:01:E0:2D:71:04:58:B5:51:38:6E:B5:3E:9C:8F:19:17:BB:BA
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019C43FDB0659F068DB75EBAE6A0B0B516A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0636
Signing time: Mon 09 Feb 2026 20:00:25 +0000
Manifest this update: Mon 09 Feb 2026 20:00:25 +0000
Manifest next update: Tue 10 Feb 2026 20:00:25 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: JOjOpzQPjrGW4/0mUZzhRfCoZ5OwKUvxRR7q4fvcfB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:b0:65:9f:06:8d:b7:5e:ba:e6:a0:b0:b5:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Feb 9 20:00:25 2026 GMT
Not After : Feb 10 20:00:25 2026 GMT
Subject: CN=d65101e02d710458b551386eb53e9c8f1917bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:79:db:73:5e:b9:ce:f9:f1:fe:08:e4:f9:
e2:78:7e:df:d8:88:e3:ae:63:17:bb:6b:5b:05:6b:
3f:eb:4c:1e:ba:27:e0:d1:ad:f6:9f:00:57:b2:0a:
ee:a9:df:3f:2d:9e:a3:e2:d5:bd:2a:8f:91:f8:3b:
7a:41:1c:7f:b8:85:bf:d2:13:24:77:ab:dc:a9:f6:
2e:e7:09:72:e2:70:65:28:0f:74:78:7b:b2:ab:b4:
2f:26:b5:95:0e:61:2c:76:4d:3c:cd:5d:25:96:e6:
28:81:a1:fd:8c:52:3f:ab:61:03:56:35:e3:0b:79:
3c:cb:b0:7e:88:f8:9e:9e:c2:31:8b:a6:05:b0:fb:
9a:c3:cf:33:b6:7d:6f:9d:0e:67:25:7b:1d:21:02:
77:f7:74:22:81:16:89:c4:9c:2b:4f:ea:7a:5f:8f:
96:4f:e7:0a:63:6e:61:58:de:72:1f:54:a7:db:b6:
97:80:67:da:c1:18:91:a4:c1:b0:55:76:9a:9d:aa:
7b:58:af:77:f4:b0:25:06:a9:1e:4d:ad:f5:b6:d3:
70:af:9d:23:33:67:09:54:d4:3b:da:31:f6:29:b4:
62:84:14:fc:e0:fc:11:22:83:63:9b:b8:bb:2d:7d:
47:70:52:11:85:b6:62:2b:6d:de:a6:04:08:57:87:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:51:01:E0:2D:71:04:58:B5:51:38:6E:B5:3E:9C:8F:19:17:BB:BA
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1e:40:f6:cd:ac:30:bb:eb:db:15:94:a9:5d:e5:bc:0d:4d:
a8:63:59:2b:42:aa:37:8c:7d:6f:83:6a:33:4e:97:5c:32:ad:
d5:a6:c8:dd:74:6c:55:de:9c:ef:c6:88:81:07:df:71:94:b2:
02:6d:d9:48:51:e1:af:c8:82:81:27:01:cb:09:3b:75:31:1d:
83:be:94:e6:ba:20:89:23:06:37:3b:8b:07:91:90:49:4f:8a:
87:6e:2f:f4:ff:03:59:d3:be:8e:d3:28:53:fb:c7:36:a9:a1:
d7:25:1e:54:b1:d8:4b:89:e6:9b:f1:aa:3f:fb:58:57:c9:07:
9b:23:4a:19:61:3c:b9:6b:5e:0e:b0:64:46:14:13:4b:1d:b2:
44:dd:da:ea:9d:91:2c:fa:2d:b7:a9:e6:a2:02:57:82:f6:3c:
f3:c7:e7:90:a1:19:22:0b:f7:ed:3f:2a:6e:b1:6d:2e:96:40:
44:ff:bc:c9:dc:bb:10:66:b5:d6:8e:5b:f2:2e:91:99:64:1e:
bb:e1:76:7f:3f:cf:1c:5e:c8:7b:2b:9d:7a:5d:69:c8:d6:a7:
e5:ef:48:a8:6e:1a:23:a7:6c:18:9b:35:f4:b7:d9:cb:ae:fe:
f7:3a:62:32:a4:63:66:cc:7a:d3:5b:2d:9b:e3:f1:59:04:e6:
18:14:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:45 2026 by rpki-client