This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: eNHLOLWztRUsa9SROgEn5p7Q3+9ELLjNnQ0KXZX/vlc=
Subject key identifier: EE:FC:8F:B0:93:45:69:03:96:3B:2C:4A:4F:57:1C:6A:FD:57:D4:1A
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019BE180D2116AC126A8E5DEB1FE1CB9595F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 17EC
Signing time: Wed 21 Jan 2026 17:01:14 +0000
Manifest this update: Wed 21 Jan 2026 17:01:14 +0000
Manifest next update: Thu 22 Jan 2026 17:01:14 +0000
Files and hashes: 1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: Y1yHsdxFVxjfbeAxkH7x09r6kR6ZhEz5K6GWlEOQ58E=)
2: xE2y3RI3nuzZANWmX6fxwf9bkMg.roa (hash: SegO1prKKRLU/fQqPq9kWO/VrlLtICljHXGoFYxWh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e1:80:d2:11:6a:c1:26:a8:e5:de:b1:fe:1c:b9:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jan 21 17:01:14 2026 GMT
Not After : Jan 22 17:01:14 2026 GMT
Subject: CN=eefc8fb093456903963b2c4a4f571c6afd57d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:bc:7b:31:e5:63:16:70:16:5f:61:de:74:
ae:39:78:96:8a:34:b7:52:7f:24:c3:c9:53:51:e6:
f9:25:af:d2:ac:8b:61:bc:ae:a1:f7:a7:1e:71:74:
d8:63:1b:cf:28:21:2c:70:3a:b6:43:28:60:58:5d:
23:c2:39:9a:de:9e:7b:3c:37:9b:78:59:dd:83:50:
bd:49:cc:f7:ad:e3:e7:25:ed:b6:64:d7:24:e1:6a:
bc:56:75:fc:79:9a:17:99:ac:1d:e0:f5:87:4e:da:
4b:93:fe:06:c1:f3:4c:71:b5:2b:5b:19:88:5b:6b:
49:06:c9:e2:8e:22:75:f7:32:3d:f4:7e:3d:1f:eb:
81:7b:5e:17:27:ab:8a:64:23:06:dc:41:ef:76:08:
b1:df:cc:5f:32:4e:e6:af:eb:8d:df:6e:73:b0:9c:
94:e4:ca:f4:ec:d0:fe:23:d6:39:98:4d:73:a7:a0:
9e:7e:24:b8:85:84:9e:06:6c:98:8e:65:2d:af:e2:
ce:10:4f:30:e4:23:ce:c4:9b:7c:07:62:38:69:cd:
d5:58:e2:d8:18:dd:ad:5d:ad:bd:48:7a:fe:19:05:
7c:de:8e:fd:bd:c6:aa:c1:ae:4e:13:87:2f:64:a9:
bc:3d:60:97:d2:56:22:bf:ff:fd:67:7a:6b:83:59:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:8F:B0:93:45:69:03:96:3B:2C:4A:4F:57:1C:6A:FD:57:D4:1A
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:71:b7:40:24:b6:2a:ac:e9:35:88:9e:cf:8c:5a:c4:71:
ba:22:32:a5:96:6f:f0:77:d8:ba:d1:fb:fc:27:f6:58:e7:66:
26:f8:cb:e6:2e:ac:c0:ce:d2:32:8f:c7:53:40:e7:3f:4e:9e:
8a:53:94:ae:04:f9:26:bb:5e:ff:25:1d:7f:49:32:f8:c5:d7:
41:f2:08:38:41:87:94:3f:1b:78:5b:c2:a9:21:07:24:d6:6e:
59:9b:ea:8b:33:e8:78:a8:7f:ec:f0:94:b9:14:9a:95:54:83:
83:1a:75:7f:03:b9:70:ba:ce:c4:89:e7:4d:51:ce:cd:e5:bb:
3e:52:07:29:db:af:96:7e:6b:42:3d:b0:39:3d:3f:74:a0:1b:
43:ce:71:90:41:52:12:ad:d2:0e:b2:c0:e3:d5:5b:e1:45:ec:
6f:36:f6:be:b9:f8:20:30:7d:e9:07:c6:63:44:f3:3b:00:74:
97:3d:5e:d4:1b:0b:e3:2a:f1:15:09:f6:81:4b:20:de:61:54:
da:a0:e5:71:75:51:3d:15:dd:22:44:fe:73:03:10:39:3b:e7:
8d:09:56:b8:e9:6f:a4:27:d4:5b:cb:e9:b3:9e:b6:40:f8:df:
6a:a2:fc:56:69:48:62:a9:b4:ff:92:03:1a:e2:78:e0:88:83:
20:4f:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:48:00 2026 by rpki-client