This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: OWfRAR6oGHwB/gaaiZQz2smDFNEz2OALA2QwrAWRQCM=
Subject key identifier: F4:BA:F5:86:BC:AF:C9:26:4B:34:15:B8:D4:28:E2:FB:8C:C7:B1:20
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 019C427E0726C6259364AFEEA172B77B9B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 120C
Signing time: Mon 09 Feb 2026 13:01:21 +0000
Manifest this update: Mon 09 Feb 2026 13:01:21 +0000
Manifest next update: Tue 10 Feb 2026 13:01:21 +0000
Files and hashes: 1: KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa (hash: zVj3lj20TcX9NC6Ya6/FsxhHDDRzLpQa23Y4dZIhMtI=)
2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: HvOsmxHfP4ZZIIUfbiKuSpaecNovhqDlSaL6KM3W1T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:07:26:c6:25:93:64:af:ee:a1:72:b7:7b:9b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Feb 9 13:01:21 2026 GMT
Not After : Feb 10 13:01:21 2026 GMT
Subject: CN=f4baf586bcafc9264b3415b8d428e2fb8cc7b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:52:e4:ee:a6:33:5b:60:b7:71:43:fd:b3:
6b:99:2b:6a:a1:a9:0b:37:7c:31:23:86:f1:d8:2a:
e9:bc:b4:dc:82:4f:99:ae:66:f9:e9:a5:37:97:a5:
88:05:62:79:ad:89:16:fc:09:db:21:d6:fa:b6:47:
3d:77:67:5f:bd:07:16:35:dd:3a:82:d9:d6:d6:c0:
56:e0:69:be:7a:28:95:e0:1a:5e:44:42:ac:f1:f3:
54:a2:9d:42:b4:fd:a7:b0:ca:6b:6c:1c:af:bf:83:
a6:fd:df:6f:33:38:14:d1:72:5e:ac:2d:f3:cb:2a:
65:06:d1:21:b1:92:1e:da:92:d8:81:2f:64:99:e3:
04:36:35:3c:34:02:a5:77:f4:ab:22:22:a9:57:8d:
63:0a:d4:fb:3b:43:19:ba:1d:03:ec:09:b7:f8:f6:
5c:9f:e6:d5:28:e4:e7:41:9d:19:b7:e7:6e:cf:c8:
51:31:f7:19:4f:18:11:c8:ca:5c:2e:a0:89:1e:70:
8a:60:4d:12:ab:74:f9:44:c0:40:0c:34:ef:4b:d5:
06:07:e8:fc:6c:c6:92:63:62:1e:2a:a4:63:6e:0e:
f9:b4:10:29:3f:d7:44:0b:4f:af:5d:a5:3c:fb:b6:
9e:17:73:32:e6:8f:77:0b:01:dd:fe:a2:9c:99:f6:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:F5:86:BC:AF:C9:26:4B:34:15:B8:D4:28:E2:FB:8C:C7:B1:20
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:9c:e9:58:9e:69:2a:49:58:84:3e:85:20:31:86:27:b9:
91:a0:72:4c:5b:f6:54:48:ac:79:10:4c:52:1a:ce:fe:7c:a9:
31:a0:d7:78:cc:51:23:1c:2c:bb:b0:a4:ea:48:7b:90:d7:43:
da:27:49:86:8a:7f:b8:39:7f:c2:10:87:9e:86:f0:e3:67:48:
ac:3b:aa:d3:c4:6c:99:f8:d0:e6:15:09:58:ee:0a:1f:f9:c2:
bd:4b:d4:48:ce:c9:93:44:86:7c:09:07:96:e8:5c:02:7a:e7:
e2:b4:e9:42:9e:eb:ae:d9:16:26:4c:f9:31:2e:17:f6:8e:9a:
db:3c:6b:09:0e:e2:3c:c9:55:fe:fa:f5:37:b5:a6:ac:67:f1:
81:26:f9:f6:23:7d:a4:53:33:c5:76:5c:24:56:04:06:28:79:
12:04:d4:54:ba:82:fd:1f:ce:9b:6e:a8:aa:27:70:b7:18:ce:
e7:3c:ef:7e:ae:10:ee:ed:bb:23:d7:03:e8:44:8e:c8:63:9f:
1c:c8:0c:8e:bc:58:ee:27:1d:b2:72:56:b5:70:08:c7:b4:91:
ae:57:28:1c:f7:6c:8c:41:9b:af:36:c3:66:7c:e8:ab:f9:9e:
3f:60:d6:61:1b:8d:15:bf:0e:3f:af:80:dc:0b:73:04:bd:07:
2b:36:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:13 2026 by rpki-client