This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: UJUIoc6nBu14dPPlJwpWFEptFJzS8vD5PsTrtAueE1Q=
Subject key identifier: F0:DC:22:D3:0A:AA:0A:CC:E2:3D:49:E2:A5:9C:2F:43:A3:37:BE:E1
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 019C427D838800607254AEFB5AFD3BE70B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 13:00:47 +0000
Manifest this update: Mon 09 Feb 2026 13:00:47 +0000
Manifest next update: Tue 10 Feb 2026 13:00:47 +0000
Files and hashes: 1: LgGfCw5P6EPS02odz9L5gtFB9CY.roa (hash: TMsWFDEHJPQcP7QFpiFpw7haPOsCTPLSZXPOO1J1hGg=)
2: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: 4FhndB9/W8Q3HpfFvzcOMPdPnkZ+LTU/x0iVTsJ7hmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:83:88:00:60:72:54:ae:fb:5a:fd:3b:e7:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Feb 9 13:00:47 2026 GMT
Not After : Feb 10 13:00:47 2026 GMT
Subject: CN=f0dc22d30aaa0acce23d49e2a59c2f43a337bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:36:6f:c4:59:63:ca:81:f9:93:8a:99:31:
b3:67:9f:ee:1e:16:b6:65:bd:66:ca:d2:a3:2c:82:
83:f6:e5:5f:30:b5:a7:54:a7:61:fc:ab:50:79:d5:
d2:30:0c:57:38:cc:fb:60:32:50:7a:37:79:0e:41:
4d:0d:91:a5:ca:af:c5:8b:2f:c1:02:7d:e0:f9:94:
7c:22:80:72:ce:0d:db:e3:96:f3:4c:3d:91:2d:66:
c3:60:ed:5a:77:be:17:07:59:80:f0:f0:e7:6a:03:
18:ec:20:81:ef:ad:fd:63:e5:bf:72:6d:16:1c:96:
d4:79:1a:b7:1b:46:77:4d:c9:05:44:07:fa:71:1b:
06:ed:36:fd:3e:8d:b6:ac:e1:22:31:8d:0b:22:10:
71:86:2b:d0:0f:d0:30:dc:e3:14:55:6e:9f:e2:ee:
ec:bb:6f:ab:65:5d:2c:52:44:aa:54:f8:76:61:80:
9a:77:d0:ef:d5:8b:ea:3c:e2:9f:92:52:54:e4:7c:
40:5a:25:18:60:a3:42:4e:a8:4a:05:aa:e0:d1:09:
07:c3:31:3e:ef:62:48:b5:b6:e1:43:54:87:21:8d:
f1:0e:74:d3:9b:86:ce:4a:b9:b5:ef:5f:b3:d2:17:
a0:bd:6c:ae:31:11:35:ac:9c:bd:0f:12:28:ed:35:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:22:D3:0A:AA:0A:CC:E2:3D:49:E2:A5:9C:2F:43:A3:37:BE:E1
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:c8:cd:9f:bf:06:ba:0c:88:bb:83:e7:b2:5f:46:59:f5:
61:12:cd:80:42:6b:f3:ad:dc:dc:65:05:be:93:17:48:d2:0e:
ac:6a:03:c2:dd:9f:ea:7f:4a:df:2a:5d:2b:aa:c5:37:bb:9c:
2c:48:d2:15:be:d8:15:2a:3c:78:fb:5c:c0:3d:ab:9b:4a:38:
1d:4e:1c:f7:44:1c:d1:a3:bf:2f:bc:f1:7f:33:81:4f:89:99:
2c:c5:42:7c:33:bf:2c:c2:22:74:d1:ac:38:10:af:02:72:11:
7c:8e:a6:b2:ca:fd:41:ac:14:13:06:11:e1:b9:40:f2:62:ea:
59:50:0a:4e:54:41:54:d6:ef:f7:2b:8d:53:9e:aa:32:e9:21:
0d:51:50:50:7d:7e:ee:d7:72:31:30:7e:04:fa:95:50:ad:ab:
e4:88:14:e5:d7:af:89:07:e8:c0:bc:a0:4f:6d:ea:1c:a7:06:
c3:70:ab:cb:20:8b:c8:d5:35:48:84:c6:8e:97:ae:cd:2b:1a:
3f:6d:16:b2:92:92:ad:cd:ed:e3:70:67:04:68:a8:13:17:d2:
7e:88:71:f2:2b:56:8d:ca:8f:79:4f:e7:81:ec:1b:f4:7e:64:
92:72:f4:d2:67:b6:d7:73:cc:9f:57:60:9d:86:7a:c3:fe:5f:
a6:b4:8c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYOIAGByVK77Wv075wtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGQ1OTQzYzI0MDM3MzBkZTgxOGUzMWI5YjVmZjFkOGMx
YzljNDcwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD
EyhmMGRjMjJkMzBhYWEwYWNjZTIzZDQ5ZTJhNTljMmY0M2EzMzdiZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJE2b8RZY8qB+ZOKmTGzZ5/uHha2
Zb1mytKjLIKD9uVfMLWnVKdh/KtQedXSMAxXOMz7YDJQejd5DkFNDZGlyq/Fiy/B
An3g+ZR8IoByzg3b45bzTD2RLWbDYO1ad74XB1mA8PDnagMY7CCB7639Y+W/cm0W
HJbUeRq3G0Z3TckFRAf6cRsG7Tb9Po22rOEiMY0LIhBxhivQD9Aw3OMUVW6f4u7s
u2+rZV0sUkSqVPh2YYCad9Dv1YvqPOKfklJU5HxAWiUYYKNCTqhKBarg0QkHwzE+
72JItbbhQ1SHIY3xDnTTm4bOSrm171+z0hegvWyuMRE1rJy9DxIo7TXBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDcItMKqgrM4j1J4qWcL0OjN77hMB8GA1UdIwQY
MBaAFE0NWUPCQDcw3oGOMbm1/x2MHJxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMt
NGE2MzdjNmQ5OTM4LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMtNGE2MzdjNmQ5OTM4
LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwbIzZ+/
BroMiLuD57JfRln1YRLNgEJr863c3GUFvpMXSNIOrGoDwt2f6n9K3ypdK6rFN7uc
LEjSFb7YFSo8ePtcwD2rm0o4HU4c90Qc0aO/L7zxfzOBT4mZLMVCfDO/LMIidNGs
OBCvAnIRfI6mssr9QawUEwYR4blA8mLqWVAKTlRBVNbv9yuNU56qMukhDVFQUH1+
7tdyMTB+BPqVUK2r5IgU5deviQfowLygT23qHKcGw3CryyCLyNU1SITGjpeuzSsa
P20WspKSrc3t43BnBGioExfSfohx8itWjcqPeU/ngewb9H5kknL00me213PMn1dg
nYZ6w/5fprSM7A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:59 2026 by rpki-client