This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: CfYS4qyIUsnRxefjDD47nEOyVZtSqZWWO8cRiJy9JRU=
Subject key identifier: 65:57:69:81:ED:9F:24:B2:B7:AF:0B:D7:D0:61:3A:D3:D5:59:31:C4
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 019C4322F4C3055EB4C40AA66B4AE9C1D11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 16:01:30 +0000
Manifest this update: Mon 09 Feb 2026 16:01:30 +0000
Manifest next update: Tue 10 Feb 2026 16:01:30 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: EECpcgTbqEWnjiSoXAOffMw+GnsHoOPMEN0K2CilMf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f4:c3:05:5e:b4:c4:0a:a6:6b:4a:e9:c1:d1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Feb 9 16:01:30 2026 GMT
Not After : Feb 10 16:01:30 2026 GMT
Subject: CN=65576981ed9f24b2b7af0bd7d0613ad3d55931c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:17:70:5f:05:ff:f3:73:a3:43:09:b9:72:
c7:df:72:26:2e:3f:29:d0:a3:fe:0e:af:e4:18:e6:
f4:11:31:a7:05:f7:86:14:ef:85:6a:64:ce:f9:ee:
b6:a5:88:55:f4:bc:fe:7d:86:79:b2:bd:b8:e5:f9:
23:8e:3f:90:94:3e:d9:46:24:eb:d0:ed:7d:09:df:
6a:8c:83:d6:ac:76:6f:72:e4:8c:ba:d3:b9:f5:fd:
c8:8f:dd:9b:47:bc:ed:30:2e:ca:c7:92:37:d1:f1:
de:8e:55:5a:ab:c0:09:80:1c:d8:a7:d8:57:1c:f9:
52:ad:ce:c6:50:11:27:49:b7:4a:59:05:28:46:d6:
ac:bb:8d:a4:c8:a5:60:c6:69:01:88:97:d6:f5:6a:
13:6c:5b:5e:42:d4:98:41:dc:39:24:73:e9:b5:e2:
f3:58:9a:4c:25:19:c2:dd:5c:de:2e:5a:7f:f0:ed:
7a:64:9a:d3:e1:f0:35:a7:4d:8a:6b:02:b9:e7:79:
33:ec:4f:dc:77:f2:92:1e:ad:43:84:8b:e9:0d:b1:
7b:a8:e7:02:35:30:91:f5:f9:ce:4e:d7:21:23:da:
91:98:51:c9:33:39:bb:51:98:05:ce:03:e0:05:58:
cc:1c:5c:32:11:74:7d:c7:55:51:b3:e3:39:f9:95:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:69:81:ED:9F:24:B2:B7:AF:0B:D7:D0:61:3A:D3:D5:59:31:C4
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:30:a5:ad:9e:55:d9:9d:0a:94:62:5f:b8:41:17:e4:4b:
53:32:5e:91:fd:9f:b5:4c:59:4a:68:44:5b:f4:c1:d7:d9:31:
51:94:ba:91:17:61:b6:fa:ee:b8:af:97:43:90:93:85:4a:23:
2e:ea:c7:ba:03:28:7f:8b:c1:ee:4c:e9:3a:05:31:fa:63:b9:
e7:df:be:17:6b:01:2b:43:43:18:d6:a9:fc:b9:b0:51:58:8c:
94:f4:4d:ef:ad:0c:47:06:59:89:97:39:df:ab:df:f8:f6:fc:
dd:18:44:dd:9b:94:3c:bc:c5:26:6d:1d:a4:2e:59:bd:87:b8:
ef:66:29:62:8f:81:e6:f0:f4:9b:7c:c4:a1:24:71:3b:91:5a:
20:cd:e7:5a:54:fc:eb:e9:04:e6:17:53:7c:68:7a:fa:fa:58:
2f:9a:0c:e2:a7:cd:b5:09:24:60:d4:66:99:aa:3e:7b:2f:cd:
d9:ce:8e:e7:45:40:8f:50:75:10:1e:10:2e:d8:29:1f:21:11:
4e:06:ae:c8:bb:d7:4b:5e:03:1f:9c:e1:90:c6:fc:4f:ae:ef:
19:ac:a6:ec:1c:41:bb:e6:7c:9b:85:6b:a0:6c:d1:49:5c:89:
a8:04:42:3c:c2:70:69:29:5a:3a:3b:76:47:5e:42:3b:f6:5f:
3e:af:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:30 2026 by rpki-client