This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: WsmvwWQ59EUW/Fp6IFwHK73ALRhCVZmSFSm0DBXeQGU=
Subject key identifier: CC:D7:AD:62:42:4E:A2:1B:B8:CC:94:3B:58:EF:57:9E:DC:97:6C:FA
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019C44A2749D4F3418D51D4369CCDD17BAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0E69
Signing time: Mon 09 Feb 2026 23:00:23 +0000
Manifest this update: Mon 09 Feb 2026 23:00:23 +0000
Manifest next update: Tue 10 Feb 2026 23:00:23 +0000
Files and hashes: 1: Aq2uYBM38caP1COB9dDvXovJtxs.roa (hash: xNEtL6mGQtXdg7pfWA/jWJFTi74bGAiMyDEPSZKrj8A=)
2: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: IMY/V07GvNVe0qWbBByDsWJXiUKrwJ30XNKnCm2w5nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:74:9d:4f:34:18:d5:1d:43:69:cc:dd:17:ba:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Feb 9 23:00:23 2026 GMT
Not After : Feb 10 23:00:23 2026 GMT
Subject: CN=ccd7ad62424ea21bb8cc943b58ef579edc976cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:8c:6d:ef:e4:5f:11:4e:57:27:95:18:be:
42:e2:47:fd:bc:ed:f3:d6:73:40:54:ab:16:23:25:
88:6f:29:9a:c9:3b:b2:68:ad:5b:e7:fd:5d:6a:04:
46:f3:64:d0:7c:06:6d:fa:2c:e9:12:34:e9:30:30:
c9:44:a5:45:26:77:00:0d:1f:b5:0c:4c:fc:39:64:
63:e9:59:43:0c:ba:5c:d5:dd:e5:99:ab:b8:f3:73:
06:ce:91:a1:bd:ca:90:dd:b4:32:ca:00:7e:89:46:
33:a8:cc:15:05:2e:d5:ce:2d:67:78:28:c5:ea:68:
2b:ac:5b:3c:12:4c:fc:45:8d:a9:dc:07:fb:cf:14:
ae:02:0d:79:17:8d:f7:93:9c:c5:c9:34:31:f8:51:
92:ce:e1:51:f2:63:87:fd:46:0c:de:26:89:78:51:
c7:e5:1c:84:d0:fd:73:c0:94:5e:a5:73:4f:46:17:
98:03:fc:5d:e6:22:a9:2c:9a:46:16:5a:7e:8f:88:
5f:f5:54:51:c9:bf:6c:d6:39:06:79:12:d5:43:50:
34:a8:6a:fb:ec:57:36:c4:35:bb:bc:ef:14:22:04:
87:c4:46:2e:0b:d1:de:82:bc:44:e8:de:eb:34:7a:
6a:29:f9:0b:b7:1a:1f:f9:ed:03:a3:93:7f:be:c3:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:AD:62:42:4E:A2:1B:B8:CC:94:3B:58:EF:57:9E:DC:97:6C:FA
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:73:81:2f:cf:c7:b5:b9:3b:65:78:b0:9e:ec:05:89:2d:
c2:a9:66:a7:ab:c0:29:03:ce:3e:8c:55:4c:a0:a6:d6:a2:20:
ce:3e:5a:29:2e:71:46:80:bd:89:43:aa:05:5e:f7:8d:86:6b:
5c:44:13:9d:b6:7d:c0:a2:14:9c:28:43:68:63:b7:89:fe:86:
86:34:3a:d7:03:4d:25:73:24:7a:8f:7f:70:18:f6:bb:ad:a6:
82:f2:67:b4:f9:dd:21:49:20:d1:a1:f9:76:0c:4c:75:95:2d:
25:d1:72:26:0e:a5:5a:82:81:9e:bf:78:84:65:4b:51:b4:8d:
fc:12:20:2a:f0:e0:8c:1a:61:7a:41:36:52:26:ed:b8:af:45:
f1:ca:55:d5:d2:4e:9c:47:24:e5:16:13:ea:ed:1a:5f:74:12:
4e:82:3a:65:38:09:1a:f4:5a:69:75:5a:1e:36:95:6f:b5:2e:
fe:5b:b5:10:c6:9d:55:66:87:95:8b:46:a4:72:59:60:c5:5c:
e3:d6:02:6c:1b:06:ef:76:fb:31:46:80:41:91:54:b1:4f:dc:
63:a4:62:a4:ad:84:04:3e:d9:6e:0a:bb:a6:4f:28:c6:1f:75:
65:72:8b:c3:5e:5b:81:03:e9:29:39:6f:c5:ff:ff:54:82:f4:
c0:6b:f8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEonSdTzQY1R1DaczdF7rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzNkOTQwMTlhM2MyMzU4NzdkZjZiYzFiMjljNzZhMGI2
NGM5ZDAwHhcNMjYwMjA5MjMwMDIzWhcNMjYwMjEwMjMwMDIzWjAzMTEwLwYDVQQD
EyhjY2Q3YWQ2MjQyNGVhMjFiYjhjYzk0M2I1OGVmNTc5ZWRjOTc2Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIiMbe/kXxFOVyeVGL5C4kf9vO3z
1nNAVKsWIyWIbymayTuyaK1b5/1dagRG82TQfAZt+izpEjTpMDDJRKVFJncADR+1
DEz8OWRj6VlDDLpc1d3lmau483MGzpGhvcqQ3bQyygB+iUYzqMwVBS7Vzi1neCjF
6mgrrFs8Ekz8RY2p3Af7zxSuAg15F433k5zFyTQx+FGSzuFR8mOH/UYM3iaJeFHH
5RyE0P1zwJRepXNPRheYA/xd5iKpLJpGFlp+j4hf9VRRyb9s1jkGeRLVQ1A0qGr7
7Fc2xDW7vO8UIgSHxEYuC9HegrxE6N7rNHpqKfkLtxof+e0Do5N/vsMHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzXrWJCTqIbuMyUO1jvV57cl2z6MB8GA1UdIwQY
MBaAFE1z2UAZo8I1h332vBspx2oLZMnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQt
OTZkYzVlYTBjYzgzLzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQtOTZkYzVlYTBjYzgz
LzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk9zgS/P
x7W5O2V4sJ7sBYktwqlmp6vAKQPOPoxVTKCm1qIgzj5aKS5xRoC9iUOqBV73jYZr
XEQTnbZ9wKIUnChDaGO3if6GhjQ61wNNJXMkeo9/cBj2u62mgvJntPndIUkg0aH5
dgxMdZUtJdFyJg6lWoKBnr94hGVLUbSN/BIgKvDgjBphekE2UibtuK9F8cpV1dJO
nEck5RYT6u0aX3QSToI6ZTgJGvRaaXVaHjaVb7Uu/lu1EMadVWaHlYtGpHJZYMVc
49YCbBsG73b7MUaAQZFUsU/cY6RipK2EBD7Zbgq7pk8oxh91ZXKLw15bgQPpKTlv
xf//VIL0wGv49g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:16 2026 by rpki-client