This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: HLk+BS5pUxqP65588GWvirDniJp+r1bkvIX5lLZITcM=
Subject key identifier: A3:24:44:BF:37:E8:FE:55:3A:EC:4B:1F:92:A9:EF:F8:74:5D:39:A9
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 019C4358CDB0D1A171F4A0B909DEB0E98969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:19 +0000
Manifest this update: Mon 09 Feb 2026 17:00:19 +0000
Manifest next update: Tue 10 Feb 2026 17:00:19 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: SbOlTRo8sJQnWtRn8gUmh1/M2jehHxkJoMIhoSr9i8Y=)
2: gAYzl20xItIY_WqWVJ6f2CElDXs.roa (hash: 1hpv0IAqRBDo5f2z8yJyt+CBplx7y1IUryRuOQtPjKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:cd:b0:d1:a1:71:f4:a0:b9:09:de:b0:e9:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Feb 9 17:00:19 2026 GMT
Not After : Feb 10 17:00:19 2026 GMT
Subject: CN=a32444bf37e8fe553aec4b1f92a9eff8745d39a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:fe:00:07:b8:69:5a:a2:31:2e:f5:de:37:
56:cb:c5:34:8c:89:5c:e1:40:24:38:e6:5e:c9:42:
9c:4b:6c:ba:24:3d:11:54:1c:b2:cd:74:36:f9:d4:
62:dd:23:09:0d:83:c7:36:38:c4:3f:3c:62:a8:8e:
22:d1:60:54:8d:41:a4:f7:5b:30:5c:1d:77:f9:dd:
a8:3b:e1:24:9a:d0:e1:2d:00:74:cd:b8:bd:55:6a:
8e:6f:13:d4:a5:99:3b:41:c7:6e:27:e4:94:46:79:
bc:78:65:f3:2e:f7:38:b0:36:5c:c6:82:0d:b5:70:
86:d2:40:b1:5a:86:09:b4:8e:18:0c:3a:e1:af:b5:
05:d2:b9:23:a7:07:97:dd:95:04:6e:75:37:ec:38:
1b:82:81:5f:9c:e9:da:c8:17:df:a9:28:c2:9a:9b:
69:8f:59:dc:fd:ff:ca:ae:2c:b9:93:84:e7:84:ea:
ac:04:8d:04:04:fb:89:f9:7f:9f:fa:de:8d:1d:0e:
27:e4:34:46:19:23:ae:4c:0f:c9:e7:f0:ab:9a:07:
f2:1e:33:b7:be:1a:ff:b9:a7:ce:a5:2a:04:f3:0c:
1d:df:a5:73:4a:e8:35:cf:98:07:d5:e0:89:54:39:
c7:39:a8:56:ca:0d:ac:d1:1b:13:ce:58:46:e4:db:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:44:BF:37:E8:FE:55:3A:EC:4B:1F:92:A9:EF:F8:74:5D:39:A9
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:92:ee:67:07:68:5f:19:eb:9a:3f:70:1a:81:85:73:b6:
d4:de:53:4a:98:fe:3a:8e:47:23:1d:14:7d:ba:9d:10:41:b8:
c7:bb:af:d7:23:59:cc:52:42:5b:85:58:d9:dc:52:bc:b9:fe:
a2:e9:3c:8d:63:77:ed:ae:66:5c:f0:d0:1f:ac:34:13:a1:c1:
6c:9b:33:7a:84:8b:0f:ad:44:90:f3:d1:19:e9:cc:94:0c:0a:
9f:c5:da:01:3d:fe:34:2a:25:38:6c:e2:d5:bc:15:c3:8b:f5:
0c:10:94:c8:4b:0b:b2:1d:83:61:89:63:11:7f:44:e6:26:8b:
5c:b9:d5:a1:e8:0d:f0:49:c0:1f:3e:f0:42:d7:5c:7a:6e:eb:
54:59:76:27:e3:67:09:99:9b:c2:b6:f0:a7:7c:96:98:33:55:
59:07:69:0e:e7:68:c3:2d:a7:f8:44:29:59:e8:42:10:8b:a2:
47:08:dd:ea:18:3e:d4:b8:a2:64:fe:cd:91:1b:f5:b8:97:3c:
0e:b7:ec:86:d5:50:19:b8:e8:4f:92:5b:5d:c8:c8:e9:75:16:
2d:72:c8:cf:91:4c:d2:e9:90:ee:0e:64:1d:03:43:50:d2:ac:
5c:5f:14:1b:27:da:0b:1a:61:40:99:07:ca:c1:69:cb:16:97:
60:e0:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:19 2026 by rpki-client