This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: eXmwpFwoozfn9UpltKGF9ckYSl8S0J9xpMjGhJIIlgQ=
Subject key identifier: 61:69:FB:16:E3:87:AB:BC:13:10:EF:5D:F1:75:A4:B9:BD:7D:0B:EB
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019BE036AA0DE6328BA6F666DF686B96CC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1441
Signing time: Wed 21 Jan 2026 11:00:37 +0000
Manifest this update: Wed 21 Jan 2026 11:00:37 +0000
Manifest next update: Thu 22 Jan 2026 11:00:37 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: I02ryA4/0JuZoO8qiAYbzRG5AIc7Om+an8zCItFqgW4=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e0:36:aa:0d:e6:32:8b:a6:f6:66:df:68:6b:96:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jan 21 11:00:37 2026 GMT
Not After : Jan 22 11:00:37 2026 GMT
Subject: CN=6169fb16e387abbc1310ef5df175a4b9bd7d0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:6c:1a:3a:a1:76:d6:e6:b1:b0:a0:0b:d4:
09:17:43:ad:ae:12:bd:06:80:74:a2:47:9c:e5:cb:
a3:34:5d:36:ce:75:e0:3b:a0:b5:03:cf:3b:0c:8a:
5a:8c:57:03:99:da:4d:f4:39:19:47:92:2c:a7:b6:
74:9c:39:1b:20:e7:64:49:36:99:22:bc:33:d3:49:
39:42:4f:32:2d:fa:da:0a:8f:f2:8d:7b:9f:d6:58:
70:9c:72:b6:94:d4:33:98:65:4b:03:c8:a4:76:06:
d9:d4:5f:af:35:93:b8:a6:e7:3a:54:55:83:b4:bc:
99:2a:03:82:25:36:61:ec:49:a3:ba:65:52:16:4d:
75:c2:a6:fa:94:df:bf:90:88:2b:63:56:90:ab:19:
41:f7:54:9b:e7:3d:43:7e:92:5e:b7:74:1b:50:17:
8c:41:d4:16:69:ce:ca:38:0c:18:28:6c:e6:3a:94:
68:6d:7c:4e:ee:84:fc:ba:9d:3f:07:8e:a1:7e:db:
88:21:1c:08:3f:75:ac:46:50:1b:a6:f5:9b:1d:0d:
d6:90:05:23:f6:f4:34:6a:7d:82:ad:a7:93:54:9c:
78:33:8b:f2:3c:0d:21:a3:81:9c:63:5d:8d:f6:56:
83:3f:fd:8e:5b:42:4c:2a:7f:25:5b:92:d2:2f:fd:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:FB:16:E3:87:AB:BC:13:10:EF:5D:F1:75:A4:B9:BD:7D:0B:EB
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:2a:2b:96:97:9c:f1:c3:b4:9c:79:83:4c:cc:fc:19:23:
ae:23:55:cb:c1:fa:ae:e1:e0:fa:f9:33:c7:20:85:45:0d:0d:
12:14:a6:0f:7f:72:8f:9e:9f:f8:04:4c:a5:18:f4:50:ea:f0:
0f:77:97:6d:a9:08:fb:19:2d:59:e1:54:e8:a3:c1:78:a2:40:
64:21:51:a6:c3:a2:a4:3a:4c:08:d6:ca:79:77:f8:55:8f:b5:
8a:77:46:95:0b:5a:18:40:bc:40:8d:bf:81:43:f8:05:43:1e:
f6:21:6a:05:f9:1c:4b:85:cf:10:d9:53:0e:c9:fa:31:76:16:
83:a7:df:60:f7:d5:6f:6d:9c:d7:1d:c5:56:40:c1:10:55:57:
56:7b:47:40:3e:95:5b:97:7f:26:28:81:06:ca:dd:c9:4a:f3:
2f:62:4f:1e:2f:3a:ff:51:b6:d3:43:a4:7b:6d:e6:83:09:f0:
0d:b2:07:1f:36:ac:7c:41:be:3a:71:32:f4:9f:f9:4f:28:96:
b2:2f:d0:ee:49:55:23:da:c6:0f:6c:43:31:f4:4b:98:05:e8:
1c:f4:2c:b3:0c:de:b8:90:6d:07:84:26:28:31:be:8d:43:38:
e9:f7:dd:c5:f0:f8:be:2c:9c:18:28:03:af:e6:05:89:43:24:
97:cd:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:47 2026 by rpki-client