This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: 7g1NanWTofrERNJ/GGVFMQqSOl0ZaPx4RlN1s1o1Dz4=
Subject key identifier: D5:93:CC:8A:98:61:3C:6D:EE:0F:15:88:07:D0:BD:9F:DE:78:22:04
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 019C446BC5416703BDDC7C7FD0DD05FAA6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 0746
Signing time: Mon 09 Feb 2026 22:00:39 +0000
Manifest this update: Mon 09 Feb 2026 22:00:39 +0000
Manifest next update: Tue 10 Feb 2026 22:00:39 +0000
Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: 59HyOxk9YSXnaxuknJN0oZnT9tCZRT7DFzu0Rvonz40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:c5:41:67:03:bd:dc:7c:7f:d0:dd:05:fa:a6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Feb 9 22:00:39 2026 GMT
Not After : Feb 10 22:00:39 2026 GMT
Subject: CN=d593cc8a98613c6dee0f158807d0bd9fde782204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:cc:4b:fe:30:60:ff:b9:e6:ba:30:25:f0:
8f:04:75:26:87:7f:0a:7a:7c:98:28:5b:3c:bd:94:
74:70:1e:15:28:5e:7b:91:06:b1:c7:2a:82:7e:6d:
ae:7a:af:72:a3:03:b7:33:69:b5:9e:27:74:fe:e6:
5e:f8:c8:6f:f1:ff:b6:53:9b:a2:98:36:12:77:b3:
ce:5b:02:58:7d:bd:18:31:ae:18:23:4f:e1:72:34:
fd:a5:37:b9:06:93:0d:1d:8d:2e:9e:dc:b6:a8:0f:
26:9c:db:63:90:72:df:c4:b0:43:c3:45:e6:12:a5:
d2:de:aa:14:5e:c2:94:7a:3d:96:a1:43:e6:80:c0:
47:46:38:1d:72:9e:ca:f9:27:88:58:97:52:4c:f5:
62:2a:99:cb:21:9c:ad:e0:65:dd:79:8a:09:1e:97:
84:a1:cf:c3:44:a0:2d:0a:d4:71:4a:38:3e:86:60:
bb:50:9e:95:05:e7:1c:37:ba:ab:23:4a:b2:62:73:
9a:29:74:26:de:d6:62:af:4b:c5:1d:2f:5a:b1:b1:
0a:cb:a7:37:9b:84:6c:18:3a:4e:eb:06:22:f4:59:
9e:bf:79:33:a5:e2:11:8f:2a:3e:3d:5d:75:03:51:
05:e9:f5:fe:49:37:e4:92:40:83:44:18:94:3f:6d:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:CC:8A:98:61:3C:6D:EE:0F:15:88:07:D0:BD:9F:DE:78:22:04
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:0f:8d:e1:8e:21:e1:95:9b:4c:5d:3b:11:88:53:cc:54:
46:ad:af:5c:c8:1d:08:5c:c5:93:93:2b:09:4c:7a:94:4a:9b:
53:ea:3a:38:c4:d2:d0:90:cb:f3:8d:29:a2:27:5f:55:bd:78:
aa:f0:21:db:39:f0:01:bd:38:7b:c6:3f:7d:d3:69:85:ba:d9:
f5:db:fe:83:ee:67:85:af:84:9c:a5:f0:8f:1e:db:62:ec:fd:
5a:4d:c2:d3:85:00:ae:ec:08:f3:19:fb:dc:0c:9c:4f:c1:46:
dd:fd:8d:fa:3a:e5:95:0c:ae:a1:67:ee:45:a0:87:a3:10:27:
8b:7c:ce:ed:31:de:c4:4e:66:c6:9d:1e:4c:ad:10:2e:c9:da:
4d:40:9a:b7:7b:de:b9:30:79:6b:59:1b:8b:17:cb:5e:5d:04:
92:a1:13:af:a1:7f:34:4e:44:e6:92:79:ca:1f:f2:df:11:16:
4c:92:fb:36:2c:76:93:b6:bb:aa:53:a4:50:14:2d:21:3f:a7:
86:3a:6e:17:29:47:4a:a8:82:6b:fd:b6:dc:06:35:95:2c:b8:
ca:ab:53:9d:2a:2c:51:d6:b2:8b:2d:e4:c9:f6:49:63:82:ea:
67:b8:63:93:dc:31:01:f6:40:ed:cc:6a:d3:f9:25:ad:64:73:
a8:02:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:14 2026 by rpki-client