This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: V4am+HKVD5QoCaFw1uLNnmoW8rwGVR+msUOXHu2doD4=
Subject key identifier: 8F:64:F0:C1:CC:DB:4B:79:50:FA:D4:52:53:37:10:40:DA:7E:B1:B6
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019BFCF79B192D0F2C85E3918F08EDE93CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0FEC
Signing time: Tue 27 Jan 2026 01:00:44 +0000
Manifest this update: Tue 27 Jan 2026 01:00:44 +0000
Manifest next update: Wed 28 Jan 2026 01:00:44 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: o3QXdDMvYYgS/kq5xG0ZUAFyuyddZYirzHEzyiMBYy0=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:f7:9b:19:2d:0f:2c:85:e3:91:8f:08:ed:e9:3c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 27 01:00:44 2026 GMT
Not After : Jan 28 01:00:44 2026 GMT
Subject: CN=8f64f0c1ccdb4b7950fad45253371040da7eb1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:b6:b7:57:cb:64:fc:ff:dd:2a:0c:a1:fd:
86:fc:2d:c1:aa:f4:22:90:75:f5:8d:72:51:91:d5:
08:4e:f9:e6:be:14:9f:14:1a:a1:f8:33:be:f0:a7:
5d:5c:94:4e:72:00:2a:96:2f:f5:9c:a4:fb:6b:be:
f6:75:a7:11:4c:e2:bb:9a:75:e3:5b:13:f9:b7:1f:
8f:10:45:d1:c9:7c:e8:13:50:17:65:74:55:39:88:
4c:2d:18:31:ba:b3:6f:f7:79:b9:e4:c9:63:51:9f:
04:30:f6:f2:48:fd:0b:38:19:d7:26:38:26:38:c3:
65:b5:3c:28:b6:91:c8:cd:dd:94:99:5f:68:23:b0:
5a:e0:44:76:68:29:fa:a9:ae:46:be:11:c6:dd:b2:
44:01:52:dd:6c:55:22:0b:00:00:d1:8f:b1:34:51:
37:5b:10:db:8a:d7:f6:73:3d:40:ae:7b:8f:f9:c1:
59:cd:c1:0a:b7:95:5b:0f:5d:37:51:10:25:fb:70:
0e:d0:96:ba:df:14:b7:46:f6:10:78:b8:cb:65:db:
36:2c:98:bf:10:5d:92:e0:43:83:48:fa:53:40:bd:
85:b3:47:75:95:00:55:52:87:a3:07:dc:8a:c8:89:
50:5f:ca:61:b6:c6:f2:3d:c6:fc:e1:d8:d8:80:00:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:64:F0:C1:CC:DB:4B:79:50:FA:D4:52:53:37:10:40:DA:7E:B1:B6
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:c1:14:d2:5c:7a:09:de:74:83:77:6f:a9:e4:60:41:1b:
ff:3c:ec:8c:bc:34:47:44:da:f4:d9:d7:1c:ba:a6:9f:52:78:
55:4a:d3:20:81:ef:1e:f2:ff:8a:7a:5e:cf:69:de:c9:b9:10:
58:cd:35:be:3f:9d:15:88:1e:97:aa:92:73:54:28:62:64:a7:
78:8e:1a:77:66:09:56:c4:9e:43:34:8b:bf:3b:09:c7:71:fc:
1f:81:3c:5b:ca:81:a1:ea:3c:ee:48:28:0c:a2:3f:89:39:a6:
d6:f1:8e:aa:d6:3a:4d:aa:a2:0f:c3:bb:6e:93:4a:48:23:ca:
f7:3d:57:18:31:57:87:80:50:57:da:d8:f5:ac:24:13:08:ef:
be:93:24:6b:33:0a:fb:6d:ff:b7:7c:e8:6f:12:34:c2:3b:06:
7f:14:2f:4f:24:08:3a:72:bf:e0:68:ef:c5:22:21:1f:03:ea:
ad:70:9a:3c:7b:34:ca:09:1d:b7:1e:0f:f0:99:31:43:cb:60:
27:f4:bf:6e:c7:f5:7c:00:1d:1e:e9:7e:f1:16:30:78:97:39:
5c:77:98:e9:e1:c8:67:d2:3e:a0:ba:8c:52:4c:3a:2a:12:71:
2e:6c:a8:1f:42:f3:40:04:64:1a:08:5c:93:b5:d8:81:60:7c:
93:7c:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:15:30 2026 by rpki-client