This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: cZtx4nGSQfep7gNnVU2IjQg8GdhHJ+j65+FVpLsuMzw=
Subject key identifier: A7:53:86:B8:5E:AF:07:DE:51:AE:C3:3A:1F:5A:5B:08:99:CD:04:29
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019C42EB11804045760A05E537B8D7C89891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 15:00:27 +0000
Manifest this update: Mon 09 Feb 2026 15:00:27 +0000
Manifest next update: Tue 10 Feb 2026 15:00:27 +0000
Files and hashes: 1: ND_QmrCQ_rk92oqsFIZ1cCB4dfY.roa (hash: b7b4ERuVbiLEKj/BAih0yKS3cGFbj/OJa0CNsna6Igs=)
2: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: yrOoOPIHmroo/uTEUq3iMkHnL/7Jyr2Nejj8KoUruJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:11:80:40:45:76:0a:05:e5:37:b8:d7:c8:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Feb 9 15:00:27 2026 GMT
Not After : Feb 10 15:00:27 2026 GMT
Subject: CN=a75386b85eaf07de51aec33a1f5a5b0899cd0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:18:1e:19:14:78:d1:ab:7a:fd:53:72:fe:
9f:53:64:66:86:c6:46:aa:34:56:2f:dc:0a:1f:32:
03:d9:49:b5:df:83:24:2d:b6:fb:c8:ee:4b:26:47:
26:a1:bd:e1:6c:19:eb:6f:09:08:ba:91:22:da:26:
a1:2b:95:e0:be:30:84:d4:53:24:93:35:67:83:a1:
9c:b8:2a:65:ca:a6:20:3b:f0:81:b3:be:fe:6e:96:
b3:1b:f9:9d:ec:9f:37:14:31:7f:ad:e4:5f:99:19:
b5:0c:0d:1d:ce:89:83:ce:a6:41:0c:67:b3:d6:70:
de:cd:43:35:a1:bf:07:79:ea:9f:65:be:75:bb:2b:
5d:d5:76:e1:d4:b5:4c:57:8a:15:05:74:e9:ac:17:
03:30:f7:50:00:da:05:ec:b6:ce:30:e4:a4:a8:68:
fc:96:76:a7:b9:01:96:20:2d:81:4e:da:c0:f7:de:
16:73:99:6d:2d:ce:e3:c4:a1:df:34:3a:33:16:60:
36:3c:1c:6e:d9:16:34:d9:c5:a6:49:80:7a:a6:f4:
bd:49:db:c4:01:b6:b9:6d:b9:04:3f:aa:9a:f7:a5:
83:2e:62:d9:43:64:f5:4c:d6:39:8d:c8:02:13:53:
30:43:36:de:59:c6:c0:c9:94:66:57:35:74:45:3f:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:86:B8:5E:AF:07:DE:51:AE:C3:3A:1F:5A:5B:08:99:CD:04:29
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3a:8e:c0:8f:f8:f0:c9:01:42:b6:19:e4:27:d2:4f:36:60:
25:7e:f4:d2:b2:15:46:32:77:b3:bb:25:2a:de:4f:f4:c7:a6:
25:51:8e:66:cd:41:b3:12:d2:f7:6b:6f:ee:bc:3d:c5:6d:a1:
be:dc:e2:7a:2e:9f:55:22:0f:a0:58:d9:34:be:1d:01:1f:7c:
03:ae:81:27:68:1e:e6:34:42:cc:42:26:c4:a6:44:15:d1:b3:
59:dd:52:59:6a:6a:17:24:ef:34:21:07:d1:29:14:c1:9b:7f:
f8:a8:0c:ee:4b:5d:ac:86:0b:5b:03:76:ef:f1:be:70:39:79:
0f:f9:56:dd:88:e9:e5:5f:4b:d9:2f:e8:86:12:8a:e8:52:b6:
d6:44:91:d4:2d:80:7a:8b:02:9e:6e:1a:3d:8c:43:fc:99:5e:
78:df:e5:70:68:1e:bf:4a:78:f0:0a:95:43:b2:e5:fb:36:bb:
31:d8:11:90:0c:0f:50:28:d1:60:5e:92:4f:df:51:03:95:0f:
f1:dd:a4:38:42:7c:e5:48:ee:dd:04:81:b2:78:1d:b6:2d:34:
a4:61:15:f5:64:7d:05:e6:b8:cc:dd:17:29:65:9c:2d:60:14:
41:b4:09:9e:d4:e3:ee:1a:fc:7c:b7:38:f3:3e:f5:2c:98:0c:
f5:90:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:31 2026 by rpki-client