This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: 3WjIm90fTKezrLyTEC8XveHZkfGiCMXHligzqFub1pk=
Subject key identifier: 10:A7:4D:07:6F:25:64:77:B6:5D:CC:46:C8:A5:67:C4:BE:FC:C4:6C
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019C41D8CDDFC5417385D70C74DE2BBD4A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0ED3
Signing time: Mon 09 Feb 2026 10:00:53 +0000
Manifest this update: Mon 09 Feb 2026 10:00:53 +0000
Manifest next update: Tue 10 Feb 2026 10:00:53 +0000
Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: jKyda+U4RxcJ1PJbSk6GzFB7UvLi6W6pFD27/ovYkmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:cd:df:c5:41:73:85:d7:0c:74:de:2b:bd:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Feb 9 10:00:53 2026 GMT
Not After : Feb 10 10:00:53 2026 GMT
Subject: CN=10a74d076f256477b65dcc46c8a567c4befcc46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:2b:b1:c8:1e:df:9b:9b:10:ff:5d:f8:b0:
e4:9c:ee:67:da:e0:c3:28:f0:1d:77:8b:07:4c:2e:
d8:8d:75:c5:d6:91:c4:80:8e:db:7b:e5:85:28:0a:
2c:13:51:37:fc:83:76:71:98:20:a0:31:dd:a9:b7:
ee:ee:7d:8c:a5:dd:98:6f:58:63:64:b4:6d:bd:3c:
02:18:77:89:7a:74:eb:f7:bc:fc:88:d6:80:d0:73:
ce:aa:56:2a:2a:4e:0b:99:46:16:78:7b:cb:98:e3:
57:32:69:a5:1d:cf:17:e8:73:6a:2f:68:39:71:e9:
04:8c:00:da:8a:6b:de:35:b1:a0:97:3b:99:4b:bc:
93:e3:c8:50:39:11:5f:c5:52:26:85:9e:95:a5:26:
ec:14:3f:e9:0a:c4:64:9e:bc:1d:ac:76:fc:e4:25:
b9:52:9e:0d:fd:7e:52:c0:c4:a4:8b:bb:52:23:fe:
1c:03:cf:26:9f:cb:ae:b6:74:78:25:a4:7d:3f:d4:
de:3f:16:fe:42:0e:ff:c0:09:52:3c:85:7a:72:2c:
73:8c:b0:cc:05:1d:ca:c4:08:25:59:fc:3f:b6:18:
14:af:e7:45:62:1e:e7:36:e9:3d:77:2a:f9:e0:82:
8c:8e:f9:4b:73:8d:40:95:57:d6:b8:12:91:cf:b7:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:4D:07:6F:25:64:77:B6:5D:CC:46:C8:A5:67:C4:BE:FC:C4:6C
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:be:26:e1:f6:99:6f:92:7d:d5:51:ce:fa:b3:35:50:eb:c6:
fd:c9:4f:43:5b:4d:e5:77:6a:3b:a1:5c:5d:f2:cd:b6:2e:6e:
cf:e8:35:44:3b:8d:61:5e:ec:ed:c1:3a:7f:20:40:13:f3:ae:
72:7c:91:b0:f7:0c:85:a4:23:9d:32:30:e7:5c:81:83:27:22:
dd:a0:e3:24:61:de:1e:0b:c1:cb:08:7b:3d:a5:28:6d:90:d2:
d2:84:c9:48:c6:f7:ae:19:8e:ca:8b:d5:a3:01:e5:b4:68:b8:
3b:e8:1d:bd:37:00:7e:21:82:85:e4:0f:58:99:ca:bd:a3:3c:
97:ed:25:7c:07:eb:3e:67:94:cf:6d:e3:86:05:df:82:ec:74:
16:0b:42:cd:07:3a:95:59:07:18:8f:0b:75:4c:fa:ca:d5:40:
45:04:4a:83:88:62:20:57:b9:37:b3:39:82:f8:d0:80:2e:a7:
ea:32:f1:9e:5c:90:56:17:b5:a9:0a:bf:83:bf:cb:a3:78:c8:
e2:cb:0c:f7:f7:71:6c:4f:d5:33:55:aa:28:bb:4c:38:0f:4e:
7a:1c:c1:d2:68:95:16:ed:0a:cd:aa:fc:6a:d0:73:c2:95:69:
89:06:c5:33:9b:54:ef:76:28:7c:bd:6d:f4:fa:a8:13:31:d7:
8e:fe:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:54 2026 by rpki-client