This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: ewoblW1dI1VHVmIzj3/driq+wZP7RbsGW4RyF0ksyQE=
Subject key identifier: AB:01:A0:30:C9:3B:6B:D5:65:0B:5A:58:1F:AC:3F:BB:20:FB:8E:3A
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 019C42B429437819D528B4A4F40B374E421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 120A
Signing time: Mon 09 Feb 2026 14:00:28 +0000
Manifest this update: Mon 09 Feb 2026 14:00:28 +0000
Manifest next update: Tue 10 Feb 2026 14:00:28 +0000
Files and hashes: 1: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: kfsAY7txNLAaEEjAkpDOWoI3PG/LJXoVOWukPIrhaFQ=)
2: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (hash: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:29:43:78:19:d5:28:b4:a4:f4:0b:37:4e:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Feb 9 14:00:28 2026 GMT
Not After : Feb 10 14:00:28 2026 GMT
Subject: CN=ab01a030c93b6bd5650b5a581fac3fbb20fb8e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:eb:3d:1f:15:f2:d4:f9:31:61:67:da:52:
c7:40:bb:38:d9:e9:8b:4f:be:2c:46:8d:df:9c:45:
0c:bd:e0:bc:ce:e2:56:ff:ca:67:36:24:57:31:b2:
65:8a:3d:e8:49:5c:7f:51:dd:a0:e9:ce:72:09:fb:
13:83:18:5f:aa:c7:c2:0b:c7:4a:f2:6f:84:b6:b8:
fd:4d:38:d9:a7:64:01:81:c2:67:15:99:1f:9b:34:
c1:2c:37:08:c7:eb:38:23:89:3e:7b:b2:51:fd:72:
57:90:ef:95:07:e7:99:4e:df:6e:ba:46:71:3b:5f:
b1:6e:47:36:f0:d3:1e:e4:47:40:4d:0a:e4:e9:fb:
d2:9c:e8:1b:16:25:f2:ac:cd:e5:0c:28:51:bd:25:
bc:40:eb:94:0d:73:12:ef:65:0c:cf:28:91:31:a0:
88:14:b9:cb:01:22:61:72:95:f7:bf:1f:c2:8d:c7:
dd:8f:34:df:68:b4:32:18:e4:9c:51:8f:67:34:53:
74:05:ea:09:af:5b:e3:33:bc:62:36:a3:e3:c9:2f:
ea:30:75:2a:11:11:03:b8:d5:0a:fe:eb:8a:ea:3e:
ad:41:cb:f4:ae:dc:0a:14:26:d9:43:b6:21:11:4b:
4e:ae:d9:c8:14:e5:a9:3e:cd:f7:3f:f2:d1:35:77:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:A0:30:C9:3B:6B:D5:65:0B:5A:58:1F:AC:3F:BB:20:FB:8E:3A
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:62:32:eb:7c:da:71:42:dd:5f:fe:8e:79:44:ca:9e:8a:0c:
56:e2:bf:f4:57:b0:35:3f:b4:af:f3:2a:a8:cc:a4:d9:4b:7c:
58:cd:e1:1a:5f:53:34:6c:e2:54:e7:40:7b:99:e0:98:dc:54:
4f:0f:56:3b:e4:49:b5:bf:b2:10:e7:ac:b6:07:54:f7:93:c4:
b7:d4:73:0e:03:06:e5:e2:b5:c6:4f:99:e2:f1:9c:91:de:10:
5d:16:f1:6c:16:27:31:5b:d6:94:a9:1f:64:ce:93:c2:93:ac:
65:f8:a0:e5:c5:7e:1b:a5:86:05:2a:81:35:59:3f:6e:3e:2e:
94:b1:3a:ae:33:fb:bd:55:1f:00:4f:47:8a:ce:fd:9e:66:31:
8e:a6:49:61:f1:6a:6d:25:86:23:d0:f5:ce:9d:f5:f5:15:52:
46:a1:99:58:49:8d:ed:6d:10:3e:a3:83:23:55:af:78:7f:67:
14:59:e9:0c:d2:af:b3:ba:1a:c5:94:f7:6d:1f:22:33:26:1e:
39:b7:ce:7d:ef:dc:3d:1d:fb:29:63:0a:a4:4b:80:12:33:26:
b6:1b:53:2d:ee:d3:9d:00:64:4c:2f:69:cd:b9:e6:9e:7f:a0:
0f:53:bd:88:98:c0:09:aa:05:7c:e7:80:21:ba:c5:ee:20:87:
50:1a:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:56 2026 by rpki-client