This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: 8chmpJ3aWiuOwFSCf7PYmGIHZxTIKCZYfsOcE0hpwtU=
Subject key identifier: 49:0C:45:59:40:AF:EC:F0:1D:83:E3:56:FE:C9:1F:76:B6:44:7E:7D
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 019C4390A6388218D4CD76BCA7BD0CB7E3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 06FB
Signing time: Mon 09 Feb 2026 18:01:18 +0000
Manifest this update: Mon 09 Feb 2026 18:01:18 +0000
Manifest next update: Tue 10 Feb 2026 18:01:18 +0000
Files and hashes: 1: QS-HbfHVwOboNvSjD7qE62Hr4KA.roa (hash: hPSMDrsX6eEkfCzcrrl0uCvcB1hd9Gv6m2p+Bfe7qjw=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: viJqn4kBriOIAVZhWJPLS8RkEBQOZjthDQbv4nej45Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:a6:38:82:18:d4:cd:76:bc:a7:bd:0c:b7:e3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: Feb 9 18:01:18 2026 GMT
Not After : Feb 10 18:01:18 2026 GMT
Subject: CN=490c455940afecf01d83e356fec91f76b6447e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:fe:bd:6f:43:10:b4:0b:85:10:3b:23:6f:
ed:9f:2f:1e:2d:aa:56:4a:6a:cd:f6:27:db:9c:8a:
14:58:ad:ce:e2:df:2d:c5:25:0a:54:da:8a:80:77:
fe:b1:de:f3:9b:a8:29:f4:67:fd:2c:2c:42:5a:dd:
52:b5:b8:32:f2:1e:57:b8:60:df:7c:33:81:c6:d3:
47:74:33:e8:3e:cf:64:ea:3d:6d:d9:af:d8:a8:e2:
a3:c1:5b:68:37:b1:97:cb:a4:2e:64:ab:37:8e:71:
5b:b6:db:32:ef:47:9b:4e:89:58:1d:6d:a7:cd:4f:
b1:e1:68:68:7d:d1:67:36:f0:0e:be:bb:1c:0b:ba:
17:ea:60:77:62:18:31:a8:b7:e4:60:37:3b:9d:52:
86:09:51:45:f4:c9:5d:7a:d1:d8:b2:23:2a:76:c1:
af:ad:8f:81:87:e6:14:c5:3a:c0:c2:3f:60:24:b7:
4a:b8:a1:53:c6:af:0e:bb:a4:fa:91:c5:44:20:c0:
c3:9d:d4:9e:42:04:14:73:de:2b:6d:57:39:95:62:
57:0c:b4:0a:0e:ed:aa:82:1d:6a:09:04:75:58:b5:
c6:85:78:9a:f7:96:c9:83:1b:ef:09:64:e3:92:4c:
ac:c8:e1:58:17:16:46:7b:58:d7:b9:3b:32:43:8d:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:45:59:40:AF:EC:F0:1D:83:E3:56:FE:C9:1F:76:B6:44:7E:7D
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b2:3d:42:0a:de:d2:76:16:b9:e3:58:29:c6:1b:e2:b2:44:
34:94:4e:8b:f0:e9:a6:40:dc:69:63:60:02:8f:9c:da:c9:95:
2b:45:ab:18:f9:ce:a2:0c:a9:02:58:84:8e:1f:61:54:78:b5:
99:a3:df:f1:7f:cc:fe:fb:b2:4c:c2:46:5b:c2:3a:3b:c2:ec:
40:7a:c3:ed:79:8a:47:2f:e5:32:e9:0a:c7:a7:2c:07:79:4c:
27:cf:65:d2:04:27:ce:12:03:74:1f:d5:7c:36:45:5b:2a:37:
10:67:e5:88:1f:40:d3:6f:e1:23:c4:1e:df:e9:3c:e8:e4:2e:
95:39:a2:2d:86:89:0b:53:50:bb:72:8f:c6:56:19:b5:82:a4:
a5:96:17:55:0a:ea:5b:6e:9f:82:6e:17:5c:c0:ba:4c:e7:f3:
8d:cf:4b:89:b9:34:e1:96:34:18:ae:0f:14:1c:be:a7:7a:ef:
cf:7a:14:52:8c:a9:de:18:ac:9e:98:d5:22:1c:7d:c0:0d:1f:
02:24:e1:e6:7c:b6:44:8f:96:3d:b4:94:79:10:4c:6f:f8:d2:
d5:95:1c:21:20:7d:1b:84:d3:9a:84:9b:84:bd:da:5c:43:9d:
f8:b7:73:1c:57:e3:d1:30:ae:6e:f1:7d:e9:bf:1c:6d:93:ad:
9e:58:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:52 2026 by rpki-client