This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: J3lCFmQsUPZnbI3/7GTOndpl/o6jHSXy2pRXInlonmE=
Subject key identifier: 99:20:36:42:0E:D1:EE:92:74:81:B0:03:F0:37:07:8B:71:4C:6F:C9
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019C432263555860DF1AAB59F781E769C293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 0A
Signing time: Mon 09 Feb 2026 16:00:52 +0000
Manifest this update: Mon 09 Feb 2026 16:00:52 +0000
Manifest next update: Tue 10 Feb 2026 16:00:52 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: Eln2CyT1KkSeLbSXxr6O+l6E6JXEycj6EReFplolYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:63:55:58:60:df:1a:ab:59:f7:81:e7:69:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Feb 9 16:00:52 2026 GMT
Not After : Feb 10 16:00:52 2026 GMT
Subject: CN=992036420ed1ee927481b003f037078b714c6fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:84:f2:74:cc:76:01:1f:e6:e4:86:b1:ae:
10:d8:1a:4d:8b:6b:d9:4b:74:fa:84:19:40:cc:e5:
2d:62:51:46:31:35:f1:72:2a:fa:53:a5:1d:ff:8a:
7a:c5:f9:0d:f6:5f:a1:b8:7c:b5:01:e4:9d:75:93:
70:ba:3d:08:04:8b:ba:88:0b:b5:78:48:56:d7:29:
7f:31:96:45:65:56:6f:04:2b:33:81:e8:44:38:28:
19:2b:57:92:6e:c7:ab:01:7c:c3:fc:65:d3:c9:8a:
a6:14:c4:dd:30:7f:71:89:04:1b:d1:a8:78:ac:07:
f8:04:bc:a7:95:51:ff:85:48:58:cf:9f:22:c1:51:
63:7f:0f:d3:7a:8f:f7:15:ff:8b:f2:66:39:02:eb:
13:60:49:f0:3e:8e:a2:9d:47:36:a2:c2:58:1e:99:
31:1b:d5:2c:0a:2a:2b:5c:2b:09:84:15:15:b1:ec:
d7:4d:37:cf:a7:b5:45:bc:fd:50:b8:8a:c4:29:7b:
26:e0:bb:f0:6c:71:b0:65:50:9e:5b:32:d1:c9:76:
da:90:d1:1e:8a:8c:e9:99:1b:2d:7a:02:bb:54:62:
2f:44:52:80:96:93:88:4e:97:28:b0:c3:df:f6:16:
91:e8:ec:04:57:25:5c:c5:b6:a9:a4:9b:22:94:a0:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:36:42:0E:D1:EE:92:74:81:B0:03:F0:37:07:8B:71:4C:6F:C9
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:35:17:3b:b0:15:42:83:be:28:af:6b:b0:ee:ef:ef:bc:
8a:79:43:9d:0d:73:32:81:d1:ef:b0:2e:80:80:4f:66:03:a6:
68:22:a0:41:9f:82:41:e8:e9:3b:75:54:9f:83:51:7f:72:44:
a6:06:37:55:12:7d:9a:cc:56:bd:91:13:6a:14:94:fa:37:1f:
6a:af:fd:01:67:a4:47:0e:3c:c4:51:ed:1b:ae:59:6e:7c:a6:
96:3f:50:82:0b:5b:94:68:97:c6:28:aa:c2:e2:63:d1:b8:aa:
c4:a9:61:14:17:8b:4c:0d:5e:ad:01:b9:f7:bb:dd:da:07:91:
1e:15:19:a3:70:45:ba:39:2b:ea:7d:50:b7:a3:cf:fa:bd:4c:
12:6d:e6:2e:93:1f:d0:5e:51:a7:44:df:6c:c2:db:1f:f3:58:
33:30:46:7f:b6:72:8d:2e:1b:00:10:b8:75:3e:37:5b:ef:bc:
5c:89:6a:c1:99:46:42:6f:b9:4b:66:56:0f:fa:8f:02:30:ff:
85:f5:de:b6:73:e7:23:14:07:a3:90:a5:83:4e:40:7a:13:f8:
15:64:71:d5:6c:b4:a7:9b:23:de:0d:fa:4b:03:75:e0:75:53:
ce:65:4f:86:12:38:e1:10:d6:ac:f0:bd:a6:9a:50:dc:ab:e5:
7b:ca:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:34 2026 by rpki-client