This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: TKCqfWdcbNhDLCYPN9H0m4HpD55w3H69pSahPN3eK9I=
Subject key identifier: DF:88:77:85:EE:FA:09:29:0C:90:E9:9F:C1:EE:8E:8B:1C:F6:93:2C
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 019C427D90CE904A2E232A149E0A2968DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 13:00:51 +0000
Manifest this update: Mon 09 Feb 2026 13:00:51 +0000
Manifest next update: Tue 10 Feb 2026 13:00:51 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: Ircgu7CYY/7/UCBBIJqWoVSInjO0OIJfRzs6j40goCw=)
2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
3: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:90:ce:90:4a:2e:23:2a:14:9e:0a:29:68:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Feb 9 13:00:51 2026 GMT
Not After : Feb 10 13:00:51 2026 GMT
Subject: CN=df887785eefa09290c90e99fc1ee8e8b1cf6932c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:63:d2:ae:c8:ae:63:fd:aa:4c:40:b7:6c:
9e:ad:e4:75:fe:e1:a3:56:8e:83:fe:25:d2:5a:9b:
77:2a:ae:5d:70:bf:bd:c0:77:3d:72:4f:06:60:27:
1c:06:3f:32:56:bd:6a:1b:8e:de:59:ca:98:cd:1b:
bd:bf:ac:68:57:61:77:1a:91:67:e8:43:71:b4:a2:
1a:6a:b5:1c:b7:96:14:65:22:4f:4e:79:fa:5f:eb:
56:56:e6:1b:4a:4f:37:07:46:3e:c1:c6:d0:99:a9:
0c:17:75:1e:45:f8:56:4d:77:19:92:8a:89:b6:6b:
04:3a:dc:93:52:f4:67:c3:c7:b3:8c:8d:fb:8c:14:
38:27:24:33:45:e3:45:6c:53:48:f3:b8:22:d5:4b:
fb:ef:79:38:ee:71:d5:1a:6a:20:dc:ab:ed:63:bb:
56:54:bc:24:71:a4:04:00:24:37:a6:f8:d8:9b:4c:
8c:f0:af:af:2a:d2:27:40:b3:e0:79:87:b5:7e:fc:
45:4f:84:ca:59:fe:97:3a:d4:98:81:2d:e9:72:91:
5d:2a:ad:24:80:a9:42:99:00:8a:ea:7e:ab:9c:45:
21:66:9f:7b:bd:63:3c:24:80:8a:fc:64:5c:a0:a5:
7f:74:46:aa:23:88:63:fe:b1:9b:1d:e7:65:e4:ed:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:77:85:EE:FA:09:29:0C:90:E9:9F:C1:EE:8E:8B:1C:F6:93:2C
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:39:ef:fe:2e:e8:0a:8a:6c:42:72:6f:f9:e0:ea:0d:ee:
a6:ce:d0:35:e7:f5:71:76:99:70:76:e8:4d:63:3c:ec:27:38:
b4:7d:dd:8e:01:80:7c:eb:8a:e0:c5:93:81:c6:2e:33:73:d0:
39:e6:a6:1d:8a:b4:9e:b0:c4:b8:15:41:a4:7f:0f:81:c0:d4:
3b:2c:6c:4a:9e:35:a8:b6:f6:8f:16:b8:be:ca:0e:cc:dc:c8:
d1:ba:d0:76:2d:e0:cf:53:fd:03:4a:40:5b:60:c3:26:9b:d4:
2a:10:5d:ee:a6:a6:1e:78:b2:ee:9b:43:cf:19:ae:6d:04:fd:
b2:51:58:48:2a:79:bc:e5:47:32:25:8a:fa:53:03:60:18:1e:
2b:16:7e:d2:01:b0:e2:a8:a0:88:a3:46:d8:dd:62:94:20:d9:
44:ab:1f:3f:3d:50:48:2f:ca:9f:84:60:4d:ae:c0:6c:f5:47:
f3:56:8e:85:2e:af:a5:36:62:8a:9f:e1:de:2f:bb:b2:56:0b:
c9:6d:31:be:a1:89:9b:9f:99:5d:b3:e4:c0:53:e8:df:fa:81:
0d:36:41:1e:68:4a:d7:c2:b8:16:ef:27:d9:b7:de:7d:bc:19:
46:da:06:03:e2:bc:22:73:81:c2:7e:c6:1e:ad:d4:85:78:34:
60:df:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:07 2026 by rpki-client