This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: GkfgQ3Z+IIotjEgvsQRF71qBQKEjXNzbLEqZHns/efg=
Subject key identifier: C3:46:0C:FA:B5:D5:74:2E:69:51:20:EE:99:F2:F7:7A:80:0D:F5:8E
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019C42B41F4CC1F3E380784558CD051E7003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:26 +0000
Manifest this update: Mon 09 Feb 2026 14:00:26 +0000
Manifest next update: Tue 10 Feb 2026 14:00:26 +0000
Files and hashes: 1: EE1IR__hFo0NNKF6xFAxKCvJLLc.roa (hash: c5vHGMXBjtf9/OA6kUh+XleGeiDScbpifIZCP8WtbjI=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: 13PpADjsloNx+TdpzEeOu27Z4eAA0fVEUv/icJSbBLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1f:4c:c1:f3:e3:80:78:45:58:cd:05:1e:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Feb 9 14:00:26 2026 GMT
Not After : Feb 10 14:00:26 2026 GMT
Subject: CN=c3460cfab5d5742e695120ee99f2f77a800df58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:ae:e1:19:3a:f5:f7:d5:b2:48:59:b9:fe:
33:bf:af:d2:34:48:20:fa:18:71:82:e7:71:08:97:
28:25:4b:d8:9b:20:f0:1d:9f:74:61:c2:f3:9c:6e:
e2:58:79:88:95:ba:8b:d1:c6:cf:88:d0:e0:87:14:
e1:26:35:28:74:65:de:ba:5f:5d:c5:84:f6:c5:c1:
6f:af:93:95:b2:6f:7e:d1:08:28:1b:bf:fd:fd:6e:
3d:4b:f0:22:55:aa:1c:04:6b:20:f0:9c:03:bc:c3:
93:73:54:fc:ac:3c:c6:cb:5c:ee:6b:c7:40:2f:ec:
df:ab:23:2d:d1:b5:6c:c2:36:63:4a:76:5a:65:30:
f7:dc:77:4b:27:b9:cd:d7:3b:6c:31:36:c1:b8:51:
68:25:d6:86:0c:cb:9f:21:78:f3:3c:ca:df:68:9f:
cb:99:e4:18:d0:d6:5a:3e:9e:cb:a0:c2:f2:45:83:
9f:bd:7a:a8:e5:0f:a5:13:04:bb:4f:03:49:46:cd:
a7:87:58:18:db:80:70:c2:ac:f8:77:c7:86:c4:ea:
58:40:87:ff:b0:e7:6d:3b:a1:06:a4:98:7e:d4:f8:
1d:1e:5d:1c:2b:01:37:ac:87:1c:17:9f:94:d6:b6:
95:f4:1d:3b:47:50:61:7a:49:1d:fc:04:de:7f:51:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:0C:FA:B5:D5:74:2E:69:51:20:EE:99:F2:F7:7A:80:0D:F5:8E
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:24:0f:fc:32:a1:2e:cd:d8:92:ec:2b:0b:72:ca:3b:f9:
66:21:28:cc:73:7c:31:6c:8c:f8:ec:94:df:05:6d:e0:e5:69:
ad:f9:51:84:0d:b7:7e:d5:dc:01:b6:14:7e:cd:58:6d:ad:69:
19:f1:3b:e8:a8:2e:6b:cb:30:72:1b:52:c0:75:a5:ed:e4:1a:
f5:2a:e7:c3:d7:16:9a:39:50:49:d3:e7:36:d7:10:d5:60:96:
e2:6f:f0:da:69:3c:2d:44:9f:3e:1e:6e:80:e8:99:1d:a3:e8:
4f:87:58:ee:5f:d0:a9:64:2d:36:35:0d:41:4d:4c:fd:bb:9d:
ef:56:ff:f4:ae:01:8f:70:8e:ab:46:ab:44:b8:8d:4d:31:0b:
4d:1c:3c:5c:0a:58:43:89:86:80:2b:70:07:da:89:2c:8a:e4:
ec:54:e2:2f:34:c7:f6:0e:b0:64:c0:dd:5a:8c:46:46:be:1f:
b1:b1:ab:b3:38:58:d6:b0:fb:57:52:51:63:68:cc:75:07:53:
a7:3a:5a:4b:45:d3:53:7e:5d:2e:c5:dc:d5:e3:af:b0:5e:86:
19:37:d9:15:a0:ea:ad:45:1e:51:75:dd:b1:e0:e2:8b:bb:12:
13:f1:41:13:39:53:5f:29:bb:06:b6:79:7c:46:44:ed:62:b3:
a9:80:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:10 2026 by rpki-client