This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: 0ENVe7pwXc4GrKKsAp06trjx7Q622q4WGo8zuIxgswc=
Subject key identifier: 78:A0:1F:20:85:63:89:7C:47:B1:39:45:E8:F1:6A:E3:86:0C:77:DC
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019C427D1792301ADD464372ECB52ABAE4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:20 +0000
Manifest this update: Mon 09 Feb 2026 13:00:20 +0000
Manifest next update: Tue 10 Feb 2026 13:00:20 +0000
Files and hashes: 1: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: pTo/TnhK+Q9Kyt55TcjgA+xT73IU9r3nPcvX6wd4FrM=)
2: ciYm9mEV2L9eSrKsaReboOeTaEs.roa (hash: y10S4mN+BJMChkxSiJiAL2EsRGyVDqBF8+UMGdjCK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:17:92:30:1a:dd:46:43:72:ec:b5:2a:ba:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Feb 9 13:00:20 2026 GMT
Not After : Feb 10 13:00:20 2026 GMT
Subject: CN=78a01f208563897c47b13945e8f16ae3860c77dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:80:03:a4:81:63:76:fc:9c:92:14:b3:9e:
60:c3:63:5e:ea:1a:e7:b9:ab:6a:95:07:5b:7f:3a:
2a:da:1f:44:2a:99:39:d3:f7:c7:b3:58:9d:7c:3f:
ac:d3:6c:7c:d1:10:3f:03:69:e3:a2:13:0c:08:fa:
4a:85:04:69:95:58:5a:26:71:63:c6:7d:e0:be:11:
1e:00:b7:05:b6:bf:e3:e8:42:a6:e5:73:ee:1e:34:
a0:64:43:5f:e2:24:87:eb:01:8a:a4:b2:25:e5:67:
a8:60:b0:a3:50:03:a6:f6:b3:e7:cf:5a:15:6c:ad:
e3:3b:1c:ff:ab:2b:2f:5e:5c:64:c2:a7:e8:1d:a1:
09:69:af:28:cd:04:e3:df:7f:0f:1f:b4:66:92:ff:
20:d1:f3:7c:00:4b:22:c9:84:da:ae:05:7c:27:09:
11:a5:ef:10:51:7f:ed:ef:35:93:2b:bd:1f:f9:29:
88:d6:2a:c0:83:32:86:c3:dc:9f:d4:43:7f:d2:bd:
0f:8c:cb:da:f5:a7:95:1c:26:31:bd:ec:ac:e3:17:
7b:9b:98:4a:b1:36:55:70:f8:b4:77:00:9a:d3:c2:
49:03:c6:10:98:98:9e:8a:38:67:f6:4e:a2:6c:35:
66:af:3c:41:05:c1:4b:91:0f:40:e4:0d:a3:37:48:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:1F:20:85:63:89:7C:47:B1:39:45:E8:F1:6A:E3:86:0C:77:DC
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:80:18:22:e3:9c:16:75:f1:04:2b:d1:fd:ff:b9:81:4c:
a4:31:ca:a9:f4:dd:aa:de:04:da:5b:8e:1b:e8:fe:80:4f:28:
46:b5:29:91:8e:e3:a7:28:33:4a:a8:47:03:86:3a:9a:5c:e0:
5d:db:ff:00:37:c5:df:38:b9:91:a2:3f:cd:3e:12:39:e6:82:
c7:4c:3f:39:be:8d:46:be:c9:bc:2a:77:8b:d2:63:c3:42:7f:
9b:ae:f1:78:d2:55:70:be:45:13:4c:d8:da:02:1c:f1:97:7f:
7f:bf:dc:a8:0c:c9:e3:3d:7f:4b:7c:76:2e:6f:cc:e8:95:5a:
8a:99:78:61:27:1e:c5:67:8e:37:57:ed:bc:5d:d3:8b:f4:d2:
a8:63:db:74:8a:24:7f:47:84:58:c1:c7:a1:e4:aa:f8:54:f6:
3f:70:98:3c:a8:c0:39:22:f4:b7:6f:45:1c:1f:e0:c3:3a:00:
03:aa:bc:43:13:33:bb:2a:ff:80:a7:13:a1:11:ba:2e:98:07:
14:cc:65:c2:15:92:a7:ff:82:17:ea:ea:12:4c:73:cf:89:73:
53:05:24:a4:f1:cf:f0:67:53:31:84:19:48:4e:b8:08:bc:e3:
7d:f3:e0:58:a3:88:91:71:11:30:95:b2:c3:e9:b8:60:8e:23:
48:f2:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:17 2026 by rpki-client