This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: BNjTrtjPV+rOxoCejUcdWdURkdY4PDqO5NsNhFbTRzE=
Subject key identifier: B8:CB:48:D9:87:46:40:FD:B7:A4:17:96:4F:79:EB:54:F5:D6:50:94
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019C43595508C5E33DF9D316C8DB3D0554A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 10E9
Signing time: Mon 09 Feb 2026 17:00:53 +0000
Manifest this update: Mon 09 Feb 2026 17:00:53 +0000
Manifest next update: Tue 10 Feb 2026 17:00:53 +0000
Files and hashes: 1: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (hash: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY=)
2: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: m64QRpBvKhlP06+1gWKL5aNHAs/4RCKW0NH6TZonyFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:55:08:c5:e3:3d:f9:d3:16:c8:db:3d:05:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Feb 9 17:00:53 2026 GMT
Not After : Feb 10 17:00:53 2026 GMT
Subject: CN=b8cb48d9874640fdb7a417964f79eb54f5d65094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:be:bc:32:72:94:9e:81:ac:fa:b3:62:63:
28:91:ce:e2:0f:9a:0b:6e:e1:f2:c2:95:87:1e:b9:
d7:62:3a:0f:0e:cc:2c:af:1e:b8:37:f0:f8:f9:eb:
e7:01:96:09:9f:3b:d9:2e:0d:44:f4:98:91:04:0c:
5d:f7:95:b1:2f:1b:5e:96:47:08:9f:b4:79:1c:5c:
23:88:af:21:88:e9:57:2c:f5:9e:64:20:9a:ab:01:
5e:96:b2:a3:e4:9b:4c:d0:7e:df:9a:1d:00:28:f1:
a6:e4:3e:8c:d2:33:f4:2c:09:dc:d6:ff:bf:4f:a9:
30:44:3c:a1:2d:d6:1b:be:d9:57:63:36:c3:16:1a:
81:91:c8:6f:a2:fa:2f:90:9c:69:5f:ab:9d:a5:5b:
e5:a0:b4:e4:d6:52:93:9d:60:40:c2:46:5f:c4:32:
4f:e1:a6:72:8a:6c:69:db:df:b0:d5:02:d2:eb:97:
ff:b9:43:42:6b:13:91:f3:4d:ed:4f:8b:d0:d8:6a:
37:2c:3f:48:4d:e6:51:e5:d3:f6:cf:ac:c2:3a:5b:
5d:80:b7:5c:19:9e:06:48:49:90:e8:e3:08:cb:db:
92:63:b0:1d:ec:22:7e:aa:8d:5c:bc:54:b4:cc:8b:
b7:b9:b5:34:c7:56:68:9b:51:27:1f:d1:2b:42:b8:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CB:48:D9:87:46:40:FD:B7:A4:17:96:4F:79:EB:54:F5:D6:50:94
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:09:85:eb:63:0d:be:63:14:7e:56:66:38:fb:51:dd:2b:
d8:01:16:98:cb:20:18:ad:3b:64:d1:b6:f4:83:2f:54:71:9e:
c6:15:55:05:a2:ae:ea:cc:d1:73:01:5a:fc:d1:2e:86:40:1f:
b1:a6:66:f0:22:2c:28:34:1c:98:ae:fa:93:06:a9:10:94:46:
6c:3d:1e:2e:62:48:29:fb:9a:84:29:a9:27:23:61:4b:07:35:
cb:5c:54:55:e3:01:94:e3:e9:f1:07:31:6e:fb:d3:0a:58:20:
32:03:bb:42:45:a0:c3:1f:94:8a:bc:77:a8:68:c9:7e:2e:27:
0b:2f:78:ed:9f:01:cc:89:ff:7d:a6:d9:77:49:5e:29:1f:fe:
71:17:53:7b:c1:8a:03:8d:3f:2b:f2:e2:ac:90:a4:7a:df:c4:
aa:86:19:ae:3f:b8:2f:e7:61:ab:2f:6a:f6:94:ac:2d:ea:e3:
ed:be:25:04:db:51:6a:77:b4:bd:21:39:89:4b:b9:07:e1:de:
c7:37:4d:f7:36:e0:fc:59:6b:75:37:04:77:3c:45:11:7a:ed:
99:79:a2:92:8a:c8:69:62:a6:ff:04:51:d5:ba:c5:dd:7d:13:
e0:e6:49:bc:34:45:4b:e1:1c:49:a0:fc:cd:2a:7e:2b:37:f5:
5b:46:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:34 2026 by rpki-client