This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: rDxmgNFDZ9m7zyhZb0e6gWL3O+0P4ytqWtdslO7LbUU=
Subject key identifier: D7:AC:32:9B:B9:CA:7D:35:61:82:02:E1:70:F3:B3:A6:75:2B:17:48
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019C2DE430E7A5350B5BDC52B0CA63FC7CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0979
Signing time: Thu 05 Feb 2026 13:00:55 +0000
Manifest this update: Thu 05 Feb 2026 13:00:55 +0000
Manifest next update: Fri 06 Feb 2026 13:00:55 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: DSKv1yk6URBWxn3mCQHMaHpmF+NR6EEZVHZN/jo8QBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:e4:30:e7:a5:35:0b:5b:dc:52:b0:ca:63:fc:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Feb 5 13:00:55 2026 GMT
Not After : Feb 6 13:00:55 2026 GMT
Subject: CN=d7ac329bb9ca7d35618202e170f3b3a6752b1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:6d:14:98:c9:f8:8c:66:2f:0b:82:cf:f0:
ed:65:42:ea:ab:f3:ab:e9:0e:78:dc:37:23:bc:06:
9c:fa:16:00:f6:c4:5c:8c:18:1c:e1:ad:6c:68:9d:
e0:5a:a1:67:52:d3:02:ba:58:b4:6c:6f:c9:32:05:
9a:c1:9e:2b:a3:14:af:c8:a9:f9:0b:63:b2:02:33:
1f:2e:4b:2a:c2:cb:a8:cc:59:97:5b:13:15:44:08:
b1:fc:e6:27:ac:39:89:b7:9f:dd:1d:40:29:1d:f4:
1b:53:27:ec:41:e0:72:7f:17:33:77:c4:5a:5d:94:
bc:10:05:1d:77:d8:15:75:3f:58:3b:d1:d7:18:75:
52:02:98:44:8b:17:65:8e:6d:3f:10:36:08:ef:24:
23:93:89:8c:c1:f6:80:31:6c:a2:9f:f5:10:58:6e:
9e:f0:58:9c:f3:03:0a:b0:d0:73:4d:29:00:c3:44:
1e:45:0b:ae:de:4d:b2:b1:14:e8:00:cf:74:c8:ca:
a7:49:98:19:19:12:87:8c:61:ce:37:32:4d:7e:c4:
02:f2:9f:91:9f:d2:8e:5d:c1:59:e9:42:32:86:06:
0a:be:a3:db:39:c0:55:54:62:e1:de:c5:11:45:38:
98:03:3b:05:ee:5c:15:76:95:97:e2:db:86:03:c9:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:32:9B:B9:CA:7D:35:61:82:02:E1:70:F3:B3:A6:75:2B:17:48
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:10:48:b8:cd:bf:b1:24:d5:0d:90:82:ed:41:1c:ca:aa:20:
74:42:48:55:9c:99:5f:a8:76:d2:66:7b:6b:17:e0:c5:a5:30:
3d:7b:62:db:12:36:e2:98:01:d2:2f:47:c4:8d:c8:e6:55:a0:
23:37:b9:0d:3d:d1:8c:e5:ed:3b:b9:f9:00:91:e0:fc:26:31:
bd:b4:ad:43:90:cd:dc:cb:93:45:b1:0c:ad:59:b9:f6:d1:c0:
5a:7b:ac:d7:33:f7:64:aa:e1:8e:53:70:af:be:54:8d:7a:38:
73:3c:17:0c:4d:70:39:3e:22:10:45:4e:f3:57:4b:fe:6c:cc:
87:a6:8b:4b:4b:16:ff:8b:af:db:bf:18:76:b3:56:03:6e:0e:
7d:ea:3a:f3:c4:39:3e:49:7a:05:89:c0:11:46:c3:6a:dd:41:
cc:b3:7f:c3:0c:d5:87:08:8d:31:5a:50:cc:5a:2c:54:69:52:
a5:0f:9e:d2:06:c1:12:7a:22:b3:82:50:50:07:50:06:0f:fa:
3b:e3:89:d7:0e:25:7e:94:16:09:71:07:c4:5d:26:98:55:28:
78:aa:5c:5b:d7:d0:59:8b:c2:9c:df:7c:94:ea:54:a1:f8:99:
46:96:23:6f:61:93:ee:6c:de:43:38:b7:1a:4a:54:87:31:79:
cd:ef:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:32:27 2026 by rpki-client