This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: J+Fikm3KxrcJ04oBiqvGcq+Lx4aRc2pPDPBIvsl4mA4=
Subject key identifier: 34:04:BE:6D:28:57:14:BC:39:D7:A4:E7:1D:A9:67:9D:75:9C:85:38
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019C4321FA04727C3B7DF5B3CCA314968CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 0320
Signing time: Mon 09 Feb 2026 16:00:25 +0000
Manifest this update: Mon 09 Feb 2026 16:00:25 +0000
Manifest next update: Tue 10 Feb 2026 16:00:25 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: EPH8MwfZCqJxY7UwA/xKM+1kigDio1CHryQYytns7uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:fa:04:72:7c:3b:7d:f5:b3:cc:a3:14:96:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Feb 9 16:00:25 2026 GMT
Not After : Feb 10 16:00:25 2026 GMT
Subject: CN=3404be6d285714bc39d7a4e71da9679d759c8538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:31:af:37:b7:62:45:27:d4:70:0a:2b:a9:
22:3a:05:ba:68:6f:40:24:06:6f:10:98:f6:5b:e6:
b7:47:a9:67:2f:da:68:db:ff:fb:02:72:1d:e8:0c:
bb:d1:fe:c3:2c:02:14:5c:6b:b0:c4:90:dd:0b:f9:
f5:be:df:88:80:5d:31:f2:b0:27:9b:7c:68:16:d5:
2e:d9:08:d4:29:0c:05:a1:8e:2e:03:1d:c2:aa:80:
7d:f7:5c:50:57:4e:76:36:9c:9e:18:44:fa:fc:89:
0f:5e:60:38:49:76:5d:d5:e9:da:d0:63:e0:9d:da:
5d:f6:f4:97:13:53:59:36:f6:af:ec:2f:9d:60:42:
66:04:23:ea:b4:d3:0b:86:6c:9c:96:6c:8f:1a:33:
a8:b4:8e:92:60:8d:de:89:7c:cd:eb:79:3a:ae:2e:
9a:7e:15:2e:94:52:16:30:66:37:6c:ff:75:c7:cc:
1d:8d:80:80:fb:f9:df:cf:7d:ed:6b:10:8c:26:c8:
10:2f:9d:a8:a6:0a:e2:e0:f2:62:34:23:f7:1f:d5:
02:fa:01:7c:75:91:7c:f4:1a:13:71:cc:79:43:6d:
77:ab:d5:5e:76:c1:7c:ab:90:4e:04:2e:de:29:63:
d6:5d:1b:e2:9b:a7:23:20:20:ba:6b:05:ae:43:29:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:BE:6D:28:57:14:BC:39:D7:A4:E7:1D:A9:67:9D:75:9C:85:38
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:65:9f:00:a8:c9:84:9b:a2:37:7b:29:5b:3b:f5:a6:33:aa:
c3:c8:12:96:a8:e0:3c:db:79:49:e1:45:42:d1:b7:ef:4c:81:
02:b8:1e:1a:4d:45:bf:0f:d5:1f:f8:aa:a5:75:34:a6:af:c0:
ed:57:87:12:62:e3:a9:4c:ac:d6:1d:91:f4:9d:e5:a0:b3:b3:
6c:76:12:9d:c2:1f:4c:a3:b7:9a:43:9f:89:92:15:1b:ea:3a:
51:06:97:05:fb:1c:cf:bc:b3:cb:77:94:54:51:61:46:8e:0f:
97:c7:0b:43:0e:f0:6b:de:5b:68:49:e3:88:d1:14:5d:51:a2:
17:b5:2f:73:2b:c6:28:6a:9d:11:4a:28:84:a7:06:d7:ab:5f:
cb:39:93:46:72:34:29:76:27:bf:13:77:c1:53:df:76:72:0d:
32:c0:11:7f:c0:ce:15:0c:8a:0f:47:bd:fa:13:3c:d5:3d:7a:
1f:dc:f8:a7:1f:2a:51:51:ad:00:79:1a:b1:95:20:7d:e7:a8:
e4:f1:60:04:6b:9c:2b:99:55:6a:79:dd:45:f5:3f:37:56:5a:
28:a7:ac:67:7d:5b:34:d0:a9:1b:0d:e4:ce:c1:39:a2:44:59:
d7:c6:d6:36:8d:ad:65:6a:c6:4d:53:39:e7:e4:ec:70:a0:30:
a9:c7:da:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIfoEcnw7ffWzzKMUloywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD
EygzNDA0YmU2ZDI4NTcxNGJjMzlkN2E0ZTcxZGE5Njc5ZDc1OWM4NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw8xrze3YkUn1HAKK6kiOgW6aG9A
JAZvEJj2W+a3R6lnL9po2//7AnId6Ay70f7DLAIUXGuwxJDdC/n1vt+IgF0x8rAn
m3xoFtUu2QjUKQwFoY4uAx3CqoB991xQV052NpyeGET6/IkPXmA4SXZd1ena0GPg
ndpd9vSXE1NZNvav7C+dYEJmBCPqtNMLhmyclmyPGjOotI6SYI3eiXzN63k6ri6a
fhUulFIWMGY3bP91x8wdjYCA+/nfz33taxCMJsgQL52opgri4PJiNCP3H9UC+gF8
dZF89BoTccx5Q213q9VedsF8q5BOBC7eKWPWXRvim6cjICC6awWuQykQtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQEvm0oVxS8Odek5x2pZ511nIU4MB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGWfAKjJ
hJuiN3spWzv1pjOqw8gSlqjgPNt5SeFFQtG370yBArgeGk1Fvw/VH/iqpXU0pq/A
7VeHEmLjqUys1h2R9J3loLOzbHYSncIfTKO3mkOfiZIVG+o6UQaXBfscz7yzy3eU
VFFhRo4Pl8cLQw7wa95baEnjiNEUXVGiF7UvcyvGKGqdEUoohKcG16tfyzmTRnI0
KXYnvxN3wVPfdnINMsARf8DOFQyKD0e9+hM81T16H9z4px8qUVGtAHkasZUgfeeo
5PFgBGucK5lVanndRfU/N1ZaKKesZ31bNNCpGw3kzsE5okRZ18bWNo2tZWrGTVM5
5+TscKAwqcfatQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:25 2026 by rpki-client