This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: 4JfW1QFCfTdUvn/VaOVp6BizMbg92UHDhIoSM/Vm6hs=
Subject key identifier: 88:14:0D:3E:1E:A8:AF:B4:92:73:33:8E:7C:1C:A5:D7:1F:84:68:53
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019C43904049F2B8ABAEBF00FF716C11DB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0FF2
Signing time: Mon 09 Feb 2026 18:00:52 +0000
Manifest this update: Mon 09 Feb 2026 18:00:52 +0000
Manifest next update: Tue 10 Feb 2026 18:00:52 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: 5ltOG0cvju2TcF/We0Z5ixqJLG4YwW7A3I5+MUhpy2g=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:40:49:f2:b8:ab:ae:bf:00:ff:71:6c:11:db:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Feb 9 18:00:52 2026 GMT
Not After : Feb 10 18:00:52 2026 GMT
Subject: CN=88140d3e1ea8afb49273338e7c1ca5d71f846853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:9b:79:ab:99:ec:bd:5d:0d:ed:09:0a:c7:
00:b2:65:57:d3:c0:ff:95:40:cc:8d:bf:4f:e2:9b:
de:86:7a:86:2d:f8:61:b9:79:a9:18:53:7e:f9:1d:
23:17:59:39:75:1c:dd:5f:56:79:54:31:66:54:67:
fc:2c:05:52:fb:2b:ff:67:83:53:9d:bb:8d:61:e2:
00:bb:10:bb:31:fd:9e:4e:94:ce:e0:d8:96:e5:f2:
b4:34:b9:0d:2e:80:0d:57:72:22:ac:e8:48:0e:5c:
df:15:e8:d9:2e:73:95:19:b6:b4:19:1d:ff:93:17:
8e:86:a3:6d:2f:40:d7:89:84:23:2e:85:34:39:d5:
1c:46:59:0d:af:a0:30:2b:39:fd:3c:32:8e:41:b4:
26:90:9e:95:39:d5:b5:db:7b:c0:89:3e:85:de:f0:
b7:4a:50:dc:20:89:49:ed:55:9a:96:80:48:20:0e:
16:fc:2b:06:dd:4c:bd:8d:6a:5d:49:6e:22:64:62:
21:88:b6:cb:06:dd:f9:7f:29:54:85:a9:be:65:b9:
dc:7e:db:19:d7:91:20:f3:95:5c:56:44:a9:e3:66:
c0:97:55:7c:cd:8c:64:cc:1e:e7:4b:12:fa:ef:1b:
cf:10:69:b5:e2:64:82:e9:bc:4a:35:a7:34:4c:b0:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:0D:3E:1E:A8:AF:B4:92:73:33:8E:7C:1C:A5:D7:1F:84:68:53
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3c:13:a3:3b:29:43:72:98:07:47:63:c9:42:f6:98:94:be:
17:2f:e8:47:24:e0:db:88:05:26:bf:95:1a:f4:a4:ba:63:94:
fe:f9:e6:33:0b:08:f4:c3:05:f7:88:61:fd:86:c6:7c:9c:26:
03:3a:1e:6b:94:1f:97:aa:f6:96:c1:c8:f3:63:7d:04:a9:7f:
78:da:82:a4:52:85:31:32:46:db:68:24:f0:b5:22:ad:11:7a:
f6:3f:da:c3:ff:2a:a7:77:de:1c:e8:e1:83:b1:12:f5:78:9d:
67:39:e8:46:ec:94:41:56:77:c2:db:85:c7:ed:01:58:64:cc:
78:8d:3a:37:7e:a8:ac:48:dd:90:c9:6a:9e:53:74:8d:6c:be:
c6:d6:e1:5a:49:0a:ad:6a:ab:48:e0:56:cd:29:bb:65:49:4a:
a7:90:e1:e3:41:35:9f:a1:48:3d:4b:58:8a:66:4b:e8:6b:a1:
9b:c9:83:2c:5b:8f:4e:f4:5f:8a:d4:ad:99:c5:72:c8:68:9d:
ab:c1:0e:e4:78:54:c8:51:4a:b3:c6:f9:ea:1c:c0:43:28:27:
50:47:b9:34:97:50:88:78:61:b4:62:b2:7b:b3:c6:0a:d5:3e:
b6:b3:4a:06:bf:80:b0:0c:ab:49:13:f9:31:19:8a:1e:d0:d2:
ef:5a:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:29 2026 by rpki-client