This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: 0GH18BV4266k1Cxshv9qxqyDmh8y8gbTS2jwp6/gdpU=
Subject key identifier: 58:02:7C:5A:CD:60:77:54:98:0A:F6:05:80:A5:48:75:02:66:FC:49
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019C00D52D55A4633EA7F794A5F975CEC854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0CA4
Signing time: Tue 27 Jan 2026 19:01:36 +0000
Manifest this update: Tue 27 Jan 2026 19:01:36 +0000
Manifest next update: Wed 28 Jan 2026 19:01:36 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: v9GKOW+0oezaKCHaoWxVuvohyyFT94uQ3+wDCgil8mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:00:d5:2d:55:a4:63:3e:a7:f7:94:a5:f9:75:ce:c8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 27 19:01:36 2026 GMT
Not After : Jan 28 19:01:36 2026 GMT
Subject: CN=58027c5acd607754980af60580a548750266fc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:60:ef:9e:b7:1e:20:4a:0a:fa:5a:99:5a:
19:57:8e:cb:37:aa:ce:b0:68:b0:f6:87:e1:7f:b1:
75:ce:28:b7:e6:74:91:b0:36:ee:33:c0:bd:b4:d7:
05:de:e7:06:c3:0e:71:6c:b9:7d:b7:28:df:ba:4f:
70:be:e7:fa:59:c9:40:ed:1d:c8:3f:10:97:0c:a5:
d8:d7:a6:f9:15:3b:dc:a9:f8:9c:ad:6d:c4:e8:6c:
80:54:a8:88:2d:05:6a:8a:30:a8:47:14:3d:f1:0a:
dd:f3:75:4f:d1:7e:fd:45:ee:67:bf:65:38:d9:9b:
6e:0c:cf:d7:14:b4:cd:19:32:5b:b7:12:20:1d:ca:
85:8e:0f:1c:df:1f:0e:ad:10:85:f6:17:37:b7:bc:
0b:96:7b:78:cf:05:aa:e9:34:90:ad:cb:05:60:c2:
f4:ac:e0:5d:cf:ac:6f:2a:cf:6f:3a:73:ec:94:2a:
61:b7:20:48:86:28:0e:a5:86:be:9e:3e:69:80:59:
ac:d6:1a:e4:14:5b:70:12:26:e9:4d:d1:53:16:58:
ab:ce:cb:b0:7a:f2:e4:a9:d9:74:4b:0c:80:07:1d:
7a:4f:7a:f7:16:de:c9:d6:ed:4e:5d:15:67:9a:6c:
7b:17:4f:d5:54:60:09:11:43:0f:90:76:5a:02:d0:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:7C:5A:CD:60:77:54:98:0A:F6:05:80:A5:48:75:02:66:FC:49
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:cf:ed:e9:58:47:03:26:f8:f5:3b:bc:dc:56:68:37:90:
e0:de:1f:25:ac:3b:c3:4e:5d:f1:e4:03:35:67:85:54:35:2b:
80:39:6a:cf:ac:30:05:44:a8:6b:52:7d:02:12:69:d7:de:69:
d6:69:c7:99:3d:26:ab:ff:16:9a:b6:b8:84:cd:2d:ec:68:20:
01:42:93:d2:92:b9:62:c4:03:fc:3e:10:b2:e6:4d:38:34:fb:
44:0e:7f:e6:c7:b7:f5:bf:2d:78:31:ba:22:e0:82:38:2e:7a:
e5:d9:af:b2:7c:99:d9:22:4b:84:08:27:2c:c6:07:d1:89:9b:
9c:18:7f:52:f1:ce:b9:1e:88:b5:15:ad:8b:cc:d1:c7:2d:aa:
c1:78:5e:c4:bd:dc:15:8c:6d:45:cc:98:d7:a4:2c:0d:ba:52:
6d:cb:05:26:25:a2:e5:c8:d0:b7:77:35:80:3c:e5:ea:22:f0:
8b:7a:52:af:e4:a9:1e:0a:18:cd:25:05:00:29:3d:98:85:36:
21:e6:bd:28:08:de:a6:66:2f:2b:ec:3d:6e:65:7c:ba:a1:fa:
d3:56:98:ae:77:6f:54:b1:67:11:3b:b5:f4:8f:90:69:00:b2:
b1:06:8f:bc:8c:f5:8a:69:6b:36:f3:b2:01:4b:59:46:b8:69:
80:11:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 02:31:44 2026 by rpki-client