This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File: Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier: wKcrwD4dbXahzKJBgZWH4oacB6H8P96dSfzhnhvF9DA=
Subject key identifier: F4:95:16:BE:A6:1A:6B:90:CB:DA:81:ED:83:D3:C5:A3:76:FE:09:76
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019BF6F58863FE820004BFBCA38357D7CEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number: 17FE
Signing time: Sun 25 Jan 2026 21:00:44 +0000
Manifest this update: Sun 25 Jan 2026 21:00:44 +0000
Manifest next update: Mon 26 Jan 2026 21:00:44 +0000
Files and hashes: 1: 3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa (hash: +n8cfnczvffDxczQzCZSc5S0iS+H58G3zef9yb8kOjI=)
2: Dpgo4cDU1mscMX_CBOiypw89lis.roa (hash: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo=)
3: Fphh8r1eCoKfj34xf9qomkf3wiQ.roa (hash: kT8k4bJet91D4p4C9K+F18fRKc/kTtWP1eAEzsSVixY=)
4: TnEVtd_feb3wLnGx0zhpDVlsdLo.roa (hash: 12X/x/nT6odb0gI2KEmUSYfcKY0KPCIKcIJZCeogYHQ=)
5: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: VXDmLYZRV4+PATHc6Jxowr4LxayWYVcsqqLIuSWtMWE=)
6: xsiB3z_ZUNuT9LADFwk2oVftHEQ.asa (hash: nzOu1LkWctsvsqnZutP1IKQ9rVw9QiUwIrmmVgJRers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:88:63:fe:82:00:04:bf:bc:a3:83:57:d7:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Jan 25 21:00:44 2026 GMT
Not After : Jan 26 21:00:44 2026 GMT
Subject: CN=f49516bea61a6b90cbda81ed83d3c5a376fe0976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:d0:c7:65:0e:57:09:60:96:13:2d:93:c4:
b8:70:e9:ac:46:7e:6e:a0:f3:19:fb:bb:89:e5:29:
eb:c6:8f:a9:c9:d8:1d:42:3c:dc:a9:1a:12:74:e1:
f0:02:13:01:f9:12:a3:fc:67:2f:f3:58:1e:98:6f:
fe:db:1f:52:41:8d:58:11:ab:82:8b:2b:58:fd:33:
ef:28:ef:79:14:63:c2:af:c2:96:c5:65:7e:83:d2:
76:41:1b:94:fe:65:53:39:64:9b:89:2f:36:ad:68:
80:3e:0f:76:fe:55:76:b2:70:8b:78:4c:f4:8a:0e:
83:5c:c3:bf:e0:75:b3:d3:4f:13:54:77:69:6c:99:
f0:48:99:c2:6e:61:48:ea:bd:5d:2b:b0:78:71:88:
1b:4a:cd:a1:74:ab:2b:26:c0:c5:29:ec:bd:64:50:
40:55:f4:5a:1d:b0:a6:03:ae:af:60:ba:74:6c:73:
c5:48:8f:e4:60:42:c1:73:69:fe:a4:70:dd:22:ef:
34:df:d6:0c:82:f8:62:12:c3:22:90:1b:b2:ea:31:
f7:1c:bb:e7:63:d1:df:55:35:85:d4:24:2a:7d:8a:
a6:22:6a:aa:68:d5:11:27:40:2a:64:6e:1f:53:bc:
7c:8b:db:06:9f:13:15:e7:8a:a2:62:e7:ca:54:c0:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:16:BE:A6:1A:6B:90:CB:DA:81:ED:83:D3:C5:A3:76:FE:09:76
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:ee:08:5f:63:e1:fd:7a:10:fa:d0:68:ac:c5:bf:69:82:
7c:eb:26:48:83:22:d8:f6:c5:ed:1f:88:3f:8b:03:3b:f5:e2:
a7:92:d3:12:b6:fa:38:58:64:03:60:4d:1b:f7:4d:e8:d1:79:
eb:4a:5b:38:ab:52:1b:23:85:c1:1e:16:50:cd:75:8d:87:93:
49:9c:c9:51:48:1a:bd:f4:38:5e:2a:e7:0d:aa:e0:a7:97:f4:
0c:ae:f2:8d:a6:e0:19:49:9b:eb:da:75:c4:7b:8f:d1:ea:4d:
42:a0:24:7f:b8:a2:ca:45:08:00:f3:b3:3c:0d:3e:3c:95:a0:
be:01:5a:05:fc:f6:85:c5:61:ea:08:81:24:59:36:f8:a3:65:
19:bf:52:87:01:52:10:dd:24:b9:45:48:fe:cf:e4:62:6d:6b:
19:79:93:94:49:22:e7:00:d7:87:5c:9a:4c:35:16:f5:c0:3d:
07:0f:3e:55:1a:46:48:37:c4:84:d6:d5:05:cb:47:c2:06:87:
8b:af:cb:8f:62:36:e8:01:ab:22:48:ea:d8:8f:2d:5b:55:ca:
96:06:35:7f:fd:e1:9d:45:a3:8d:57:c8:e2:83:c3:69:5b:f9:
3b:77:e8:a0:2c:64:e4:15:cf:22:5a:c6:9c:2d:80:6c:f8:80:
fd:ee:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:13 2026 by rpki-client