This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: OBWUHAz5C2P8otQVgAjwdptSySEooqLfG7OZVLUYGF4=
Subject key identifier: DC:7E:15:B1:7E:AB:96:5E:F4:BF:A8:37:F0:E8:7F:1C:5E:B8:8D:35
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019BF318F7701F25E31D96B0027D59C84B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 03:00:58 +0000
Manifest this update: Sun 25 Jan 2026 03:00:58 +0000
Manifest next update: Mon 26 Jan 2026 03:00:58 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: IBOJwPOAKYblzMGRxeUqLOOLCBkMvZPia7mpjE/eqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:18:f7:70:1f:25:e3:1d:96:b0:02:7d:59:c8:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 25 03:00:58 2026 GMT
Not After : Jan 26 03:00:58 2026 GMT
Subject: CN=dc7e15b17eab965ef4bfa837f0e87f1c5eb88d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:96:82:67:74:70:33:e1:e8:1e:45:8b:c2:
31:70:3f:53:1a:71:bf:f6:f0:11:9f:b7:0b:e1:09:
1b:3b:96:19:06:81:53:fb:d9:ad:61:78:0d:b8:7e:
b6:86:aa:dd:71:4b:35:71:cb:85:6b:76:73:38:33:
0b:3c:97:7d:69:6b:35:bb:1d:66:80:a6:f0:e0:b2:
cb:2d:ed:46:9a:cd:dc:ad:c2:e9:41:e7:8f:21:45:
45:8c:a8:36:56:b4:c1:da:7a:35:9f:1c:27:17:9a:
a4:8b:3d:50:39:cb:08:30:9c:1c:a2:03:7b:e1:e5:
8b:71:97:17:a5:f3:b0:19:64:cb:56:8a:72:d9:17:
d1:80:71:59:9b:70:1f:1f:34:6b:4b:97:5c:aa:04:
73:2b:44:99:de:20:5b:ee:8c:21:56:88:e5:d6:47:
a2:ff:60:c5:c2:55:6a:b0:f9:47:7d:b8:4c:a9:e9:
44:a2:5d:c8:32:9c:20:9a:03:e2:86:16:d2:b3:a3:
0e:0d:3b:4d:0e:7c:ec:ff:8e:3a:78:8d:d6:e2:a0:
f6:77:59:ed:d1:42:59:05:84:02:4b:35:ad:41:ad:
c4:b1:c1:6d:c0:bd:60:19:62:64:96:52:91:16:9b:
78:23:2d:5f:f8:3b:36:ae:db:73:a1:22:58:38:43:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:15:B1:7E:AB:96:5E:F4:BF:A8:37:F0:E8:7F:1C:5E:B8:8D:35
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:81:f1:f6:08:e6:51:98:74:2f:80:b1:c6:9e:3f:45:d8:
76:b4:68:be:c2:67:15:40:1b:1a:55:0d:0d:4c:78:91:13:88:
b7:17:29:a8:14:e1:93:a3:2c:18:70:45:80:2e:d1:39:51:eb:
e9:7b:90:d1:0e:d2:17:e8:ba:5f:e8:e6:c1:b3:e7:44:bf:04:
94:e1:28:d4:d1:e4:e5:9f:4c:3d:cf:50:89:bf:14:0d:05:fa:
34:40:c9:99:b2:6b:b1:13:f6:77:b4:9f:d1:9b:de:37:a7:d1:
82:d5:44:08:5c:bf:3f:9f:71:76:52:c0:05:84:09:e1:00:91:
52:10:77:94:fa:9c:de:b4:99:ad:0b:ab:07:53:56:e4:3c:64:
81:85:b3:4e:33:64:68:9e:13:31:48:ca:5f:c7:73:93:6a:e6:
0d:8e:dd:06:5e:34:41:5a:84:c2:6f:86:dc:f6:01:95:a4:fc:
47:b9:0a:11:5f:3a:c7:21:21:d8:5e:a4:0f:c6:46:84:bb:46:
5d:4e:53:2a:73:73:e9:ee:bb:e0:c5:d2:5a:74:53:fa:5a:f8:
d9:27:a0:d7:bc:4a:c6:cc:dc:ce:d0:7c:ac:52:09:66:a1:46:
36:e2:c2:19:fc:e9:02:fb:19:7a:33:08:0e:50:8d:05:c4:b8:
23:4c:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:58:43 2026 by rpki-client