This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: 5l1AJfg8EUzxZZHC4Y9EZKdVs66SEkysjbxGoYjguns=
Subject key identifier: 76:43:8A:7A:0B:9D:C0:AD:CE:68:E5:35:E1:26:76:D6:72:B3:24:2A
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019BF2E2A8614CEE43FF53CB1C84B064D935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 17E7
Signing time: Sun 25 Jan 2026 02:01:39 +0000
Manifest this update: Sun 25 Jan 2026 02:01:39 +0000
Manifest next update: Mon 26 Jan 2026 02:01:39 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: Ui01q/K8lXlPUiXTXMYSptqYQ0kZWmdSXdeApGbM/PM=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:a8:61:4c:ee:43:ff:53:cb:1c:84:b0:64:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 25 02:01:39 2026 GMT
Not After : Jan 26 02:01:39 2026 GMT
Subject: CN=76438a7a0b9dc0adce68e535e12676d672b3242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:5d:a5:f1:ec:f3:9d:74:94:a4:ae:79:53:
4a:96:15:82:81:8c:ef:77:9f:f9:a4:d0:a0:53:f7:
9d:25:b1:5c:63:fa:cf:e7:ec:5d:f9:38:4b:44:67:
aa:32:11:96:a7:c4:e3:53:87:ac:d4:c4:15:3d:b6:
11:6e:48:1c:a8:cc:1d:1d:03:64:5d:1a:87:d1:4b:
f4:16:76:8d:d2:f6:f3:ff:1e:89:78:9f:7d:45:fc:
3c:8d:53:79:0d:45:35:34:75:67:25:31:cb:7c:fa:
bd:74:d2:c5:5a:27:30:a4:77:aa:15:d0:60:a7:1b:
7d:3d:0b:43:49:05:2d:6b:f7:09:95:16:2a:1e:eb:
48:ae:d3:f0:c2:86:2b:de:67:34:fb:a1:ed:38:6b:
fd:21:0d:89:e8:83:78:18:21:52:d8:1c:1f:47:02:
c1:5a:c4:e7:b1:19:12:f9:7f:81:72:4f:c4:2a:f1:
96:ba:9e:45:a9:56:61:94:6d:ab:4c:38:42:c0:6e:
2d:3c:5e:3e:ee:70:7c:73:f7:a5:0b:fa:ea:b3:6b:
6f:1d:56:0f:ae:34:76:ec:cd:29:89:f9:67:f2:55:
6c:8f:1d:d8:64:08:23:f5:b9:d3:b2:e5:1a:d3:c9:
bf:9d:c2:1d:58:25:3b:7b:12:52:22:ba:8f:c4:c8:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:43:8A:7A:0B:9D:C0:AD:CE:68:E5:35:E1:26:76:D6:72:B3:24:2A
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:50:26:c6:8a:7e:98:78:b1:03:ab:cd:ef:39:df:04:31:
31:88:d8:ff:9e:f2:07:bc:b6:e7:2f:b9:ec:1f:24:a7:04:54:
2a:36:41:7a:bb:91:cd:3b:78:1b:87:52:ba:10:1a:34:eb:14:
78:a4:f5:99:c9:3a:5d:0a:fe:1c:52:71:e3:c5:95:51:ee:58:
12:30:04:e1:8b:42:dc:98:a9:18:19:bc:81:60:c7:bb:e6:02:
c3:91:af:44:c8:b6:ff:4c:3f:5f:46:99:4a:08:a4:62:38:ee:
30:16:36:e8:a4:d5:b7:29:c5:4d:be:72:3f:92:6f:2f:d2:f3:
e8:48:cc:bc:3f:a9:57:5e:3c:49:61:2f:1e:03:25:de:e3:d0:
49:13:6e:1b:57:d1:05:61:cd:9d:31:71:49:fc:c0:c8:4a:6c:
00:47:88:4d:9e:5a:6b:33:d9:bb:55:47:03:52:fa:f0:1f:12:
ff:6b:3f:ea:af:23:38:73:7f:d0:fd:d4:ef:6a:9d:d0:ac:ed:
b2:bf:4a:c7:db:75:f8:7f:ea:c6:cb:8e:0e:9b:b0:36:b4:4b:
a5:15:88:db:0e:09:6a:65:64:93:56:c5:31:e0:40:75:99:f5:
df:78:3e:c1:8e:8e:a8:92:e0:fb:08:ef:cf:0b:19:61:17:34:
f0:03:dd:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4qhhTO5D/1PLHISwZNk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2
Nzg1NDYwHhcNMjYwMTI1MDIwMTM5WhcNMjYwMTI2MDIwMTM5WjAzMTEwLwYDVQQD
Eyg3NjQzOGE3YTBiOWRjMGFkY2U2OGU1MzVlMTI2NzZkNjcyYjMyNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXhdpfHs8510lKSueVNKlhWCgYzv
d5/5pNCgU/edJbFcY/rP5+xd+ThLRGeqMhGWp8TjU4es1MQVPbYRbkgcqMwdHQNk
XRqH0Uv0FnaN0vbz/x6JeJ99Rfw8jVN5DUU1NHVnJTHLfPq9dNLFWicwpHeqFdBg
pxt9PQtDSQUta/cJlRYqHutIrtPwwoYr3mc0+6HtOGv9IQ2J6IN4GCFS2BwfRwLB
WsTnsRkS+X+Bck/EKvGWup5FqVZhlG2rTDhCwG4tPF4+7nB8c/elC/rqs2tvHVYP
rjR27M0pifln8lVsjx3YZAgj9bnTsuUa08m/ncIdWCU7exJSIrqPxMhdmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZDinoLncCtzmjlNeEmdtZysyQqMB8GA1UdIwQY
MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt
MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw
LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0NQJsaK
fph4sQOrze853wQxMYjY/57yB7y25y+57B8kpwRUKjZBeruRzTt4G4dSuhAaNOsU
eKT1mck6XQr+HFJx48WVUe5YEjAE4YtC3JipGBm8gWDHu+YCw5GvRMi2/0w/X0aZ
SgikYjjuMBY26KTVtynFTb5yP5JvL9Lz6EjMvD+pV148SWEvHgMl3uPQSRNuG1fR
BWHNnTFxSfzAyEpsAEeITZ5aazPZu1VHA1L68B8S/2s/6q8jOHN/0P3U72qd0Kzt
sr9Kx9t1+H/qxsuODpuwNrRLpRWI2w4JamVkk1bFMeBAdZn133g+wY6OqJLg+wjv
zwsZYRc08APdqw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:13:48 2026 by rpki-client