This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: /1efb/nS+TnCPtm3sTCk2GZ88CIaM4gyYoIDzu77gig=
Subject key identifier: 1D:32:6F:0C:EC:0D:EF:4E:6E:AC:3A:93:19:2B:D3:AB:1E:1B:C7:4E
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 019BF5AC0FD4029C6BC9AB37582B8EEB3A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 13C9
Signing time: Sun 25 Jan 2026 15:00:52 +0000
Manifest this update: Sun 25 Jan 2026 15:00:52 +0000
Manifest next update: Mon 26 Jan 2026 15:00:52 +0000
Files and hashes: 1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: V/cpu+CGBrf0D3Q8lnNUePFa1ynEp1AdCPa39CQPzZ4=)
3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:0f:d4:02:9c:6b:c9:ab:37:58:2b:8e:eb:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Jan 25 15:00:52 2026 GMT
Not After : Jan 26 15:00:52 2026 GMT
Subject: CN=1d326f0cec0def4e6eac3a93192bd3ab1e1bc74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:66:c3:78:f0:6b:b8:c3:6f:4f:d2:4a:3e:
1b:e4:2f:3f:d0:d5:e6:97:d4:56:cc:b1:74:10:ce:
56:c3:55:a7:ca:70:bf:fb:c4:40:a3:f9:cb:1f:59:
28:ac:41:94:4c:1e:41:18:86:e8:a5:cf:f0:ba:db:
90:c9:bf:d8:1a:d9:44:d0:54:96:96:df:6c:12:c3:
48:5b:25:8c:e9:74:27:6b:2f:db:a6:4a:ee:62:d4:
3c:10:ef:53:26:93:86:a0:c8:db:a5:c6:06:a1:9d:
00:04:d5:dc:3f:7a:57:c3:ff:f0:f2:e0:60:a1:15:
ac:7e:aa:ed:59:c0:a9:4d:57:15:37:9a:08:e1:2b:
88:95:da:2b:2c:79:84:a9:e8:87:7d:39:2e:85:20:
ff:aa:71:3f:bf:9a:7d:aa:98:c9:8d:63:30:2f:4c:
ac:8f:27:6e:40:8a:95:ed:60:0e:db:e8:0d:62:f9:
5b:4c:b8:71:16:7a:55:5c:e2:ff:81:27:88:1c:86:
34:9e:26:18:8f:99:ca:b2:95:cd:e6:51:57:d6:ab:
8f:37:2e:33:35:63:50:a4:67:95:a2:7c:02:ee:4c:
71:f3:47:71:af:60:c8:8b:0c:6b:d3:3f:16:67:95:
c5:6c:06:7c:bf:d9:9d:fb:41:09:bc:d7:4a:9e:5c:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:6F:0C:EC:0D:EF:4E:6E:AC:3A:93:19:2B:D3:AB:1E:1B:C7:4E
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e0:0a:43:8b:2f:77:79:04:99:18:d7:79:ab:88:7e:99:19:
59:94:07:20:ef:af:d5:ea:e2:6f:88:c7:17:a9:6f:41:67:7a:
b7:81:df:ea:71:58:df:88:54:d2:f5:7a:ee:d0:fd:c1:04:12:
dd:a1:fa:85:44:64:27:28:d3:8d:ab:37:9a:12:fe:8c:fd:a4:
2a:fa:45:c3:43:eb:2f:09:fb:b6:82:7e:8c:2b:e4:6f:58:ec:
17:1c:46:76:45:e4:17:32:4f:50:94:65:ec:52:df:80:35:5b:
8b:d4:5c:7c:2f:83:d8:52:4f:70:d9:db:d4:e9:bc:39:91:63:
dd:79:33:c8:d3:af:d0:bc:9e:af:17:0b:e1:a4:7d:68:8c:a2:
a6:27:13:51:77:f4:4f:b1:91:be:ab:6b:93:a8:65:6b:22:3e:
1d:07:40:e1:72:84:3e:55:ff:52:10:bb:83:4a:5f:47:d8:41:
87:a8:82:78:88:f1:0a:a1:3c:fe:11:71:b1:37:03:c8:f1:96:
58:8c:db:44:f2:12:07:8a:01:15:53:29:f2:e1:6f:16:55:dd:
3f:53:d9:de:a0:21:87:38:7a:ae:8b:8f:e3:a7:c2:c2:5c:56:
d5:4b:3b:2c:21:9f:b0:fd:98:9c:2d:5e:5f:21:96:8d:5c:10:
03:54:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:22:37 2026 by rpki-client