This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: /GMsohvT7IqNv5YvUIvqkV15mgvucm2Bwl6OXkY20Sg=
Subject key identifier: 35:05:04:8D:72:33:9C:EA:25:79:BA:F8:C7:5E:7B:12:1E:4A:03:60
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 019BF8083D53B71D6A19AC7FA47C0662295A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0ECC
Signing time: Mon 26 Jan 2026 02:00:48 +0000
Manifest this update: Mon 26 Jan 2026 02:00:48 +0000
Manifest next update: Tue 27 Jan 2026 02:00:48 +0000
Files and hashes: 1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
2: 42YWr5OhbKc0Pizwtc2S4hATTvI.roa (hash: DjyBYoPw3TsTXrbKpaqqcR6UDSKAlprPGT2cyckJMMA=)
3: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
4: SBRDFZic25roQ81mZEDjAjCB4bc.roa (hash: jm40+6/CGX7BLaLhAqBs+E2y7gUcW8aW5d0PjhtMnYY=)
5: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: /RiQDd5DOtT2TbfIcHLTIyeRTONbe+b+4vXtbhOeORU=)
6: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:08:3d:53:b7:1d:6a:19:ac:7f:a4:7c:06:62:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Jan 26 02:00:48 2026 GMT
Not After : Jan 27 02:00:48 2026 GMT
Subject: CN=3505048d72339cea2579baf8c75e7b121e4a0360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:a7:05:b1:3e:a9:cb:12:48:18:04:d3:e2:
ea:95:d0:ce:01:38:52:61:3e:8e:dc:ba:01:04:14:
63:fc:c7:b3:ee:08:c6:ea:f6:4a:18:b9:15:ef:ca:
0b:4f:fc:97:7b:ca:1c:07:1c:cd:07:2d:7f:38:37:
c0:cc:6c:44:f4:3c:9d:c7:ab:c7:c2:a4:6d:3a:fc:
a3:71:63:be:db:84:79:d0:cf:c5:ef:24:7c:44:83:
e8:39:44:29:56:79:0d:09:f1:bd:9d:b3:cc:8c:2a:
fb:07:59:36:55:fb:3c:7d:53:ac:c9:85:ce:db:86:
69:d6:84:c2:a7:96:ee:39:3e:c2:e3:3d:58:f9:3f:
69:4a:f5:71:70:6d:c9:d8:0a:af:be:49:ab:8a:59:
48:af:b0:16:29:fa:d7:ee:48:a4:44:37:39:32:cf:
e7:bb:30:60:a5:d0:a6:c2:23:17:db:fb:2c:53:0b:
bd:f7:08:49:5c:3c:b1:d9:cb:c7:74:24:e9:fb:ef:
a3:bd:a4:b0:51:7f:51:0f:4a:53:de:30:c9:56:f4:
7e:ca:4d:62:2e:81:9f:e3:71:01:ef:94:98:c3:d7:
bb:cd:f4:47:06:e4:e8:df:99:de:96:cc:ec:12:5d:
82:41:60:50:8a:33:76:d0:6e:48:a2:8c:49:c8:05:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:04:8D:72:33:9C:EA:25:79:BA:F8:C7:5E:7B:12:1E:4A:03:60
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:7c:2f:29:4a:1d:f9:d6:0b:68:16:5a:97:92:1c:d5:e9:
85:f5:b7:07:1c:8c:d8:88:75:43:03:21:33:01:a2:60:c1:bb:
05:ff:1f:a2:8e:88:f4:b0:c3:c0:3f:00:19:16:57:29:e9:3a:
b4:05:d0:a7:de:80:35:80:c6:47:d5:7c:1c:0d:79:9e:1c:df:
d9:32:87:fa:46:9b:cc:d2:c9:67:e1:fb:64:b9:a2:30:35:c3:
b9:87:77:dd:79:9e:ee:37:23:5b:36:a1:c9:d5:7a:01:62:b4:
9e:b3:ee:2f:2a:36:16:87:e0:00:52:81:05:d3:f1:cd:4d:26:
ce:73:79:0a:ec:8b:cb:4a:73:6a:1a:20:30:0d:ff:45:56:6e:
59:75:9e:03:6e:00:44:21:83:ae:bd:b1:57:99:33:28:dd:0a:
7d:1c:b2:fb:fc:40:df:7b:fa:45:4a:d8:6f:52:64:69:0c:92:
80:60:c3:e2:cb:99:06:e9:5b:fa:45:a9:82:e6:3a:8a:4d:9d:
af:b9:84:07:01:24:c2:70:76:e9:2d:57:14:99:45:35:24:10:
ee:94:9b:db:30:a5:12:d1:63:c0:7e:fb:54:f5:b6:16:92:5a:
81:c8:de:bb:23:f6:a5:2b:90:cd:43:40:36:98:01:c0:bc:f7:
6b:db:f6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CD1Ttx1qGax/pHwGYilaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjYwMTI2MDIwMDQ4WhcNMjYwMTI3MDIwMDQ4WjAzMTEwLwYDVQQD
EygzNTA1MDQ4ZDcyMzM5Y2VhMjU3OWJhZjhjNzVlN2IxMjFlNGEwMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYqnBbE+qcsSSBgE0+LqldDOAThS
YT6O3LoBBBRj/Mez7gjG6vZKGLkV78oLT/yXe8ocBxzNBy1/ODfAzGxE9Dydx6vH
wqRtOvyjcWO+24R50M/F7yR8RIPoOUQpVnkNCfG9nbPMjCr7B1k2Vfs8fVOsyYXO
24Zp1oTCp5buOT7C4z1Y+T9pSvVxcG3J2AqvvkmrillIr7AWKfrX7kikRDc5Ms/n
uzBgpdCmwiMX2/ssUwu99whJXDyx2cvHdCTp+++jvaSwUX9RD0pT3jDJVvR+yk1i
LoGf43EB75SYw9e7zfRHBuTo35nelszsEl2CQWBQijN20G5IooxJyAVBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUFBI1yM5zqJXm6+MdeexIeSgNgMB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfN8LylK
HfnWC2gWWpeSHNXphfW3BxyM2Ih1QwMhMwGiYMG7Bf8foo6I9LDDwD8AGRZXKek6
tAXQp96ANYDGR9V8HA15nhzf2TKH+kabzNLJZ+H7ZLmiMDXDuYd33Xme7jcjWzah
ydV6AWK0nrPuLyo2FofgAFKBBdPxzU0mznN5CuyLy0pzahogMA3/RVZuWXWeA24A
RCGDrr2xV5kzKN0KfRyy+/xA33v6RUrYb1JkaQySgGDD4suZBulb+kWpguY6ik2d
r7mEBwEkwnB26S1XFJlFNSQQ7pSb2zClEtFjwH77VPW2FpJagcjeuyP2pSuQzUNA
NpgBwLz3a9v2lQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:09:03 2026 by rpki-client