This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File: TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier: xThENn4Cod0CPwP6nKr3Uo4UEeNL1Y/WksDm+OdZ/E4=
Subject key identifier: 6A:75:A4:38:F5:C7:08:AA:67:12:33:26:36:E7:B0:B5:37:39:B0:1F
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial: 019BF650DB4E25242048562DE8B3DD9D0B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number: 177D
Signing time: Sun 25 Jan 2026 18:00:52 +0000
Manifest this update: Sun 25 Jan 2026 18:00:52 +0000
Manifest next update: Mon 26 Jan 2026 18:00:52 +0000
Files and hashes: 1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: GMbvHjzs1AEYCMXWDJ54OQbEivc7v2aONNIYGYBtX1c=)
2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:db:4e:25:24:20:48:56:2d:e8:b3:dd:9d:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Validity
Not Before: Jan 25 18:00:52 2026 GMT
Not After : Jan 26 18:00:52 2026 GMT
Subject: CN=6a75a438f5c708aa6712332636e7b0b53739b01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:cb:54:9e:fd:b9:05:f0:fc:95:06:ed:e7:
5d:5c:d3:dd:fb:c8:e4:2c:1b:fa:fd:63:41:d1:0f:
c3:c7:6e:12:61:9e:e2:13:30:ad:d0:dc:4b:46:7e:
6a:63:82:69:23:91:de:fc:7c:0c:98:bb:eb:9d:42:
38:0d:62:9a:d7:fa:70:c0:96:d7:67:2c:9e:cd:2f:
4f:fb:61:16:9a:23:f6:ef:20:a8:69:c3:f9:ef:d5:
7e:e9:8b:ad:b7:2b:67:4d:1c:26:52:d0:42:79:45:
7d:df:f5:7e:83:b6:77:ea:a4:0a:30:ad:31:fb:9e:
6f:a9:bd:c4:ac:20:54:fb:64:61:f7:6f:ce:6c:66:
5c:08:c1:74:42:fd:ff:40:b5:92:c5:a1:ef:ae:9b:
a1:96:a2:db:8e:37:bb:2a:03:74:bf:d1:64:17:e4:
36:ac:76:fc:86:5f:a1:e0:85:56:79:eb:6a:c3:bc:
d2:99:ca:e3:b8:d5:de:74:93:ac:7a:d7:11:79:7f:
f3:69:38:d5:c7:1f:30:a2:74:83:b2:2b:f0:6f:a7:
8f:3e:98:05:bc:0c:30:c7:18:c5:9b:5c:11:2d:38:
76:92:48:ee:bb:fe:aa:1c:a4:a8:d3:99:de:f2:25:
57:ab:10:b1:b6:c4:3b:0f:ff:ea:ba:dc:5b:55:04:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:A4:38:F5:C7:08:AA:67:12:33:26:36:E7:B0:B5:37:39:B0:1F
X509v3 Authority Key Identifier:
keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:ed:f1:ce:0f:c7:48:65:ec:e5:bd:ec:48:40:66:c1:d9:
ad:cc:65:95:30:a5:90:cf:02:f5:f5:c5:8a:12:bb:11:49:90:
81:58:dd:61:f0:ec:09:56:61:c8:07:1e:9f:8c:58:a8:25:81:
1a:a4:33:b6:ab:b3:8c:53:33:8e:0a:36:e4:d7:c6:96:fd:8b:
c5:3a:61:95:43:cb:b2:09:bb:fe:28:d0:7d:af:c8:92:9e:eb:
ba:67:d0:69:4c:f0:d2:0e:af:0b:dd:48:c2:2f:71:44:25:f9:
91:70:5b:3b:d2:a7:63:4d:31:99:c8:36:af:fa:af:e6:54:28:
ea:51:50:e7:6c:35:4f:93:1b:a8:5e:ba:f4:ad:8a:9a:f7:ac:
a1:c8:40:92:de:b0:8e:27:38:d7:4a:cb:8c:37:0b:99:80:bd:
c4:f1:03:5d:79:fa:6c:24:28:e0:6c:b3:96:ee:bb:77:e7:45:
75:56:ce:e8:e4:2f:4f:47:d5:2f:0b:68:9a:ef:83:5f:be:ec:
cb:ee:5d:85:a4:99:9e:bd:de:fb:e8:78:84:8e:60:f8:9b:a4:
0b:1c:70:98:16:db:c6:f0:ab:28:71:cd:86:2a:ca:93:2a:67:
90:cf:4a:00:ca:22:39:13:5d:ea:81:6d:b5:70:11:f2:48:e5:
60:bf:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:32 2026 by rpki-client