This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: DRRplB2kVtgVnEKPJ93z7PVCbzGR7hDB6HqSyE4rI38=
Subject key identifier: 75:33:49:E2:23:18:6B:97:A9:FE:00:6A:BC:F6:46:C7:C9:25:9C:8E
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019BF9F6DF298F62A9ECA3D85FBBE1AA976A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 01CD
Signing time: Mon 26 Jan 2026 11:01:04 +0000
Manifest this update: Mon 26 Jan 2026 11:01:04 +0000
Manifest next update: Tue 27 Jan 2026 11:01:04 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: rY1/Elqt5C3ACo61Wv51cWmzoSBk2hbayTiJe2dJIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:f6:df:29:8f:62:a9:ec:a3:d8:5f:bb:e1:aa:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Jan 26 11:01:04 2026 GMT
Not After : Jan 27 11:01:04 2026 GMT
Subject: CN=753349e223186b97a9fe006abcf646c7c9259c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:87:2d:1b:c8:20:e8:c5:a6:39:4c:69:2c:
82:31:52:e9:f5:6f:1a:71:ad:c9:13:c9:ac:39:c0:
5a:ee:18:4a:15:0f:02:68:76:8b:bd:5a:8d:de:29:
e8:fa:86:f0:ba:b9:4e:69:a7:28:a3:dd:ed:73:5f:
ce:4a:20:26:6d:a0:55:66:bb:f3:72:78:c5:78:8d:
77:1b:9c:f0:f3:c8:3f:dd:18:09:02:20:1c:7c:b7:
11:ae:3a:52:8b:60:e4:b1:74:a1:ad:c6:c7:6e:98:
c8:4a:84:a9:e0:64:9c:fa:f5:a3:52:d1:b7:5e:dd:
b6:bc:54:c9:f8:8b:30:56:0f:fb:b3:0a:37:43:e2:
a3:1c:9d:7b:c9:23:a8:1a:00:7c:2b:c1:a7:47:36:
fd:1e:86:5d:52:c9:5d:46:1b:fa:5a:64:f5:d9:63:
ad:f7:02:17:d4:f2:30:98:56:11:2d:82:2b:8a:18:
3f:3c:9b:1d:65:fb:74:94:e1:e0:6a:48:e4:14:fd:
b0:ab:c1:ff:02:dc:00:1a:ff:7d:b1:61:e6:9a:07:
4f:bf:45:55:8e:98:f8:3c:96:85:f3:94:30:49:5a:
ae:de:18:2a:27:b1:14:84:6e:b2:e2:3b:47:e0:1f:
c6:9b:1c:13:92:5c:06:0a:a1:8a:92:c0:ba:f2:d6:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:49:E2:23:18:6B:97:A9:FE:00:6A:BC:F6:46:C7:C9:25:9C:8E
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f2:11:5b:10:54:23:e1:ad:5e:35:9f:1b:ad:d1:21:ec:6a:
ce:1b:33:00:78:b1:3a:37:31:74:99:0c:cd:03:82:f7:22:e6:
b3:44:6c:a1:5e:9e:a5:2b:e2:63:5d:4f:6f:ba:10:ba:10:6e:
d3:b5:60:6f:a9:ec:e1:7c:28:c0:6d:e5:01:d9:6a:25:f1:bf:
6e:29:0a:29:d7:15:fd:f1:b6:23:5d:db:7c:29:6e:18:55:9d:
21:ab:9f:b3:f7:d4:89:17:e9:0b:78:e9:e9:ff:b7:29:36:ac:
fa:1d:b6:c4:b6:8a:2c:a8:4f:2f:6e:b4:c2:3a:27:14:d4:fb:
61:ad:de:1c:8e:6a:5b:a0:a5:cb:f1:47:34:0d:1d:fe:06:0e:
39:61:44:81:a5:83:3e:b6:40:c9:f7:f1:9e:fc:a1:39:44:97:
ca:14:1b:4c:10:02:89:8e:8d:08:c1:51:8c:d0:63:a6:5e:ff:
3f:a7:ce:a3:d9:67:ce:d2:79:55:0f:79:63:9c:dc:84:e7:f2:
72:a7:5e:f2:5b:e9:26:8f:78:fa:4c:04:52:b4:20:4e:34:b7:
11:72:61:da:00:d2:b6:1d:80:5d:3e:21:d0:dd:26:a6:4e:5a:
d3:5f:da:59:9a:13:a7:6f:ae:ff:2b:9b:06:09:cd:61:ad:ff:
07:ee:7b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv59t8pj2Kp7KPYX7vhqpdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjYwMTI2MTEwMTA0WhcNMjYwMTI3MTEwMTA0WjAzMTEwLwYDVQQD
Eyg3NTMzNDllMjIzMTg2Yjk3YTlmZTAwNmFiY2Y2NDZjN2M5MjU5YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2amHLRvIIOjFpjlMaSyCMVLp9W8a
ca3JE8msOcBa7hhKFQ8CaHaLvVqN3ino+obwurlOaacoo93tc1/OSiAmbaBVZrvz
cnjFeI13G5zw88g/3RgJAiAcfLcRrjpSi2DksXShrcbHbpjISoSp4GSc+vWjUtG3
Xt22vFTJ+IswVg/7swo3Q+KjHJ17ySOoGgB8K8GnRzb9HoZdUsldRhv6WmT12WOt
9wIX1PIwmFYRLYIrihg/PJsdZft0lOHgakjkFP2wq8H/AtwAGv99sWHmmgdPv0VV
jpj4PJaF85QwSVqu3hgqJ7EUhG6y4jtH4B/GmxwTklwGCqGKksC68tbUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUzSeIjGGuXqf4Aarz2RsfJJZyOMB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPIRWxBU
I+GtXjWfG63RIexqzhszAHixOjcxdJkMzQOC9yLms0RsoV6epSviY11Pb7oQuhBu
07Vgb6ns4XwowG3lAdlqJfG/bikKKdcV/fG2I13bfCluGFWdIaufs/fUiRfpC3jp
6f+3KTas+h22xLaKLKhPL260wjonFNT7Ya3eHI5qW6Cly/FHNA0d/gYOOWFEgaWD
PrZAyffxnvyhOUSXyhQbTBACiY6NCMFRjNBjpl7/P6fOo9lnztJ5VQ95Y5zchOfy
cqde8lvpJo94+kwEUrQgTjS3EXJh2gDSth2AXT4h0N0mpk5a01/aWZoTp2+u/yub
BgnNYa3/B+57Tw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 13:06:17 2026 by rpki-client