This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: IQNdJv4TGMrt9Fxe6O50r039KaBBu1LJKVDrXqT0IDA=
Subject key identifier: 70:13:37:B2:03:C9:F0:54:52:8E:70:04:68:FD:9F:00:DB:33:77:25
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019C4322A5EECC38F6BF8BA95D33E4CA1BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 1107
Signing time: Mon 09 Feb 2026 16:01:09 +0000
Manifest this update: Mon 09 Feb 2026 16:01:09 +0000
Manifest next update: Tue 10 Feb 2026 16:01:09 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: HCGVeayMcv1qSazxr8a+K3farA9LxL8HAEsndwLqbec=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:a5:ee:cc:38:f6:bf:8b:a9:5d:33:e4:ca:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Feb 9 16:01:09 2026 GMT
Not After : Feb 10 16:01:09 2026 GMT
Subject: CN=701337b203c9f054528e700468fd9f00db337725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:b3:22:90:18:d7:ef:e0:83:1f:bc:03:ec:
b7:6d:d1:82:d9:12:50:a7:cb:8c:73:9b:77:d0:fe:
d2:73:1b:38:af:f2:68:08:15:e0:ea:10:ba:d6:a7:
8d:47:78:d6:5c:a9:3f:00:ed:bf:2f:97:11:29:1a:
d7:d7:a8:24:f0:15:2f:a8:28:d9:86:01:6f:b3:a6:
46:43:6a:b0:69:0e:58:a6:6d:33:b2:e9:f8:e3:1c:
82:75:98:e6:a3:8d:c1:d1:7b:ca:2a:83:32:08:0c:
2f:82:2c:bf:46:93:85:68:21:6a:6a:f1:0a:a5:45:
cc:bc:43:54:25:0d:dc:14:f5:d5:a1:6c:94:80:99:
50:db:75:b4:46:f9:a7:00:c1:4d:06:5f:c8:b1:62:
50:77:6e:56:bf:b0:a8:79:f0:a9:67:07:08:5d:a9:
47:ed:f3:21:fd:be:b2:05:da:fe:be:f3:45:df:f3:
ea:d0:2b:68:cc:5b:a5:9c:4e:01:f8:a9:7d:c2:f4:
c5:f2:6b:e2:58:f1:66:35:00:6b:a5:12:a4:6e:a8:
1c:f2:45:64:51:69:30:00:a4:a7:08:0a:cd:2c:39:
da:94:db:5a:55:b0:70:fd:f9:a2:c2:5d:7b:e9:44:
d3:c8:2b:a4:f7:2a:4b:6f:21:bd:ba:4f:47:be:f1:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:37:B2:03:C9:F0:54:52:8E:70:04:68:FD:9F:00:DB:33:77:25
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6f:c0:16:48:99:ae:3c:32:ef:d7:64:d3:50:42:c8:6b:a3:
ec:a5:2c:3a:1c:b8:50:f5:be:be:5d:c7:c9:fe:09:03:19:1e:
7c:ea:11:92:7a:62:2c:68:83:1b:5b:98:cc:3e:f5:e3:92:76:
af:d8:85:68:2c:9f:56:4b:27:76:62:2e:db:91:b0:37:56:51:
a1:b0:61:82:ca:2a:f9:82:81:c5:ee:6e:8d:c7:b1:d6:f0:d7:
ca:7e:c2:97:25:48:b4:b5:5b:e0:1a:dd:be:fb:ec:1b:f4:b0:
a5:ff:35:1c:87:4c:5b:e8:13:63:33:3c:38:9e:a2:73:e0:63:
0d:70:7b:3d:af:0e:88:a6:8e:0a:7f:9e:3b:bc:2a:a4:3c:7d:
8d:1d:7b:65:0e:14:4d:99:8e:56:5c:4b:fc:85:6a:df:30:6c:
b0:1e:3c:d0:d6:bb:d7:5e:71:c1:2d:dd:93:e7:78:5a:13:5a:
02:42:d6:cc:bd:1f:bf:0b:a9:0e:10:b3:3f:f5:b6:ea:b2:df:
4c:b3:94:4d:9e:5c:46:dc:b3:7f:90:c7:12:78:aa:90:37:e1:
74:3a:2e:84:89:32:1c:84:25:31:dd:a9:45:13:4c:dc:da:d3:
44:53:94:66:c6:68:37:dd:19:7d:dc:f3:8e:1a:c1:34:d4:f5:
b3:9b:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:35 2026 by rpki-client