This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File: SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier: IQlyCZK1i7PnNGAuj+aRhGnMjGVBJk93xswhRRi1g14=
Subject key identifier: 17:80:48:9A:5B:DD:08:A3:52:66:29:FE:FB:37:41:DF:CD:EB:FA:54
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer: /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial: 019C42B460852269D402EADEC01926D4B743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number: 05CB
Signing time: Mon 09 Feb 2026 14:00:43 +0000
Manifest this update: Mon 09 Feb 2026 14:00:43 +0000
Manifest next update: Tue 10 Feb 2026 14:00:43 +0000
Files and hashes: 1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: UqwsmZPUJOmvL0JoY2drfHj2jlCQa7ai1H8cPXVarHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:60:85:22:69:d4:02:ea:de:c0:19:26:d4:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
Validity
Not Before: Feb 9 14:00:43 2026 GMT
Not After : Feb 10 14:00:43 2026 GMT
Subject: CN=1780489a5bdd08a3526629fefb3741dfcdebfa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:60:79:1a:55:66:17:6a:c4:26:1b:b4:64:
ea:93:c8:2d:da:ed:8a:29:4b:df:1e:dc:99:ab:59:
fa:67:3a:9b:c3:e1:86:9b:27:76:6b:a9:ac:35:23:
de:65:f9:c1:04:12:6d:84:8c:21:35:dd:9c:44:f0:
48:0b:81:00:48:8f:e1:2b:23:40:49:52:e9:24:f6:
5c:8d:30:5b:43:99:1d:4d:b7:6e:36:43:28:ad:86:
fe:13:46:5e:8b:09:ee:e7:9e:4c:83:2e:d1:ce:d4:
f7:ae:bf:bb:37:6f:19:27:d5:24:e2:b4:c9:63:b9:
53:10:aa:b1:6f:7f:8d:61:5c:03:c5:ed:bd:f6:19:
fd:67:9f:7e:a8:01:7a:31:8a:d1:0e:b3:f6:2b:b3:
e5:d7:82:fd:81:0e:9c:28:c1:20:4c:33:e2:d1:2e:
95:6b:4d:13:d6:e7:67:a9:9e:06:e9:48:a9:8b:fc:
67:6b:ef:a1:79:c5:e6:c5:2b:64:a1:02:be:f3:85:
b0:fa:14:78:bc:c1:7b:d2:28:8b:f1:cd:d2:c2:6a:
ff:6c:fb:43:07:e1:d5:55:d7:e5:a3:28:85:0e:ea:
00:f7:dd:7a:64:6c:63:37:4d:fe:e4:04:0a:36:22:
4a:cc:9f:bf:06:ad:e3:2c:8d:9f:fc:99:85:01:16:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:48:9A:5B:DD:08:A3:52:66:29:FE:FB:37:41:DF:CD:EB:FA:54
X509v3 Authority Key Identifier:
keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:93:4d:65:4f:c2:43:46:01:7c:62:1f:40:21:79:32:ba:
9b:32:20:dd:2f:58:04:9e:70:e0:82:47:0a:b5:6a:c2:a2:25:
69:77:b7:63:ce:f8:3f:8e:25:55:5c:9e:67:0b:27:ff:03:0f:
5e:03:76:ee:7b:f6:91:15:40:e2:18:ec:42:c8:87:44:d2:3d:
b4:8b:eb:52:74:00:47:d3:79:ef:b2:ef:77:43:04:d1:90:fc:
76:fa:d0:a6:b4:f9:30:22:58:dd:9d:2c:f8:02:aa:de:15:54:
6e:d0:b7:e8:f1:92:ea:2d:4b:00:6a:e8:a1:03:0d:04:d2:ee:
ef:4b:9e:33:9e:ff:de:0c:ce:9f:70:b0:f7:2e:fc:97:a9:f8:
ed:1b:9e:1f:e8:87:85:10:f4:71:ad:47:7d:86:85:f7:ea:95:
80:b4:64:a4:0a:ea:f5:82:d8:b9:c1:15:4c:3f:97:66:2b:b4:
4e:8f:ea:ed:bd:fb:34:03:6d:a7:da:3e:be:5f:1b:f1:dc:c5:
05:4c:53:e1:8e:be:2e:de:de:37:8d:49:4f:c0:50:bf:b2:c1:
67:f3:dd:b0:27:de:27:a3:9a:f0:1d:f9:41:47:d2:47:46:1e:
13:b7:49:6a:b2:8b:21:c0:e9:36:5a:2b:29:c4:20:79:b8:cc:
ee:bd:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:39 2026 by rpki-client