This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier: +KnY3xw4vSKJOiJcTN+EPh58QK/YucmHg4kuUWkiSro=
Subject key identifier: 2E:F1:D4:7A:2D:15:BB:51:4B:C9:FB:1D:F5:7E:16:F1:91:5E:04:DB
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 019BFA9B93D63C560947A5A31FC8C9E82F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number: 17F0
Signing time: Mon 26 Jan 2026 14:00:58 +0000
Manifest this update: Mon 26 Jan 2026 14:00:58 +0000
Manifest next update: Tue 27 Jan 2026 14:00:58 +0000
Files and hashes: 1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: O5zelqE39FLg2QES0w5LPNzsE0eHd9KhA6ms+GaR2BQ=)
4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9b:93:d6:3c:56:09:47:a5:a3:1f:c8:c9:e8:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 26 14:00:58 2026 GMT
Not After : Jan 27 14:00:58 2026 GMT
Subject: CN=2ef1d47a2d15bb514bc9fb1df57e16f1915e04db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:f3:0e:b8:bd:b6:04:0d:db:3d:4b:b2:54:
40:f6:d4:e7:79:14:d2:25:0e:f3:67:06:98:df:15:
b6:08:9e:b5:f8:02:a9:1c:53:86:49:0f:c3:81:12:
ab:4a:78:f2:77:02:07:41:78:04:e6:99:69:58:db:
84:d0:2f:e4:96:8e:9c:57:af:8e:97:f3:9a:c2:75:
29:72:8e:13:b6:6e:4a:a5:63:50:63:b6:29:23:86:
9f:6a:78:ab:b4:49:ca:ce:f8:b7:9e:ed:8c:76:a6:
ea:5a:7d:5f:39:6a:5f:24:da:b3:c8:89:4c:d9:41:
4e:3d:b3:00:d9:d2:e1:9b:76:19:0f:b4:37:a4:c4:
9d:49:15:2b:a3:cf:01:23:33:31:3c:4b:29:cf:f3:
7d:f7:b9:46:5a:69:28:65:59:83:8a:61:6f:e4:2e:
27:73:a1:b9:23:8a:b9:66:b5:d5:a5:94:ad:34:1e:
af:7b:52:b8:f7:b1:28:3f:7d:50:e0:c0:42:9d:18:
7c:64:2b:82:8f:70:29:46:16:6f:63:7b:9d:69:7b:
e0:b9:10:ba:be:98:db:25:01:38:2e:88:88:95:52:
b2:5b:0f:86:1f:48:9f:be:a6:c3:05:0b:c9:6c:2d:
a5:3b:0a:f8:a3:5b:19:4c:59:6c:87:48:95:83:4f:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F1:D4:7A:2D:15:BB:51:4B:C9:FB:1D:F5:7E:16:F1:91:5E:04:DB
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ee:f3:8c:a1:d1:36:ef:ff:37:5b:89:1e:4b:9a:0e:89:4f:
6d:45:8f:95:75:cd:cc:6c:95:22:c4:ac:7b:d6:44:fc:22:d9:
19:68:8f:64:00:10:88:7a:8d:d3:f2:9e:78:67:b0:6b:9e:96:
be:bf:de:88:40:45:52:50:da:b6:e4:a3:d2:c8:22:32:e0:25:
35:a7:8a:a3:6b:25:2d:41:4b:ea:1a:e3:b8:ec:39:50:11:fc:
59:bc:cc:11:28:cf:8c:86:a5:24:5c:af:f1:8d:49:39:19:c2:
e3:ca:30:30:68:28:ab:05:1a:de:aa:0a:43:a3:09:b2:29:7b:
f1:63:bc:b4:bb:be:06:94:47:44:c9:42:ba:bc:9e:6d:3a:04:
6a:cb:ef:3f:49:08:7b:47:0f:7f:f5:07:57:d6:78:c1:36:da:
ed:18:47:b7:fa:38:e7:c2:52:ce:bd:27:b5:dc:93:62:c0:9d:
a7:b1:d3:f1:6e:dd:5a:22:46:68:0f:15:14:ec:41:6d:a8:73:
fe:44:0d:bb:62:31:f4:82:50:f3:12:94:2f:ec:11:4c:a1:3c:
9a:50:97:90:25:5e:bd:07:8a:a2:85:2d:e6:57:fe:2c:92:d8:
5a:04:c8:55:de:0a:dd:42:bc:ec:f9:fb:8c:f5:5f:4a:24:58:
df:e6:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:40:24 2026 by rpki-client