This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: prOtY1Ar6x73qzi8i6yxH6T+40vh09e5+sCbT9pGvhc=
Subject key identifier: C2:D0:99:48:CA:A6:C5:A1:7B:AA:85:46:4A:D0:C0:BA:2C:C8:30:99
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019C4210363593CEE52492AB7CD121BA9075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 11:01:24 +0000
Manifest this update: Mon 09 Feb 2026 11:01:24 +0000
Manifest next update: Tue 10 Feb 2026 11:01:24 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: zJb9CP1zCWE9LddB3/deOG1rs+CbvIpY36jErMnT70w=)
2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:36:35:93:ce:e5:24:92:ab:7c:d1:21:ba:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Feb 9 11:01:24 2026 GMT
Not After : Feb 10 11:01:24 2026 GMT
Subject: CN=c2d09948caa6c5a17baa85464ad0c0ba2cc83099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:26:42:96:02:2a:79:c2:a9:35:54:b3:52:67:
76:37:cd:88:af:63:08:d7:b2:c4:02:82:87:50:cb:
a6:1f:13:2a:7a:2d:22:7f:4b:ff:10:d7:df:13:e7:
b3:9c:aa:fe:9b:f7:1a:55:a3:71:a9:91:9c:1d:3e:
ea:c9:b6:d3:0c:20:78:e4:db:3c:d0:cd:90:ea:68:
01:23:44:4f:55:84:52:e2:8e:04:5b:ba:59:de:fc:
46:f9:24:17:14:2e:4f:3f:41:4d:6c:bf:86:b0:73:
b3:a8:61:59:58:fe:87:4f:98:74:a6:7f:92:63:60:
70:60:82:32:51:36:9b:41:b5:eb:3e:b9:5a:4d:0d:
6c:33:66:1d:c7:a1:5a:4b:f7:23:5f:fe:5f:e2:7e:
2d:43:d8:29:9a:48:42:38:85:04:09:b8:6e:1c:41:
fe:36:1a:88:7a:50:ff:5d:86:4b:c4:73:35:ba:27:
53:a7:a5:50:dd:ae:71:7a:6c:f9:1d:b8:23:13:f2:
35:e3:df:9b:28:c4:10:ee:91:29:76:91:22:1a:97:
ee:1f:39:19:35:4a:68:b1:37:5d:94:77:dd:c1:1f:
e8:f1:36:f2:9d:21:e8:14:46:bd:b0:d1:7a:e4:3c:
42:58:95:e4:67:d6:0c:43:40:38:33:d0:b3:63:7e:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:99:48:CA:A6:C5:A1:7B:AA:85:46:4A:D0:C0:BA:2C:C8:30:99
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5e:0f:51:28:f8:bb:65:65:47:fe:95:e4:fd:a1:82:e4:75:
22:7c:a1:d2:80:d6:56:d7:3c:67:c2:71:ff:f8:f9:ae:36:23:
f9:f5:46:21:e2:d6:0e:b7:03:2d:ab:50:1b:9e:96:e8:ad:d5:
38:7a:86:74:d6:a2:ed:8a:00:ce:ac:52:ea:d8:b2:66:bd:0b:
f4:08:be:1c:f3:c3:79:dc:cf:ba:62:c7:eb:4a:44:09:0e:1d:
bf:21:40:fe:6d:f4:36:ca:d3:fb:4f:05:b1:ad:08:1a:e1:52:
6e:01:89:f5:ec:c5:e1:16:1b:55:45:61:da:e0:6c:d0:4e:86:
16:15:bb:92:85:5b:e4:10:6d:78:9c:37:3d:80:c2:e1:f1:09:
98:84:3d:26:8e:a7:f4:eb:a9:ad:b2:7e:5b:a8:cd:fb:df:64:
05:15:d2:b7:62:90:63:91:a9:4e:e4:51:c9:48:ee:48:e1:0c:
fc:78:f6:66:5b:cb:fe:14:96:5e:c5:3e:9e:f7:71:ca:08:a3:
eb:dc:3b:d1:d4:16:3d:24:5f:6f:0b:e0:91:27:35:65:81:17:
a5:de:62:db:44:0b:b5:a2:f0:e0:80:45:f6:40:66:07:a4:7e:
0b:2e:39:53:3c:26:bc:80:14:e4:83:13:b1:9d:7e:8d:0d:e0:
96:63:e3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEDY1k87lJJKrfNEhupB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw
ZDU0NGYwHhcNMjYwMjA5MTEwMTI0WhcNMjYwMjEwMTEwMTI0WjAzMTEwLwYDVQQD
EyhjMmQwOTk0OGNhYTZjNWExN2JhYTg1NDY0YWQwYzBiYTJjYzgzMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iZClgIqecKpNVSzUmd2N82Ir2MI
17LEAoKHUMumHxMqei0if0v/ENffE+eznKr+m/caVaNxqZGcHT7qybbTDCB45Ns8
0M2Q6mgBI0RPVYRS4o4EW7pZ3vxG+SQXFC5PP0FNbL+GsHOzqGFZWP6HT5h0pn+S
Y2BwYIIyUTabQbXrPrlaTQ1sM2Ydx6FaS/cjX/5f4n4tQ9gpmkhCOIUECbhuHEH+
NhqIelD/XYZLxHM1uidTp6VQ3a5xemz5HbgjE/I149+bKMQQ7pEpdpEiGpfuHzkZ
NUposTddlHfdwR/o8TbynSHoFEa9sNF65DxCWJXkZ9YMQ0A4M9CzY37ZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLQmUjKpsWhe6qFRkrQwLosyDCZMB8GA1UdIwQY
MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct
ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0
LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV4PUSj4
u2VlR/6V5P2hguR1Inyh0oDWVtc8Z8Jx//j5rjYj+fVGIeLWDrcDLatQG56W6K3V
OHqGdNai7YoAzqxS6tiyZr0L9Ai+HPPDedzPumLH60pECQ4dvyFA/m30NsrT+08F
sa0IGuFSbgGJ9ezF4RYbVUVh2uBs0E6GFhW7koVb5BBteJw3PYDC4fEJmIQ9Jo6n
9OuprbJ+W6jN+99kBRXSt2KQY5GpTuRRyUjuSOEM/Hj2ZlvL/hSWXsU+nvdxygij
69w70dQWPSRfbwvgkSc1ZYEXpd5i20QLtaLw4IBF9kBmB6R+Cy45UzwmvIAU5IMT
sZ1+jQ3glmPj+w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:04 2026 by rpki-client