This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: DtBoRx4Ualc7jhvaMSAfjH0mzIp3f12PNNTLLcDWcBI=
Subject key identifier: 62:9B:3E:C8:E0:B8:6B:7D:0F:8F:53:67:8F:67:FF:B8:EC:3E:90:D7
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019C45477CC5CF5AE2E347C290FB8ECB4D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0CC2
Signing time: Tue 10 Feb 2026 02:00:38 +0000
Manifest this update: Tue 10 Feb 2026 02:00:38 +0000
Manifest next update: Wed 11 Feb 2026 02:00:38 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: djtINRwXwQl+HrO2gAZ+vDHRs0HgiwfvkPa80D4U5oU=)
2: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:7c:c5:cf:5a:e2:e3:47:c2:90:fb:8e:cb:4d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Feb 10 02:00:38 2026 GMT
Not After : Feb 11 02:00:38 2026 GMT
Subject: CN=629b3ec8e0b86b7d0f8f53678f67ffb8ec3e90d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:37:23:9c:e5:46:b1:7a:d1:7d:f8:e2:6c:1c:
1a:66:a9:2e:0d:68:21:24:ef:94:54:a1:2d:52:aa:
9f:59:6b:eb:22:92:f0:24:77:ce:8d:38:9c:a0:d3:
0e:52:4a:a8:c5:0e:0e:30:28:2e:b3:de:ea:07:d1:
8d:61:8f:b9:60:b6:11:c4:6a:3c:72:93:c5:e5:08:
35:6b:74:4f:22:6a:e0:37:50:ae:fa:28:90:45:86:
f6:39:2b:83:84:90:eb:7a:90:6d:89:ae:ea:62:b8:
13:fd:b8:bd:b2:99:db:de:28:8f:31:2e:55:49:f4:
25:22:c2:3c:c1:0c:1b:ba:f7:38:66:b1:6e:27:75:
f9:8b:48:7d:ae:63:a4:e2:da:5e:55:f0:fe:bc:57:
11:0a:c5:10:e2:0d:d0:e4:92:71:94:65:4d:10:6d:
2a:84:d5:a4:77:22:d9:58:61:58:52:bf:8f:e3:e6:
58:0a:44:07:d9:70:c4:d1:91:f5:08:24:2b:33:07:
b4:f5:5d:7d:7d:21:40:5d:22:68:52:c4:c1:42:49:
52:19:f5:13:f2:6b:36:d6:67:e5:17:b5:2e:4a:d2:
11:26:57:ae:4f:29:3d:4e:38:11:a9:72:48:56:ef:
85:c6:5d:4e:c3:ac:ad:ae:19:73:e2:f9:c7:b3:ab:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:3E:C8:E0:B8:6B:7D:0F:8F:53:67:8F:67:FF:B8:EC:3E:90:D7
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:3f:8c:70:9c:40:1c:bf:b4:d9:69:2d:18:b4:68:3e:75:
73:07:5b:4f:73:63:f1:61:41:55:11:c1:06:73:26:71:9c:e6:
c9:05:65:21:7c:4c:17:74:89:d9:5a:f1:c4:9a:d6:42:d5:fa:
31:de:9c:6d:4d:86:2c:18:bc:0f:2c:24:51:8c:18:17:3a:65:
80:a4:fb:8d:a2:f5:18:24:5d:23:97:b1:cd:fe:49:40:65:59:
a8:dd:62:b7:61:d0:ad:81:4d:0d:d6:ad:4a:18:49:5e:04:51:
83:a0:bf:b1:ff:b5:14:e5:28:a5:7b:6a:34:8a:75:fb:2c:f6:
56:4f:d1:00:21:8e:cd:79:3a:a4:42:d2:64:c7:07:da:a0:8e:
8c:47:28:ea:c5:5c:03:44:df:54:a2:5d:dc:5f:1e:c5:43:04:
61:e6:97:83:2f:bd:d2:c9:9e:7c:ea:e8:4e:dd:98:d1:16:1c:
43:bc:3c:db:1b:94:a2:14:6d:40:68:d5:71:ac:ad:2e:68:73:
03:ed:33:8c:3f:7d:71:7b:b2:2e:c5:d1:88:4b:09:e5:ff:fc:
62:e5:6d:63:da:01:00:77:8e:b6:5b:7c:aa:9e:4c:79:c5:c7:
a3:a7:b0:cf:e3:7d:bc:90:6f:92:dd:43:ad:45:e7:fc:51:86:
6b:34:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:49 2026 by rpki-client