This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: 3mTBb/192jm+UsDVVQ+zIZiyxKfhc4WUkY93KlK4OWc=
Subject key identifier: 0A:98:55:0D:6E:CC:FB:58:86:61:81:48:99:81:7F:32:65:BA:A9:A6
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019C43907CF13B048FEB4F2C90C33359CCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 13BE
Signing time: Mon 09 Feb 2026 18:01:08 +0000
Manifest this update: Mon 09 Feb 2026 18:01:08 +0000
Manifest next update: Tue 10 Feb 2026 18:01:08 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: m8yToEllRiBkkFw2jF7VPNK7On7DJOf6zlm1EsH99lk=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:7c:f1:3b:04:8f:eb:4f:2c:90:c3:33:59:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Feb 9 18:01:08 2026 GMT
Not After : Feb 10 18:01:08 2026 GMT
Subject: CN=0a98550d6eccfb588661814899817f3265baa9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:08:30:cb:0a:c3:24:cf:a7:a7:db:75:7b:
a9:ee:6e:4d:ef:f6:98:f9:ba:dd:e0:9d:e1:97:81:
f0:9e:03:fa:ca:1d:c9:ab:6a:d3:73:c6:94:96:28:
f1:ec:7e:46:77:52:d0:ee:e2:ab:47:b4:27:f5:68:
c3:2f:02:e8:aa:24:22:c7:b7:1c:27:89:5f:88:be:
6e:e4:de:b5:54:2e:63:33:3f:a2:ac:32:99:c8:e8:
7d:91:20:c1:9a:3f:bf:51:97:8c:44:e9:48:f0:a1:
ad:b3:48:3c:22:54:f5:b5:e5:a3:8a:04:e6:74:33:
de:54:3a:36:e7:b0:4a:94:07:ea:57:c8:67:06:10:
32:17:31:70:f9:80:2e:82:36:ef:79:c1:44:6d:5e:
d2:95:99:02:3c:2f:03:0b:cc:1c:c4:61:ff:ef:d0:
60:fb:b4:23:d5:42:61:ad:fa:c8:9a:31:d3:11:1f:
6e:0e:65:9d:1a:fe:03:3f:16:27:d7:58:0a:d2:d1:
f2:6d:76:e7:82:d5:19:f4:64:88:8d:be:04:a4:25:
5b:48:85:d5:11:98:40:ec:08:c9:e1:1a:e0:69:d2:
ac:5f:85:f3:e8:ab:75:2f:56:2b:82:8c:80:78:b5:
6e:0d:48:88:20:f1:54:63:39:43:9b:a8:58:3b:55:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:98:55:0D:6E:CC:FB:58:86:61:81:48:99:81:7F:32:65:BA:A9:A6
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:b9:42:b4:7d:ca:83:a2:6b:a1:49:f4:c7:a1:98:06:bd:
42:d4:2b:d5:fd:62:88:eb:84:1e:06:7f:fb:49:5a:eb:a1:d7:
1d:92:84:08:2a:81:29:e9:11:92:af:c3:0d:0c:69:82:3c:ab:
0b:34:1a:a3:d7:2f:c9:d0:7d:03:cc:17:52:7c:3d:a2:8c:f0:
25:be:c6:77:2b:c0:da:ec:31:1f:f4:2d:26:c9:27:7b:3a:09:
8f:82:bc:40:da:76:44:c6:a4:67:5f:7b:22:32:6f:c3:80:70:
8c:e4:bb:67:63:95:3c:62:51:d2:10:d1:1c:1b:75:82:a6:3e:
fc:b0:a5:59:81:40:9a:2b:b4:dc:41:81:d3:21:aa:f4:46:3c:
f7:42:1a:a6:3f:72:a1:01:eb:d5:7f:38:96:3a:01:80:f2:c7:
a1:d1:b7:01:b3:c3:11:78:31:4e:88:c6:80:c8:b7:47:41:1a:
fb:b8:5a:4c:78:23:7e:bf:ab:bd:11:f9:44:fd:db:34:d7:f7:
0f:95:2b:eb:19:32:ac:72:81:30:eb:83:d4:50:d2:c4:8a:5c:
fc:02:da:58:24:06:d1:44:1b:1e:44:41:95:df:51:f7:af:ec:
82:02:63:b5:f2:e4:22:ab:99:52:80:ca:17:a7:c7:4a:bc:62:
45:1e:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:24 2026 by rpki-client