This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: XkHXqYp/++4pAD7aVAJh+CcfB3WaNJtUf/h9jn5ZraI=
Subject key identifier: EE:65:F1:EE:FC:10:4B:A1:F2:46:52:D4:38:D0:6A:11:D2:2C:F7:DA
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 019C43901E603B8F1EF7D6245F05B083951D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0FBB
Signing time: Mon 09 Feb 2026 18:00:44 +0000
Manifest this update: Mon 09 Feb 2026 18:00:44 +0000
Manifest next update: Tue 10 Feb 2026 18:00:44 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: F0SA8aMfQwJyG1RqaPk/RlHCjZ6Abl6IyO/8F5fipD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:1e:60:3b:8f:1e:f7:d6:24:5f:05:b0:83:95:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Feb 9 18:00:44 2026 GMT
Not After : Feb 10 18:00:44 2026 GMT
Subject: CN=ee65f1eefc104ba1f24652d438d06a11d22cf7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:98:7c:fe:af:09:a3:54:35:8b:3c:b1:21:
77:d3:02:a8:4e:97:ba:ea:75:a1:3a:60:5e:c6:25:
d4:68:45:82:7a:a8:88:22:76:53:1e:b5:8e:a8:d8:
8e:56:16:38:43:f5:27:98:d6:ae:1f:dc:f6:44:58:
8e:fb:0a:2c:1c:af:77:74:77:34:7c:07:46:7d:bf:
64:df:ea:d1:fd:82:84:db:96:0c:9f:37:54:84:d0:
f6:58:46:87:3a:4a:dd:c3:f2:bc:b5:bd:c4:65:76:
42:e9:94:25:50:d8:b8:30:aa:86:ae:72:ac:84:bc:
1d:bc:de:ef:cc:92:e5:5e:e5:87:11:06:33:b3:83:
40:37:68:15:1d:dd:53:62:7d:ed:60:3a:72:b9:bb:
63:6a:46:7a:e4:88:ab:c2:b1:f2:a9:15:b4:70:fe:
be:b7:58:c1:b5:bb:31:c1:9a:56:99:6b:af:fb:ac:
69:19:d5:33:51:c1:28:21:73:fd:d1:c1:4f:46:68:
3a:f4:39:76:97:5f:a8:46:6b:80:e6:6c:aa:15:bd:
01:44:ad:4b:80:c5:a2:7c:01:75:78:5d:1d:d9:0d:
2c:87:94:53:ab:44:8c:7b:8b:2a:32:83:e6:67:9b:
12:ed:bd:7b:02:1d:5e:cf:04:ae:98:2a:77:03:38:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:F1:EE:FC:10:4B:A1:F2:46:52:D4:38:D0:6A:11:D2:2C:F7:DA
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:be:90:08:0a:47:6e:22:8d:00:0f:c7:04:6c:d9:73:ac:
01:07:31:df:10:b1:02:f2:20:b2:08:42:d9:af:bf:23:48:72:
34:68:9c:bc:57:6a:8e:a9:b4:50:74:38:e8:b2:bd:ad:8a:dc:
67:8a:7e:05:61:27:e4:00:e8:62:d1:5f:14:1c:6c:b7:de:be:
72:65:56:7b:9e:05:46:22:b5:fa:9d:97:94:25:24:31:10:d5:
60:27:3a:b3:0e:4b:a7:96:07:9d:23:5c:0f:dc:9f:fc:76:31:
1f:18:81:00:45:ee:b2:f2:e8:43:d3:24:62:3a:ea:5c:31:e5:
1a:21:9e:3f:ed:61:25:a0:a4:3e:a9:5c:17:d1:6b:06:e4:f6:
09:6e:04:2f:3d:f3:b1:ab:f0:2f:f4:b4:ef:49:37:aa:a8:e0:
cc:35:00:ef:4d:c2:4d:08:fd:12:21:9a:d5:c4:07:f0:aa:4c:
77:55:ed:01:2b:46:03:a5:7f:3e:95:6f:17:9a:90:cc:24:18:
28:a6:20:cb:c3:9b:53:17:31:f6:ec:ce:02:69:df:51:70:32:
15:0f:aa:63:22:82:0f:8a:cf:50:22:85:c8:bf:ea:22:45:d7:
38:d4:5f:82:ad:b6:22:ea:b9:8b:ff:d2:fc:19:0d:53:64:9d:
8c:20:cb:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkB5gO48e99YkXwWwg5UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm
MjE1ZWIwHhcNMjYwMjA5MTgwMDQ0WhcNMjYwMjEwMTgwMDQ0WjAzMTEwLwYDVQQD
EyhlZTY1ZjFlZWZjMTA0YmExZjI0NjUyZDQzOGQwNmExMWQyMmNmN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS+YfP6vCaNUNYs8sSF30wKoTpe6
6nWhOmBexiXUaEWCeqiIInZTHrWOqNiOVhY4Q/UnmNauH9z2RFiO+wosHK93dHc0
fAdGfb9k3+rR/YKE25YMnzdUhND2WEaHOkrdw/K8tb3EZXZC6ZQlUNi4MKqGrnKs
hLwdvN7vzJLlXuWHEQYzs4NAN2gVHd1TYn3tYDpyubtjakZ65IirwrHyqRW0cP6+
t1jBtbsxwZpWmWuv+6xpGdUzUcEoIXP90cFPRmg69Dl2l1+oRmuA5myqFb0BRK1L
gMWifAF1eF0d2Q0sh5RTq0SMe4sqMoPmZ5sS7b17Ah1ezwSumCp3Azhf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5l8e78EEuh8kZS1DjQahHSLPfaMB8GA1UdIwQY
MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt
NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2
LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYy+kAgK
R24ijQAPxwRs2XOsAQcx3xCxAvIgsghC2a+/I0hyNGicvFdqjqm0UHQ46LK9rYrc
Z4p+BWEn5ADoYtFfFBxst96+cmVWe54FRiK1+p2XlCUkMRDVYCc6sw5Lp5YHnSNc
D9yf/HYxHxiBAEXusvLoQ9MkYjrqXDHlGiGeP+1hJaCkPqlcF9FrBuT2CW4ELz3z
savwL/S070k3qqjgzDUA703CTQj9EiGa1cQH8KpMd1XtAStGA6V/PpVvF5qQzCQY
KKYgy8ObUxcx9uzOAmnfUXAyFQ+qYyKCD4rPUCKFyL/qIkXXONRfgq22Iuq5i//S
/BkNU2SdjCDLyg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:42 2026 by rpki-client