This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: UBRhWYIyEJV9yOKzHHo2spuHMT3rqFFLsOsBv35fpo0=
Subject key identifier: 88:EF:8C:C3:25:EB:48:C7:9A:CB:8F:89:8B:6D:D0:AD:9F:6E:FD:2C
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019BDA6C0D606B4674A6441F5C48E1952BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 17DC
Signing time: Tue 20 Jan 2026 08:01:12 +0000
Manifest this update: Tue 20 Jan 2026 08:01:12 +0000
Manifest next update: Wed 21 Jan 2026 08:01:12 +0000
Files and hashes: 1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: uQAop1OC/i8mUbW3WQBKTNaKPqfvFIQXHACDkgcYgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:da:6c:0d:60:6b:46:74:a6:44:1f:5c:48:e1:95:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jan 20 08:01:12 2026 GMT
Not After : Jan 21 08:01:12 2026 GMT
Subject: CN=88ef8cc325eb48c79acb8f898b6dd0ad9f6efd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:e3:e5:cd:5b:ac:d8:92:38:bd:77:60:88:
85:fa:ed:72:03:2a:62:01:a7:74:e3:5a:66:4d:88:
83:5b:ba:f8:22:9a:7d:98:90:0f:04:fb:05:2c:7c:
16:12:f3:ff:33:b9:9f:b4:5f:ca:b4:7e:48:37:16:
ee:a7:0d:44:d8:6f:98:6e:8e:da:1f:b2:4a:27:c7:
6f:1e:e2:b3:b6:11:83:4c:dd:f4:15:bf:49:59:2d:
53:2a:cd:b9:56:68:06:a8:f1:a5:15:e7:54:8c:e8:
03:bc:80:bf:a9:87:31:12:a1:39:33:ed:1a:17:1f:
6a:26:0a:d5:68:40:60:c0:1e:d8:e2:48:36:46:cb:
90:5f:8d:a3:f4:5f:2a:20:40:60:c4:3c:9d:fb:e9:
53:ea:d3:29:fe:9f:b8:21:0c:fd:73:7f:3e:18:e0:
c7:ae:67:49:e4:d1:0f:32:ed:64:ae:03:44:a7:6c:
de:01:09:ef:e6:52:b8:52:b2:14:1c:20:7d:7c:e8:
42:c2:a2:66:1d:71:15:bf:a7:cf:fe:93:62:1a:6e:
76:17:8a:9c:a6:28:ae:2c:3c:8a:81:72:40:e9:4b:
c0:27:23:67:50:dd:53:3d:62:08:69:36:46:41:17:
a7:ce:a1:38:31:56:88:50:77:33:5b:c0:2e:90:f2:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:8C:C3:25:EB:48:C7:9A:CB:8F:89:8B:6D:D0:AD:9F:6E:FD:2C
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:a6:8d:49:d1:d0:e8:6f:3d:5c:e6:b2:ef:f6:ad:1e:b8:
79:f4:fc:60:f5:f1:5d:2c:52:61:6f:2e:40:76:b3:de:3f:6c:
ef:07:ce:da:05:d0:f9:28:e2:5b:10:44:4b:69:fd:ef:48:d5:
21:ff:0e:0c:18:c6:d5:09:35:3a:9f:db:00:e6:ec:86:ab:59:
2d:9f:ba:7b:14:7b:e1:d3:c5:fd:70:b2:1a:11:1b:67:db:d5:
c3:56:c3:01:31:fe:78:76:1c:85:47:9a:c4:28:f3:3f:d6:cf:
00:35:41:ed:79:7a:4d:cf:9e:5c:67:2e:d9:94:1a:78:88:27:
a5:53:7a:2b:3c:d4:c7:1c:fb:2b:34:86:c2:fc:8c:a3:7c:fd:
55:1a:e3:b2:07:9c:71:ff:de:d4:19:42:f2:cf:bf:5b:55:06:
70:51:de:3e:11:66:58:c7:58:9f:ab:87:04:65:50:d5:36:a8:
11:61:79:2b:26:23:7b:17:e0:4c:a2:a8:6a:6c:6a:78:39:5e:
f9:d8:e1:cf:68:23:d4:1a:de:2d:88:05:c8:0c:76:13:fe:2f:
df:ca:cf:e7:81:8a:7d:98:ec:4b:d7:83:15:3e:3a:51:36:86:
1a:09:a1:43:53:e7:42:8d:7d:77:7f:b4:5b:3f:9a:38:0d:91:
e6:66:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 13:30:01 2026 by rpki-client