This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: sGCA/NxhPF2Sd1fEslvtW6wG6KfhF2eex8v1Tor7Yvk=
Subject key identifier: 7F:91:5F:B8:CF:76:4B:06:20:9F:94:3A:D6:08:8A:5A:10:2E:37:E3
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019C420F3C2BC16C7CD71F5E1D41D6909A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 11:00:20 +0000
Manifest this update: Mon 09 Feb 2026 11:00:20 +0000
Manifest next update: Tue 10 Feb 2026 11:00:20 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: FpRqelZx4Trfkp/qdloUpS3GSjJAiZT1VtmA/hYJZXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:3c:2b:c1:6c:7c:d7:1f:5e:1d:41:d6:90:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Feb 9 11:00:20 2026 GMT
Not After : Feb 10 11:00:20 2026 GMT
Subject: CN=7f915fb8cf764b06209f943ad6088a5a102e37e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:24:72:21:d5:94:58:e6:6f:0b:d0:1a:b8:
49:ce:0f:3d:37:9f:32:61:1f:5b:7d:4a:fd:18:04:
1f:61:94:66:1c:9c:56:31:91:b9:49:53:09:3b:f2:
9b:ce:dd:ad:42:02:bd:70:96:7b:28:63:45:b3:10:
6c:77:db:72:6c:00:c5:5c:b4:4b:c7:3f:54:f3:c5:
ab:6d:88:78:f2:e2:35:a8:69:31:51:ae:e9:09:0f:
22:5a:c0:60:19:07:1c:d9:44:51:49:b6:79:96:5a:
1a:d2:ff:d8:b9:70:c9:6d:6f:44:ff:96:ff:a4:ef:
95:7e:f8:36:fe:fa:fd:a5:df:70:c5:c3:6d:2f:cf:
bc:77:48:80:8d:66:4a:98:c0:29:e2:36:99:ca:3e:
2b:86:4c:c0:7f:47:0c:84:41:d5:9e:56:2d:d5:16:
b1:2c:ff:78:7c:20:af:9c:d2:f7:5b:62:cc:21:5b:
60:54:51:9c:1c:bc:3a:a9:53:d1:ae:35:ae:6a:6c:
15:99:28:55:36:ea:8a:b3:e0:86:a2:3c:c8:64:8f:
57:04:8a:20:bd:1c:f4:92:ca:e3:24:6f:d3:4c:70:
b9:32:11:36:97:b1:71:ea:9e:d5:3c:84:df:36:06:
05:c7:2c:98:0a:1a:bc:44:f1:b7:79:7a:d3:cb:00:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:5F:B8:CF:76:4B:06:20:9F:94:3A:D6:08:8A:5A:10:2E:37:E3
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:52:b4:05:95:00:36:cc:21:e5:1b:79:eb:3f:92:9b:e3:
a7:83:86:47:90:a8:d4:08:70:3f:2c:32:93:29:93:0d:47:0b:
b8:3e:f0:82:6c:4f:af:3e:32:e8:b9:27:cd:b3:9a:a6:f8:35:
33:20:7e:fe:49:9b:fe:3a:36:b3:0a:15:ac:76:08:45:27:fd:
62:47:c0:be:d9:c6:dd:9b:66:48:57:0e:02:8e:9b:db:c8:c6:
1a:31:43:68:05:32:f7:8b:e8:63:eb:9f:a9:ff:65:12:3b:0c:
76:6c:b9:0f:15:fa:af:52:c7:a4:57:02:75:4f:65:9e:6f:84:
67:1c:48:13:c5:a4:1f:f0:ef:6c:53:6b:e1:ff:a2:df:81:a1:
d6:83:a8:e0:a3:96:55:83:ee:ad:06:da:56:e3:32:f8:af:0c:
a0:d7:0d:30:de:6c:a2:c4:a7:e7:06:fa:7a:35:f0:de:62:f8:
9c:98:93:80:dd:78:a4:e0:fd:7d:8c:67:7e:7e:8f:d3:1d:6a:
5c:24:da:f4:84:e5:a4:b6:e0:1b:41:da:eb:d0:03:9c:89:4a:
c6:e6:0d:61:e0:1e:22:db:cf:d6:ad:d7:69:78:c2:67:28:32:
4e:64:55:00:0c:0e:49:60:8a:52:b6:3b:ab:90:c0:93:c3:66:
a9:f9:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:23 2026 by rpki-client