This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: hXksMzf6x5b3APlxgARyDWariPOgzxsgYNGAixq2+mk=
Subject key identifier: C5:AE:FF:46:FC:0B:97:F4:39:0C:72:D3:96:D1:2D:11:16:24:26:44
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019C43900F6212CC37E1CA9186DDC872658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 18:00:40 +0000
Manifest this update: Mon 09 Feb 2026 18:00:40 +0000
Manifest next update: Tue 10 Feb 2026 18:00:40 +0000
Files and hashes: 1: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: S0JhxmbNYs8d9b5htfzJUxPX2fE8szYYvZGjSTYTXu4=)
2: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (hash: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:0f:62:12:cc:37:e1:ca:91:86:dd:c8:72:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Feb 9 18:00:40 2026 GMT
Not After : Feb 10 18:00:40 2026 GMT
Subject: CN=c5aeff46fc0b97f4390c72d396d12d1116242644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:ef:b6:21:9d:d0:41:a1:1c:9c:fb:f7:54:
16:6d:49:11:2e:34:c7:37:16:ce:1b:65:53:d7:e0:
74:ce:c8:4d:a2:af:d7:f5:a7:af:8f:71:9d:6b:72:
ae:59:ee:5a:d5:d7:73:9b:5c:db:54:39:2a:4c:1e:
40:28:7e:11:a4:10:8e:ad:da:d0:64:1a:1c:c0:71:
aa:05:6e:ea:f1:a5:2f:8e:96:32:4c:1c:87:ba:91:
6c:96:96:f0:5b:68:2e:58:db:f5:59:1b:9f:69:d6:
56:2e:24:f7:6d:b8:b1:db:08:31:b4:9f:5f:d7:00:
68:28:34:dd:49:25:ba:02:85:14:21:5c:46:95:c6:
57:ca:5b:8a:84:9e:29:f5:8f:d3:ef:ca:cd:a0:97:
f0:c8:2f:c5:d8:a3:a2:4c:0e:b7:c3:eb:d7:cb:cd:
08:e6:fb:b6:d4:79:2a:d3:3c:ec:1f:2c:9d:85:6e:
84:89:37:4a:e6:7d:f0:b2:cb:6f:9a:c4:4b:43:88:
b4:f5:6d:51:88:41:15:6d:b5:a0:54:2b:e5:1d:ba:
d9:04:66:57:69:c5:31:05:a1:ed:0a:dc:bb:0d:14:
86:75:da:80:ff:26:26:2f:60:df:8b:a1:8c:d8:d6:
eb:5e:b3:eb:25:8c:94:6e:d6:8f:37:59:48:8a:6f:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:FF:46:FC:0B:97:F4:39:0C:72:D3:96:D1:2D:11:16:24:26:44
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:b6:45:0c:81:b8:99:36:2e:a3:89:48:a8:c3:c4:ec:17:
bc:b6:53:4e:68:c5:51:f3:e5:2b:ca:c6:49:cc:5c:28:04:6d:
b1:42:70:b5:65:59:e3:36:f6:28:d8:cb:2c:e0:67:5a:9b:72:
ec:4a:2a:b5:e0:41:60:01:f0:ec:46:39:46:a5:02:13:eb:60:
1a:1c:af:05:6b:f2:64:1d:3b:bd:6d:8f:3d:76:e8:9a:a5:e7:
23:88:40:ee:79:df:31:79:cc:a1:e2:0e:4c:8d:48:24:dd:dd:
ed:9e:3e:17:da:e5:a9:c6:55:44:61:fc:86:be:a8:08:d6:bb:
79:85:4a:ef:8c:5a:65:e1:a6:fb:9b:d7:93:3b:bc:35:1f:6b:
aa:e8:85:f8:a7:21:ce:f8:68:e3:4d:7b:91:30:0e:42:7c:86:
19:5b:3b:66:01:cf:75:0e:39:b2:96:6a:e1:cb:45:59:83:59:
f7:fb:d9:ef:26:36:45:e1:38:4f:7d:1e:bd:e0:44:f9:ed:80:
3b:06:39:2a:5b:d1:aa:47:d8:34:59:1b:af:45:13:c8:bd:04:
36:c9:10:65:96:1a:a1:6b:f5:03:1d:89:4e:9f:83:12:d2:36:
18:e3:7c:74:15:65:a4:34:d5:33:d8:73:de:ea:7e:52:fa:43:
b1:00:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:07 2026 by rpki-client