This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: C6KYAr6VpCqeDEm5QBYi+N6N57a5XM7sIVLvuqW4OBc=
Subject key identifier: 31:82:87:55:47:A9:4B:36:0A:DF:ED:CF:BE:53:CE:99:79:97:C5:8A
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 019C4321E3579006C20BD2E8F0826CBA08AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 0596
Signing time: Mon 09 Feb 2026 16:00:20 +0000
Manifest this update: Mon 09 Feb 2026 16:00:20 +0000
Manifest next update: Tue 10 Feb 2026 16:00:20 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: QGdqQfsh9zuH2R2EZ/EXJGJEOaCrJa+26DboNITTZbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e3:57:90:06:c2:0b:d2:e8:f0:82:6c:ba:08:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Feb 9 16:00:20 2026 GMT
Not After : Feb 10 16:00:20 2026 GMT
Subject: CN=3182875547a94b360adfedcfbe53ce997997c58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:93:a0:00:e3:a1:c6:c0:81:9e:87:d1:62:
53:32:57:07:db:a9:d7:6d:eb:f9:b5:51:fa:5d:4a:
dc:9c:bb:b3:3b:59:77:09:00:9e:67:03:d9:f2:33:
49:ed:02:63:e9:ea:40:a5:d0:f0:55:2e:df:ce:d0:
07:7b:c0:e0:c8:08:80:fd:11:24:61:5d:78:a2:5e:
d9:9e:79:bd:75:ef:9c:a5:e1:24:29:23:33:fa:e1:
1e:fc:c2:70:a5:40:dc:5d:80:95:9b:df:e1:59:83:
df:26:f5:ef:d2:94:65:98:19:9b:16:db:db:fa:a4:
5a:18:d3:b3:b4:85:53:16:dd:8d:1c:9a:7d:4c:d2:
a6:fb:59:71:fe:91:15:11:72:09:7c:dd:fe:fb:ec:
da:42:76:61:28:af:42:27:c9:22:18:28:e9:57:58:
04:79:2b:29:d5:bd:89:08:f9:4f:9f:30:07:e5:23:
c3:58:0a:b7:79:2f:bb:b5:04:e8:da:11:9b:50:f4:
a8:eb:0c:16:bf:81:0b:72:61:4d:4a:74:d0:4c:6a:
29:a7:a0:17:db:bc:fd:3e:f1:59:e5:c1:e4:2d:31:
42:ed:3b:f7:86:94:10:5f:b1:d3:a2:bc:b9:6e:70:
b5:15:68:86:ae:f2:8a:5f:e3:78:cb:9b:ff:2f:f3:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:87:55:47:A9:4B:36:0A:DF:ED:CF:BE:53:CE:99:79:97:C5:8A
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:c4:7c:0a:4a:16:12:22:ba:5f:fc:9c:8a:58:54:da:aa:
f6:6f:de:75:6c:f1:1e:7c:1f:ae:f6:62:56:95:d4:62:d4:f9:
d7:16:c8:7b:db:40:b8:0c:d3:05:aa:af:b2:67:7d:f6:91:cd:
0b:42:3e:a4:22:bb:6e:dc:54:0d:10:49:6f:3e:9b:4e:4c:f7:
c4:89:17:21:97:a4:28:9f:10:43:64:e8:e9:e7:ec:ea:f0:04:
03:7a:69:db:50:ee:09:e0:76:f2:d3:82:3f:8b:e4:ee:db:cc:
aa:5d:ab:38:28:be:c8:5d:0c:8c:20:b1:81:88:ab:27:22:b7:
d5:3e:7e:52:21:45:ca:1d:11:66:92:60:8c:8c:a8:15:f4:a8:
a8:10:db:26:cb:cb:cf:23:33:86:4e:79:ed:c0:68:1c:1c:62:
a2:c5:51:a7:14:52:39:ea:d3:5a:16:0d:6a:66:9f:59:da:fe:
59:90:ce:ec:59:40:2f:4d:b3:a2:11:bb:11:16:6e:69:74:32:
98:be:8c:56:a2:12:cf:0c:b3:93:ad:2f:6a:dc:4a:cc:ec:22:
6d:ea:21:34:23:df:55:20:76:c9:b5:c4:49:14:d1:64:2d:29:
fc:26:ce:c6:7e:b2:cd:9e:1e:b1:f4:0f:e0:8e:b9:0c:83:2b:
53:7f:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client