This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: EIDrPyP8hGU3o6DDdG6k5rKfEgnrnLq7yiKkx3vomj8=
Subject key identifier: F8:8A:FC:53:F5:8E:27:62:EE:3A:9B:4D:A3:C8:BB:4D:AB:F8:BE:F5
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 019C424649F5F7E267D764D5B66E859C536E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 0771
Signing time: Mon 09 Feb 2026 12:00:28 +0000
Manifest this update: Mon 09 Feb 2026 12:00:28 +0000
Manifest next update: Tue 10 Feb 2026 12:00:28 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: p8dcsQxKAw+K0jiU6Y2pP8afgjqeTA7b1GHQTZiBe2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:49:f5:f7:e2:67:d7:64:d5:b6:6e:85:9c:53:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Feb 9 12:00:28 2026 GMT
Not After : Feb 10 12:00:28 2026 GMT
Subject: CN=f88afc53f58e2762ee3a9b4da3c8bb4dabf8bef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:14:d5:04:c1:b2:f2:f7:94:3c:12:f0:c7:
ad:ab:f8:6f:10:19:4d:fb:22:c4:22:49:cf:7e:ff:
d2:da:e5:6a:07:6e:f7:d9:fe:6c:27:a1:7a:00:5c:
72:92:21:24:7d:eb:23:9a:d9:72:42:8d:bb:aa:84:
26:eb:a3:13:85:8a:25:f3:a4:b4:0e:a0:1b:56:b5:
7a:6e:fe:23:12:74:0b:9f:f3:9f:c6:32:85:43:c1:
36:ae:bb:bc:27:ba:d0:09:a7:e5:26:e7:7d:a9:f0:
5e:50:ce:5b:38:4a:61:b0:af:90:99:07:a3:3c:ee:
fe:6c:f4:a1:b2:56:72:bd:a9:e4:88:1f:08:44:2f:
65:24:11:cd:df:48:8c:d0:21:89:50:64:ea:34:7f:
2e:7a:89:fb:28:07:bf:b3:d2:75:cc:a2:85:29:0b:
87:a6:e9:57:3c:8b:f1:38:23:18:73:eb:b5:3e:64:
f2:64:cb:6c:53:fa:ab:77:2e:1d:1d:35:db:8d:67:
97:43:93:fd:5a:f2:26:9a:03:0b:6a:17:50:de:3c:
a5:8d:fc:5c:45:dc:07:f3:68:48:e6:f3:65:14:4d:
f7:e7:f1:d8:d3:29:f0:2c:b8:fe:52:70:23:30:96:
27:eb:aa:40:21:c8:98:57:80:33:84:0f:3b:74:8c:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:FC:53:F5:8E:27:62:EE:3A:9B:4D:A3:C8:BB:4D:AB:F8:BE:F5
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:95:48:5c:3e:52:fb:42:55:cb:91:2d:18:c7:88:a2:7c:
8a:06:a0:45:e4:b7:8b:96:5a:f0:bf:59:b8:9c:af:2f:f5:e1:
0c:fc:48:42:81:3b:5c:ed:98:d0:1c:f0:b2:68:1f:69:ba:ba:
3e:31:70:3e:04:de:26:88:e2:77:8b:df:35:64:81:96:f3:b5:
b2:c5:f1:43:35:f7:c9:a9:1a:a0:db:a9:31:f9:98:1b:b8:95:
14:53:13:74:21:5d:91:ba:54:75:a1:47:e1:51:15:67:49:d9:
5a:3b:fb:cf:a2:99:02:c3:db:bd:ae:d0:41:05:7a:f0:cc:96:
ee:b6:ff:f0:f7:d5:34:84:b5:14:cd:b0:3d:21:ac:f3:d4:ea:
0d:5a:84:02:fb:8b:cd:a7:eb:38:82:35:e2:cc:8a:47:7f:16:
37:48:fc:36:f9:29:50:80:be:bb:12:1e:4e:f7:8a:14:60:20:
98:6a:74:26:01:27:72:d0:22:7d:92:01:7f:c7:ba:ad:04:43:
68:69:a7:db:67:4f:bb:6c:59:a1:81:e8:35:31:d2:f4:47:10:
97:b7:14:7d:33:ff:7d:0b:f8:3e:f5:39:7d:fe:db:cd:bb:c9:
0f:f9:81:ee:e1:16:8c:b5:d5:f9:d4:87:fb:ca:d4:07:00:a6:
59:d2:6f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkn19+Jn12TVtm6FnFNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDI1ZGZjNjUyNDgzY2M3YmZmZDYxMzZmNDc3MzViZDE5
MGQ1YTEwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD
EyhmODhhZmM1M2Y1OGUyNzYyZWUzYTliNGRhM2M4YmI0ZGFiZjhiZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6YU1QTBsvL3lDwS8Metq/hvEBlN
+yLEIknPfv/S2uVqB2732f5sJ6F6AFxykiEkfesjmtlyQo27qoQm66MThYol86S0
DqAbVrV6bv4jEnQLn/OfxjKFQ8E2rru8J7rQCaflJud9qfBeUM5bOEphsK+QmQej
PO7+bPShslZyvankiB8IRC9lJBHN30iM0CGJUGTqNH8ueon7KAe/s9J1zKKFKQuH
pulXPIvxOCMYc+u1PmTyZMtsU/qrdy4dHTXbjWeXQ5P9WvImmgMLahdQ3jyljfxc
RdwH82hI5vNlFE335/HY0ynwLLj+UnAjMJYn66pAIciYV4AzhA87dIySuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiK/FP1jidi7jqbTaPIu02r+L71MB8GA1UdIwQY
MBaAFCXSXfxlJIPMe//WE29Hc1vRkNWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQt
MDAyYTEyYzI0MjQ4LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQtMDAyYTEyYzI0MjQ4
LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawqVSFw+
UvtCVcuRLRjHiKJ8igagReS3i5Za8L9ZuJyvL/XhDPxIQoE7XO2Y0Bzwsmgfabq6
PjFwPgTeJojid4vfNWSBlvO1ssXxQzX3yakaoNupMfmYG7iVFFMTdCFdkbpUdaFH
4VEVZ0nZWjv7z6KZAsPbva7QQQV68MyW7rb/8PfVNIS1FM2wPSGs89TqDVqEAvuL
zafrOII14syKR38WN0j8NvkpUIC+uxIeTveKFGAgmGp0JgEnctAifZIBf8e6rQRD
aGmn22dPu2xZoYHoNTHS9EcQl7cUfTP/fQv4PvU5ff7bzbvJD/mB7uEWjLXV+dSH
+8rUBwCmWdJv5g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:46 2026 by rpki-client