This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: MSRCk2DlKsfH67QXZe8b6lyEW3k5UTNRiKOAaEXNS+o=
Subject key identifier: DA:90:30:FB:18:72:80:A0:20:02:30:19:43:AF:B6:53:DA:5E:C3:98
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 019C4321FFEF63B3C8E9674E58B47A725C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 16:00:27 +0000
Manifest this update: Mon 09 Feb 2026 16:00:27 +0000
Manifest next update: Tue 10 Feb 2026 16:00:27 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: KZC89p1q8cjA3iUKn63l4xOfI05VMikKhVTZ3rBir4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:ff:ef:63:b3:c8:e9:67:4e:58:b4:7a:72:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Feb 9 16:00:27 2026 GMT
Not After : Feb 10 16:00:27 2026 GMT
Subject: CN=da9030fb187280a02002301943afb653da5ec398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:0c:5e:3e:7f:cf:ea:76:5f:30:b6:b5:0a:
79:8c:5f:89:fa:82:31:0a:ac:04:58:59:8b:6d:3e:
52:14:23:11:17:1d:32:fd:4d:ac:4a:d8:c2:fc:a2:
4d:04:fa:d9:78:8d:64:4d:ec:5b:2a:87:98:77:ac:
8c:d9:b6:85:3f:2f:43:ed:7d:ae:55:72:dc:c6:59:
24:d9:fe:31:cf:0b:19:30:38:38:dc:e4:fa:92:27:
b2:43:d9:69:fd:7f:c4:3d:c5:67:7c:dd:76:f1:0e:
4d:0a:20:f4:d2:41:fe:d5:e5:a0:6a:09:e3:dd:30:
d8:b8:88:8a:b3:a6:1a:60:56:f8:d5:63:3f:6c:08:
86:81:ab:db:ab:07:aa:de:40:b6:0f:da:95:d8:6e:
36:d9:82:8b:4a:7e:3e:ec:a4:14:24:31:62:f4:fb:
a1:ae:bd:da:05:4d:47:9a:6d:f6:38:ba:8e:5c:d1:
f8:6d:8e:03:c7:3f:d2:7f:b9:64:64:57:d1:06:28:
50:a6:dd:fd:3f:56:bd:6b:46:cc:ad:38:92:1e:7b:
8a:4d:39:1d:c8:9c:58:54:c9:5d:c6:3d:f9:e4:55:
0d:67:87:ea:27:01:85:3e:1a:73:ba:7f:5a:8c:86:
50:87:11:fd:7e:b4:2e:8a:9d:9d:0e:92:07:38:54:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:30:FB:18:72:80:A0:20:02:30:19:43:AF:B6:53:DA:5E:C3:98
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:36:6d:0d:27:d1:92:52:de:d1:4c:db:0d:cf:d9:48:4a:
dc:65:ce:c6:46:25:1e:df:a3:47:53:22:be:dd:60:a9:c4:ef:
e9:07:7c:a7:cf:92:54:92:48:90:8f:87:88:a9:d2:e5:ec:2f:
99:c1:c7:7c:ad:0e:a1:cb:29:61:93:67:07:48:58:f6:18:f5:
35:c4:70:c0:af:05:92:8d:78:a1:62:fb:10:23:42:e3:7e:f7:
dd:47:9e:c3:d3:64:05:51:92:9b:d3:03:41:16:48:f3:19:76:
01:32:35:e3:53:39:8a:7e:65:14:81:d1:1f:1c:b5:3f:db:01:
95:d3:ce:c4:7b:e3:d4:4f:5b:24:62:a2:42:8b:1d:a4:a3:53:
c7:ba:01:94:ef:f3:81:9f:7d:a2:8e:28:1e:4d:6b:44:57:9c:
c8:32:74:95:1b:40:15:4a:ed:05:f4:83:6b:29:3c:13:54:b2:
4d:53:fb:ba:d0:ee:97:31:27:8f:4d:d2:b3:d3:83:92:61:35:
6d:70:f4:51:de:a6:b1:63:81:75:48:8b:86:0c:98:5e:83:ef:
d4:73:05:6e:54:28:c5:dd:69:4a:08:d0:3c:ff:f3:36:43:6f:
60:5e:51:ce:2d:06:42:b1:c2:02:3e:59:3d:e1:27:ad:db:52:
7f:54:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:33 2026 by rpki-client