This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: DtIEJMAJvSI8UjtlTJ4mICQeSfbCEgIfVZE3yS5wmjk=
Subject key identifier: 1D:08:F6:11:92:4C:E1:10:73:56:37:C9:6B:71:73:11:20:69:D1:32
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019C427DB28682DBD610DC686CD2E8E9BA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 0233
Signing time: Mon 09 Feb 2026 13:00:59 +0000
Manifest this update: Mon 09 Feb 2026 13:00:59 +0000
Manifest next update: Tue 10 Feb 2026 13:00:59 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: HyiRHXox8THLL6tvB1KKPGjqb6sSlzGUCR5/cd7hlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b2:86:82:db:d6:10:dc:68:6c:d2:e8:e9:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Feb 9 13:00:59 2026 GMT
Not After : Feb 10 13:00:59 2026 GMT
Subject: CN=1d08f611924ce110735637c96b7173112069d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:b9:b0:f4:bf:d2:df:3a:dd:5f:67:a8:c9:
50:8c:4a:0e:cf:7e:2f:a3:dc:16:45:1a:92:11:38:
9d:ee:60:fc:8c:b9:d8:32:54:2a:03:b1:65:bd:08:
bb:5d:0d:2b:ba:cf:48:6c:ba:44:85:f1:2e:66:95:
a4:ca:f8:b5:5e:3e:d2:22:71:59:39:67:9b:b9:26:
db:9f:50:aa:0a:ad:27:39:0a:79:67:27:d3:22:7c:
ef:03:6d:fa:cb:21:e7:7f:90:a4:90:bf:a9:b2:c3:
b2:01:e7:86:96:9f:28:3a:ad:5e:ac:b3:6e:9c:af:
5f:b2:6c:26:df:b4:56:6b:d3:04:1c:fb:9c:5c:10:
21:cf:d3:28:91:80:3a:c4:82:21:48:54:57:8e:2d:
a3:4a:aa:3c:9e:a5:ef:dc:ba:81:d3:91:31:18:70:
7d:4f:c4:23:fa:f9:e7:de:cf:42:08:06:e6:d0:a8:
57:90:73:da:c0:4b:8c:e0:ed:6f:d1:fe:87:03:a9:
b4:8d:05:3b:c9:08:b5:db:14:4c:20:d4:76:06:6f:
4d:fe:83:e4:76:2e:05:fb:4e:e7:a3:ca:17:28:46:
b4:3f:7e:67:d5:8e:79:e9:d0:50:0c:01:a9:3e:39:
df:c0:62:65:8a:dd:3b:db:fc:4b:8c:1d:09:a6:42:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:F6:11:92:4C:E1:10:73:56:37:C9:6B:71:73:11:20:69:D1:32
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6c:ee:b8:ae:3b:be:38:ff:55:e8:54:d9:11:96:e5:73:b8:
04:6a:a9:68:b8:df:17:01:72:2e:9c:19:5f:2e:f2:cf:2c:71:
d7:ea:c4:79:a1:5f:ab:fb:ad:57:ff:51:a9:25:1b:4a:cc:89:
cf:24:de:37:69:ef:79:d6:19:39:7e:01:61:33:ca:f2:74:22:
0c:05:7c:5a:ff:f2:10:9c:3a:bd:e9:0d:e8:1a:9f:87:7d:e6:
ca:fa:4e:eb:f7:8d:96:1e:37:11:3f:a4:95:ea:3b:b6:53:23:
79:63:65:cd:b3:84:aa:f2:6e:44:e2:54:95:a8:f0:78:57:88:
46:1a:89:ed:83:37:9d:c2:dd:05:11:f7:05:df:15:c5:79:68:
2a:36:97:0a:11:2b:9d:a7:7e:20:b3:69:8d:f9:71:5c:07:79:
32:c6:a3:a2:e9:7e:2a:4f:97:9e:29:38:87:50:ce:df:52:6d:
4d:79:72:58:a8:b4:02:94:01:55:7c:81:70:be:4e:a1:6e:bd:
24:07:66:e7:23:ed:9f:2d:9a:d5:1c:ce:d3:e4:be:ca:97:17:
19:52:64:c8:6c:01:5b:f5:84:b3:77:63:04:3a:78:f1:1b:9e:
fd:67:cb:ba:f0:4b:5b:30:4a:0c:be:dd:76:ce:95:dc:99:b7:
c1:61:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:15 2026 by rpki-client