This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: /gwlmEgWanY5J92/Of6AMCCZOdrBOpOKNXYrs/R3MNQ=
Subject key identifier: DF:9D:68:0C:B8:16:E6:BC:6F:36:F8:4F:51:76:F3:52:D7:14:B8:3B
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019C43594C962958A9BCAD9546C29AD1B6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 103B
Signing time: Mon 09 Feb 2026 17:00:51 +0000
Manifest this update: Mon 09 Feb 2026 17:00:51 +0000
Manifest next update: Tue 10 Feb 2026 17:00:51 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: 9M8S7XObKBUbiFLFc4llr4zr7MfJWo4iAzc/yn7+gz8=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:4c:96:29:58:a9:bc:ad:95:46:c2:9a:d1:b6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Feb 9 17:00:51 2026 GMT
Not After : Feb 10 17:00:51 2026 GMT
Subject: CN=df9d680cb816e6bc6f36f84f5176f352d714b83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:4a:3c:70:86:51:e8:17:d6:b8:f1:0c:49:
8b:2c:9d:3b:52:5d:31:6c:33:1e:57:ec:19:1a:5d:
85:5d:1c:c8:bb:d8:a2:7d:47:7e:0a:44:c9:c2:94:
67:83:98:dc:ad:d1:4c:1b:6d:43:30:6a:65:d1:00:
d3:be:2a:93:a1:99:41:37:36:2e:73:82:db:3b:a9:
e0:24:90:64:f8:7e:05:58:d7:3d:f0:11:5f:86:90:
03:95:38:53:60:b4:94:a0:01:46:e3:58:1f:69:7c:
d6:b4:88:67:e9:48:c9:3f:67:68:9f:e3:e1:6c:e1:
db:a3:03:b9:77:a6:3d:3e:9d:8c:0e:3e:0b:93:7b:
24:df:b1:2b:a7:87:cf:fa:70:0a:05:65:aa:df:d1:
e5:f1:92:89:26:b0:9f:e1:18:4b:ca:7b:c5:4b:4c:
1f:ab:c8:ed:17:39:bc:c6:e5:8f:eb:97:64:be:05:
75:67:5c:7e:03:ca:26:ba:b5:d8:e0:70:59:e8:9f:
a1:53:0f:ee:9e:bd:07:0b:c8:5f:ba:1b:24:25:18:
98:b0:e8:20:07:54:c5:ca:7a:e6:05:33:45:d4:c2:
a8:f5:c9:df:c5:fd:4f:f3:8a:b4:26:8e:f1:2b:73:
01:77:5e:85:a8:03:aa:45:72:c9:6b:ac:09:0a:65:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:68:0C:B8:16:E6:BC:6F:36:F8:4F:51:76:F3:52:D7:14:B8:3B
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4e:13:d0:94:56:b5:12:ee:ce:1d:a2:04:17:06:43:54:0e:
7b:f2:a5:0c:66:b4:bf:37:71:17:b2:35:e0:8d:78:b7:c5:03:
7f:25:f6:19:4f:65:1f:50:ac:ad:67:54:88:4f:32:1a:aa:f5:
81:7b:47:7a:c5:c2:2d:6d:43:cd:e4:cc:a0:6d:3a:ca:b5:69:
72:a4:be:8c:b3:af:b0:7a:db:24:70:5b:ee:39:bc:07:7b:2b:
98:d4:a5:ee:48:4d:72:af:32:4e:29:a6:54:b8:ea:47:a2:45:
f6:25:0b:35:bb:c6:76:67:18:b9:42:a9:7a:64:c6:67:56:13:
20:44:c1:61:51:88:c6:2c:97:6b:24:cb:23:ce:ac:2a:2b:c3:
f1:42:c2:25:b2:72:09:07:b9:11:63:f1:db:14:ce:8b:b8:86:
f6:3c:3e:0f:4c:e4:ab:5d:e2:92:4b:78:c1:6c:1e:be:51:7d:
ba:96:72:34:96:c2:d4:36:94:dc:db:94:16:15:d4:cd:c7:0e:
84:8f:6e:a7:88:72:6d:d4:ca:3b:14:72:28:c4:a7:ee:17:cc:
ac:86:92:0b:85:50:35:3e:b5:d2:f3:15:43:1d:20:71:f4:0e:
47:30:dd:e1:3b:de:5a:18:31:a9:56:9e:44:db:ce:10:64:86:
66:b1:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:44 2026 by rpki-client