This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: SIiRpnu2G1mrHMxdlYvr8+ountPzAlElmqa538e+Qe4=
Subject key identifier: 47:27:AB:0B:52:31:64:2C:14:9E:5D:BE:CE:DB:7C:46:AB:C9:75:1E
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019C375542DCA9B092195382F90732563E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 103B
Signing time: Sat 07 Feb 2026 09:01:00 +0000
Manifest this update: Sat 07 Feb 2026 09:01:00 +0000
Manifest next update: Sun 08 Feb 2026 09:01:00 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: WzNzNXNyQJShlMcMl51VFo0A1+4iNPgPWcSFW+ciVKI=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 02:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:55:42:dc:a9:b0:92:19:53:82:f9:07:32:56:3e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Feb 7 09:01:00 2026 GMT
Not After : Feb 8 09:01:00 2026 GMT
Subject: CN=4727ab0b5231642c149e5dbecedb7c46abc9751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:d4:92:f8:57:5b:86:ac:76:9f:c8:2f:33:
30:73:1a:95:55:a2:ae:f4:b7:4f:01:8e:71:83:bf:
4d:c2:2a:e9:0c:f9:3f:0b:9a:7d:f2:33:ee:b4:71:
9f:74:2f:2a:9f:9a:d8:6d:da:8f:c1:b9:f0:fb:ca:
87:a2:29:1e:ef:18:08:cc:79:01:03:d9:61:c5:82:
99:35:7f:9a:16:dc:17:5e:cc:02:31:98:b5:82:de:
d6:6c:79:8b:cb:a3:d6:8f:6b:0e:3f:ec:fa:ac:71:
de:3d:90:da:a3:14:5e:fb:17:d4:a5:df:a8:ad:a8:
bc:c9:a2:2c:c0:38:d9:52:75:ed:6b:47:c8:d9:b5:
c9:5f:42:55:f8:44:9b:e0:d0:81:bc:27:62:da:de:
2f:58:c1:20:ed:26:b4:bb:0b:a7:d4:44:de:02:ec:
0d:0c:91:dd:fa:8b:aa:6f:33:c2:b3:53:7b:97:7f:
3f:82:a8:fa:e7:3f:51:13:fc:f8:05:82:4b:05:57:
e8:9c:bc:b2:e9:6d:13:55:c8:bb:82:42:10:8b:18:
1c:e8:07:cd:66:a9:14:c0:48:ab:1a:03:ca:38:93:
6c:6d:7c:62:7a:5d:12:29:67:b1:b3:97:e2:82:27:
bd:71:83:8d:2b:a0:2d:3a:d9:01:7b:9e:04:8a:02:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:AB:0B:52:31:64:2C:14:9E:5D:BE:CE:DB:7C:46:AB:C9:75:1E
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:74:26:c8:60:ff:01:3c:ba:c2:50:41:f6:ee:9e:b7:05:
f7:2e:96:b7:db:8a:23:c1:4b:48:f2:7c:da:e9:57:2b:53:de:
3e:87:62:56:a8:b9:7e:56:b9:d9:2c:d1:d5:9e:74:67:98:34:
b2:6e:1c:19:1c:5a:f3:50:58:3a:09:e6:ac:99:91:99:eb:80:
f6:2f:83:f1:ec:ad:57:b7:8a:5b:19:20:f9:34:f5:0e:50:07:
54:51:b7:83:1d:26:c4:b6:23:e3:db:9a:b9:77:40:c1:f3:3e:
f8:48:5a:92:8f:c3:ec:82:c2:79:01:35:f1:08:10:c8:ee:2e:
63:1a:29:b1:61:f4:bb:67:ff:ee:77:9f:8b:3e:32:ef:e2:8b:
fd:78:9a:13:f5:69:04:d4:10:5a:ec:ba:24:40:f9:9c:b6:47:
3a:3a:02:e3:75:96:66:1a:3a:84:ed:7a:57:c0:f3:2a:0d:7e:
66:97:0f:47:66:63:8f:5d:3e:9f:46:8d:80:03:77:45:4c:f6:
30:66:b3:62:38:c6:03:21:dc:af:07:c4:af:b8:74:cb:35:0e:
97:e1:d8:6d:07:d8:8d:cd:fc:3a:bd:2d:6c:b5:e1:f4:63:53:
97:3e:3f:de:1a:7f:b1:40:92:d0:ad:d5:bb:1c:4e:4a:8a:47:
90:72:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 12:17:02 2026 by rpki-client