This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: xCQ+DFu2yeXW8V4nhBGHFVleiHf1r2eWsQXXGHOs0JQ=
Subject key identifier: 9B:C9:00:4D:C6:94:5B:F4:6D:F8:F3:56:99:19:7D:36:69:F9:41:A5
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 019C427D9DC673F30130E47BDCB48FA8960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 10AE
Signing time: Mon 09 Feb 2026 13:00:54 +0000
Manifest this update: Mon 09 Feb 2026 13:00:54 +0000
Manifest next update: Tue 10 Feb 2026 13:00:54 +0000
Files and hashes: 1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: +GFxBVYpU3e8f5/WdH3uilpW5TixvH4ifFeJN1Nf5FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:9d:c6:73:f3:01:30:e4:7b:dc:b4:8f:a8:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Feb 9 13:00:54 2026 GMT
Not After : Feb 10 13:00:54 2026 GMT
Subject: CN=9bc9004dc6945bf46df8f35699197d3669f941a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:d6:c3:f7:2e:2f:bc:00:c7:d9:56:16:6b:
32:73:3e:0e:61:36:3b:54:24:c8:07:dc:c2:93:2c:
1c:24:9d:8f:6e:c2:f6:5c:b8:2c:92:7d:74:c3:6d:
dc:05:c3:3c:59:5e:96:ea:9c:39:6a:99:87:ab:82:
7b:30:3f:ff:d6:26:5e:90:7f:cd:8d:44:81:dc:70:
d9:23:63:71:99:c8:ae:81:65:63:73:c5:58:57:10:
d3:e9:a7:9f:84:ed:cf:86:61:41:ec:7d:1c:7a:e2:
4a:11:a9:1c:a5:40:c2:69:ea:69:55:e5:51:4c:d8:
38:73:83:5a:9f:71:81:be:04:d8:20:0f:6a:9f:50:
46:72:30:a7:22:50:f4:61:a7:3a:84:d5:a0:85:19:
e6:0c:54:35:8d:40:3d:1d:49:7a:90:74:42:a3:e6:
a2:69:9b:43:29:8a:ab:c4:0f:77:e4:a0:09:2c:be:
05:40:d0:e8:ad:4a:a9:e4:c3:3c:86:25:e8:5f:e1:
7b:28:34:8d:ef:be:f3:ae:23:62:2f:6f:66:b9:f6:
1b:25:1b:b6:8a:4e:95:33:14:e1:ce:2f:1c:5a:a5:
7f:37:03:5c:ae:dc:dc:e7:28:2f:ab:06:04:e4:2d:
2b:50:6f:73:02:8f:77:09:83:3d:85:82:86:ac:34:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:00:4D:C6:94:5B:F4:6D:F8:F3:56:99:19:7D:36:69:F9:41:A5
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:54:de:e3:0e:7f:09:e9:31:23:d4:5c:da:c3:3c:6c:14:d7:
60:ac:82:84:c0:29:60:47:cb:c9:6e:e3:fd:48:26:cb:06:8e:
70:59:e1:f6:18:bf:c5:c3:56:3d:ed:24:a9:22:70:87:59:7a:
c9:ab:5b:7a:33:55:48:a4:80:56:59:89:1f:2d:87:28:9d:b6:
bd:bc:f5:a9:c5:b6:26:82:2d:0e:94:5d:4f:e5:6d:d4:89:c2:
ba:89:cc:49:7c:64:0d:cc:b2:11:3d:be:1b:e7:65:22:69:b2:
21:81:19:ab:3d:9d:cb:3b:ff:7f:73:7d:63:71:9b:c3:5a:fc:
cd:c5:ab:bb:96:2e:e0:db:76:fd:3e:54:4a:ca:18:b7:0d:a6:
81:fb:b4:a5:d7:b2:f9:d8:68:ae:08:d7:dc:30:60:b7:fc:51:
05:0d:34:3b:17:3c:b6:c6:a3:4c:a3:52:0d:64:ff:7e:d4:d4:
a0:fa:9a:73:9c:f9:98:9e:93:4e:c0:77:d6:73:61:fb:df:5b:
7f:d4:3b:3c:3a:ea:3f:88:02:fb:22:27:ef:60:db:5f:b7:10:
d6:c8:82:dc:98:fc:04:f9:ed:d1:c2:0c:1a:fa:95:48:74:3e:
c0:c6:31:b7:68:87:c5:27:11:21:3e:e5:4b:99:64:df:88:df:
cb:9e:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:38 2026 by rpki-client