This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: xfRoF7V3GPOzoKycRUgw2gOfctN1LNenIAXpyyjSSQc=
Subject key identifier: AB:35:91:1F:D5:78:43:22:2B:D4:8F:4D:40:C6:33:81:07:77:EB:C3
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019C42EB26832A14604A4B9C6536181B1A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 023B
Signing time: Mon 09 Feb 2026 15:00:32 +0000
Manifest this update: Mon 09 Feb 2026 15:00:32 +0000
Manifest next update: Tue 10 Feb 2026 15:00:32 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: GTVdo4JR4MlqB9Az8fYbtnQmzPd806MvLLaAgHGpHic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:26:83:2a:14:60:4a:4b:9c:65:36:18:1b:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Feb 9 15:00:32 2026 GMT
Not After : Feb 10 15:00:32 2026 GMT
Subject: CN=ab35911fd57843222bd48f4d40c633810777ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:25:8a:af:9f:39:b1:e6:85:b4:86:d6:94:
a2:19:bb:d5:9a:0f:c0:6b:f1:f1:16:d9:41:e7:84:
4e:bb:d0:b1:73:6d:bd:71:88:f0:e0:3c:24:17:a6:
8a:c3:12:3c:9a:36:97:4e:8c:a0:5e:02:3a:54:78:
fa:1a:1a:6e:05:56:86:60:fa:9a:0c:60:05:9b:45:
8e:5e:16:6a:e2:2a:55:3c:b6:98:da:e5:7b:89:0c:
36:3d:58:60:ec:82:bd:f1:8a:2a:29:c6:7a:d0:b6:
66:27:d5:98:bd:8f:24:77:52:10:c1:8c:5a:b3:4c:
fc:72:5e:d6:06:f3:a3:64:97:d1:d3:97:83:71:6c:
31:94:5e:a3:9d:0c:14:7c:dc:31:a8:79:20:5b:6c:
43:8b:03:4f:39:db:5a:32:d0:9f:a7:dd:45:98:cf:
62:fb:7c:6e:4c:f0:7f:86:6a:78:36:47:da:aa:02:
1b:8d:7c:1b:1c:bc:06:93:e3:2d:f5:7b:8b:a3:d3:
85:71:f2:01:df:87:06:ac:f6:1b:8d:1c:0d:04:f8:
95:3e:2b:76:2c:e3:3a:40:2e:04:c7:70:04:e7:c5:
36:69:14:dd:29:ea:03:e0:14:70:18:5a:20:04:2e:
ce:1e:c3:17:fe:ad:03:40:e4:65:b2:39:77:df:1c:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:91:1F:D5:78:43:22:2B:D4:8F:4D:40:C6:33:81:07:77:EB:C3
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:44:1d:23:e8:42:c5:38:3e:af:da:0c:9c:8c:64:32:3f:
c6:75:91:c4:44:68:8f:5a:6b:57:30:09:75:61:71:97:97:39:
36:2f:d1:57:6d:e1:03:46:9c:46:12:d9:5e:83:1f:f6:22:62:
9d:47:6d:68:f1:07:2f:36:13:1d:41:dd:0b:31:56:45:2b:c0:
37:89:b8:03:d2:02:e3:e0:7c:b0:85:4c:e1:a0:fd:69:6c:05:
e4:b9:15:52:b6:6d:ac:dc:43:50:42:f9:25:f1:cd:2d:3c:6d:
1e:5f:5a:e3:75:33:33:a7:fb:ba:32:5a:22:fa:06:75:f1:3d:
0a:4f:8f:45:59:da:c8:55:5f:b5:3c:3b:ae:e5:11:95:51:68:
07:a2:02:3a:79:7a:64:2d:a3:55:5a:c1:cf:5e:28:63:77:43:
5b:82:7a:98:25:04:97:8d:e4:56:1e:c9:db:0a:51:3d:24:3b:
86:5a:4d:5c:5f:d8:72:89:f4:e6:76:96:7e:35:99:82:63:86:
00:02:6e:82:16:f0:1e:5b:7e:dc:a6:ca:c6:da:a4:1e:44:24:
e6:9c:ed:84:a0:ef:ab:2e:25:87:50:bd:85:42:4d:fd:45:89:
78:a1:c6:76:07:09:ea:a7:4a:4e:74:a8:08:b9:c4:c7:f7:c1:
74:6c:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:05 2026 by rpki-client