This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File: Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier: 98jsEkgnZRZka1I+XkKvfincXJ3cJZ7Y4TV6V1n5GDY=
Subject key identifier: 85:C8:C3:D4:57:77:43:4B:A3:FC:5C:41:73:6E:1C:73:35:88:CF:8F
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 019C438FDF64BAB4D3C08ED08888160FF7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:00:28 +0000
Manifest this update: Mon 09 Feb 2026 18:00:28 +0000
Manifest next update: Tue 10 Feb 2026 18:00:28 +0000
Files and hashes: 1: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: PjXCUnkmuYRokKae1OlXYgsgXDh4vr05MkhaI3y1oaA=)
2: fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa (hash: 7v/5RLR7Q81lEDWcKmADnfeMIsDhKBKucowaJiP2+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:df:64:ba:b4:d3:c0:8e:d0:88:88:16:0f:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Feb 9 18:00:28 2026 GMT
Not After : Feb 10 18:00:28 2026 GMT
Subject: CN=85c8c3d45777434ba3fc5c41736e1c733588cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:2d:64:49:af:ac:e4:9a:8b:b7:7d:23:7c:
dc:3d:7b:2a:76:af:ba:26:05:cd:13:6a:ea:ab:0f:
70:e5:a7:1f:07:27:2f:45:7a:a3:1e:a7:61:82:6c:
59:f7:8b:23:f7:0f:da:f3:53:16:67:b3:43:c2:a7:
55:4e:c6:fb:54:2e:7f:40:d0:e5:16:13:d7:48:25:
46:8b:00:d0:62:47:8f:e4:db:36:db:86:ef:25:df:
70:4a:b7:2d:ee:30:39:d8:a7:b4:8d:36:7a:c9:c0:
dd:b0:5f:2c:3b:5b:51:e6:a2:9c:45:77:4b:06:c3:
28:fc:10:32:63:32:e5:1c:ea:71:a7:c4:2e:46:23:
fd:41:3c:ed:9a:81:de:f2:3e:5a:b6:b7:71:fe:47:
b8:ff:65:d9:f0:a5:d3:ef:7b:05:54:20:9a:5b:d3:
82:e0:4c:45:e9:51:f2:10:00:cc:a2:33:3e:d1:91:
9f:ac:be:1f:27:03:55:8b:3f:64:bd:e9:71:47:76:
4a:b5:59:7c:57:e9:10:6f:47:83:d5:8c:2d:96:0d:
46:ae:d2:c0:bf:63:dd:eb:d1:96:99:38:88:f8:b2:
11:d7:4f:1f:ec:5e:3b:d9:95:ca:3c:7b:0e:16:f3:
9a:9b:fd:82:d9:2c:e4:db:5a:1b:1e:10:f8:04:59:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:C3:D4:57:77:43:4B:A3:FC:5C:41:73:6E:1C:73:35:88:CF:8F
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:ce:0a:5f:75:ab:50:f6:79:26:1e:1d:1b:97:1b:d6:80:
bc:9b:8a:8d:e1:9d:53:80:1b:7b:79:c4:1f:e6:83:44:04:07:
bd:42:d6:c5:30:d8:bf:56:9e:1b:ed:60:ac:20:e2:83:33:f2:
b2:3d:d0:07:1b:01:6f:58:a4:58:25:f5:15:a9:ea:bf:c4:0c:
62:4f:05:52:8e:05:43:b5:be:b8:a6:64:5c:e3:6f:55:52:f0:
6b:4c:cb:47:93:f4:c3:30:75:dc:51:a6:65:24:f8:e7:0e:3f:
22:9e:3c:ea:19:d9:7d:94:2d:f4:72:25:b2:8d:b8:3b:8a:6c:
52:45:15:f1:55:51:47:83:03:b1:03:28:7f:b0:01:fb:6d:58:
74:04:fa:68:ed:0e:b7:51:59:15:b3:57:59:7d:66:04:1f:4e:
bd:21:ce:7b:1b:5d:de:f1:35:98:3c:20:45:53:c3:d6:ed:2e:
7e:11:f7:85:cf:73:77:76:ee:67:9f:60:40:63:c7:2b:b9:a5:
e6:01:9f:01:c4:8f:22:3d:78:25:f3:57:77:a1:3b:ca:17:2a:
bf:40:8a:ac:e5:f9:db:f4:a4:45:fd:a6:b9:c3:15:bf:d9:d3:
10:11:81:0b:4d:f5:23:75:bc:e1:10:84:a8:1b:60:51:4f:c4:
2a:63:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:53 2026 by rpki-client