This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: K3ALk/ptuY229iSnlCHDJ+mfM0zErHuHE3lPa8sL/ps=
Subject key identifier: 3A:23:27:EA:F1:13:66:B5:0C:BC:A2:88:AE:EB:5C:42:CB:01:51:4E
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 019C438FD58EC228608BD9E1EA8CC25209CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 03BD
Signing time: Mon 09 Feb 2026 18:00:25 +0000
Manifest this update: Mon 09 Feb 2026 18:00:25 +0000
Manifest next update: Tue 10 Feb 2026 18:00:25 +0000
Files and hashes: 1: 93ujOdlhvkLDrlQTo0WR0HGkUOA.roa (hash: CSiF98tZ8HUGXFu9Nj6Ewi7SDw/vSSQkj6eyMK8B53I=)
2: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: XAGIH7pxqXbDDCeYBDevX04Ck3sqqLk4Q3BiWuYvwVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d5:8e:c2:28:60:8b:d9:e1:ea:8c:c2:52:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Feb 9 18:00:25 2026 GMT
Not After : Feb 10 18:00:25 2026 GMT
Subject: CN=3a2327eaf11366b50cbca288aeeb5c42cb01514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:24:10:c8:09:f3:b4:69:6f:d1:c6:a5:62:13:
3f:4b:49:bf:0d:23:b2:de:e5:01:5b:dc:93:8d:de:
c3:86:6e:bd:e2:26:2e:51:e6:f8:45:4f:f9:09:f2:
7f:91:ef:c0:31:7c:d6:be:c9:91:f7:a8:9c:d3:3f:
6a:b0:13:8f:d7:66:cd:ca:61:c1:58:f2:e1:9a:00:
2c:72:a8:48:7c:69:1a:86:d1:b5:78:a5:1a:8d:2e:
a2:91:ee:e3:0d:ad:2e:1f:c2:c2:0d:3e:1f:fa:63:
b9:4a:bd:75:f7:4d:27:5a:a7:5a:8c:ec:7b:f0:60:
c0:f3:9b:f9:3d:3c:13:bc:e1:23:76:0d:c8:21:c3:
49:51:14:7a:c5:83:cf:a3:c4:3a:1a:f4:2f:eb:88:
87:a4:65:4b:15:45:8b:7f:e7:0a:7d:aa:66:2d:1a:
81:53:e6:38:02:b0:31:99:60:1d:99:ca:27:fa:36:
c0:c2:68:ce:80:74:c0:32:83:80:83:1f:05:7b:3b:
bf:01:a8:fc:d4:d0:51:6d:13:d5:bd:24:8c:78:31:
79:ba:54:dd:66:a0:ba:af:05:56:05:26:eb:0d:8a:
31:93:6d:19:1a:c5:ae:72:20:af:23:ba:13:a5:03:
74:f7:28:68:4a:43:63:57:23:b1:90:ff:33:02:df:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:27:EA:F1:13:66:B5:0C:BC:A2:88:AE:EB:5C:42:CB:01:51:4E
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:58:8c:dd:e0:be:0c:5e:f9:9f:68:76:07:5a:e1:05:fb:a7:
37:53:f5:d7:0e:c9:aa:46:7f:5d:1b:2d:d2:df:43:c9:c3:2b:
0a:be:e3:42:3d:18:2e:ab:f8:3f:ce:47:b8:c7:86:23:b5:3a:
6f:da:7f:d5:22:d4:a7:cd:36:97:e6:e6:70:5e:66:a0:ed:8e:
04:a1:b6:1e:75:f1:eb:69:67:a9:b0:7f:59:16:35:69:41:3e:
c4:35:b5:75:51:48:82:1b:51:e6:e0:66:0d:16:ea:a4:85:df:
f7:6c:11:23:ad:55:be:78:97:d5:b5:6b:85:76:b0:20:cd:a8:
ed:9a:c5:ab:e3:00:9f:96:03:10:87:9f:51:7e:e5:6c:bc:ba:
0d:d1:54:08:1d:40:ba:e5:7d:fb:54:fc:67:ea:e6:01:04:aa:
94:66:4d:54:32:be:60:c8:d7:a8:d3:73:b6:e4:40:7f:a8:4d:
59:00:0e:ac:65:ee:70:95:ca:e5:f0:71:5f:d1:c4:c9:d3:ed:
29:3c:f1:e3:c3:59:9a:30:fa:f4:3e:de:2f:41:a2:bc:40:ef:
83:45:36:68:10:ac:b9:e2:fa:3f:7c:03:6f:32:ef:ba:30:f5:
c1:ce:73:ad:18:84:87:a5:6f:91:31:ea:e4:3f:21:d4:8a:e4:
56:27:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:14 2026 by rpki-client