This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: OJ+FtSEsUgGD2LO6sYZN2UZ+vu2p9SZkL5MaRipTBQ8=
Subject key identifier: 40:AB:2E:AA:52:26:20:2D:1C:58:C6:48:1D:12:4A:F8:5F:19:59:41
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019C438FD951C8180990CEA5EDE608FE4F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0ECF
Signing time: Mon 09 Feb 2026 18:00:26 +0000
Manifest this update: Mon 09 Feb 2026 18:00:26 +0000
Manifest next update: Tue 10 Feb 2026 18:00:26 +0000
Files and hashes: 1: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (hash: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: Zo5zsllBJaYwjqVHUbUpIdH1iEmzn81tSKLStIq+2Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d9:51:c8:18:09:90:ce:a5:ed:e6:08:fe:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Feb 9 18:00:26 2026 GMT
Not After : Feb 10 18:00:26 2026 GMT
Subject: CN=40ab2eaa5226202d1c58c6481d124af85f195941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:9d:3b:07:36:6d:40:f7:cc:0b:e8:65:d4:
6e:4a:ea:5a:07:02:5f:fe:6b:d2:49:27:07:48:8a:
b8:80:00:ec:e2:21:00:71:82:47:ed:08:35:63:8d:
dc:98:42:0c:75:eb:0c:c3:32:d8:ec:6d:5a:8f:a6:
8b:27:24:0b:d0:73:08:98:a4:0b:16:56:8c:c1:a9:
c6:16:01:3f:01:5f:94:22:9d:3e:18:d1:14:89:70:
f0:f7:2d:a9:ff:34:90:e8:86:dc:a3:33:f0:bb:78:
04:e3:5c:7b:3e:b5:d0:a7:ca:1d:93:a8:9f:e9:b8:
5b:ad:5b:2c:66:9e:63:c6:b2:f2:29:69:28:a1:0c:
27:b0:2c:ca:10:05:3c:4e:a2:4a:2e:1a:b1:6a:6c:
f2:38:4d:34:a2:e8:ee:85:4c:41:93:c9:7a:68:c2:
62:05:43:91:68:cd:01:a4:e6:01:d8:66:62:7d:08:
ee:a0:1d:f6:e4:16:84:ee:0b:ad:0f:5b:63:c2:15:
a0:d3:f9:49:24:3f:1f:93:ef:4c:83:01:1f:b9:8a:
75:eb:e1:a9:7c:5f:e3:9f:00:2c:6d:28:6b:4c:29:
39:95:1f:77:24:81:0d:99:f3:d3:06:89:02:cd:8b:
01:b8:9f:a0:b3:55:d0:94:35:f5:19:a0:6b:7f:c4:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:2E:AA:52:26:20:2D:1C:58:C6:48:1D:12:4A:F8:5F:19:59:41
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:14:77:20:c0:2f:4c:72:37:5d:a8:bf:74:69:bf:7b:37:d9:
a9:df:e3:43:17:25:47:79:b9:fb:bb:d1:df:0a:fd:c6:ac:74:
0a:aa:8f:70:3f:5a:1d:9c:c8:5d:fd:02:8f:38:c4:e3:1b:60:
86:fd:27:7e:fa:17:28:da:09:78:64:4a:ce:21:d6:95:f3:f5:
82:67:09:4c:6d:a8:1f:48:6c:c2:bf:03:b5:06:28:af:84:ad:
47:f0:ef:fb:3f:3d:63:4c:2b:b2:73:50:1e:57:03:0d:d6:03:
45:64:33:d8:f3:54:06:df:ac:0b:04:3f:77:47:f0:ae:89:12:
3e:8f:2b:8e:d7:0f:63:ac:5c:51:c8:8f:85:49:15:6d:96:f4:
e7:16:6c:0d:39:c3:4c:56:a3:19:9d:76:cf:e8:6b:8a:f1:0a:
da:55:ac:09:a3:45:8d:06:0e:5a:cf:66:a7:78:6c:c5:35:20:
b8:aa:13:af:28:1c:75:90:00:32:0d:53:4d:82:95:cd:5b:c5:
fb:dc:d3:2e:06:f6:5c:23:99:e4:06:61:9a:c4:2b:3c:ae:1a:
e8:e0:49:b6:b6:b5:a0:56:f6:4f:5b:00:02:eb:cf:65:84:09:
ca:e9:06:fa:5b:7f:af:e2:cb:6d:b9:eb:cf:4b:1d:40:5a:6a:
d8:9c:f8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj9lRyBgJkM6l7eYI/k+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm
NDdlM2IwHhcNMjYwMjA5MTgwMDI2WhcNMjYwMjEwMTgwMDI2WjAzMTEwLwYDVQQD
Eyg0MGFiMmVhYTUyMjYyMDJkMWM1OGM2NDgxZDEyNGFmODVmMTk1OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wKdOwc2bUD3zAvoZdRuSupaBwJf
/mvSSScHSIq4gADs4iEAcYJH7Qg1Y43cmEIMdesMwzLY7G1aj6aLJyQL0HMImKQL
FlaMwanGFgE/AV+UIp0+GNEUiXDw9y2p/zSQ6IbcozPwu3gE41x7PrXQp8odk6if
6bhbrVssZp5jxrLyKWkooQwnsCzKEAU8TqJKLhqxamzyOE00oujuhUxBk8l6aMJi
BUORaM0BpOYB2GZifQjuoB325BaE7gutD1tjwhWg0/lJJD8fk+9MgwEfuYp16+Gp
fF/jnwAsbShrTCk5lR93JIENmfPTBokCzYsBuJ+gs1XQlDX1GaBrf8SYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECrLqpSJiAtHFjGSB0SSvhfGVlBMB8GA1UdIwQY
MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt
YmRhNTM0ZTZmNjQzLzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz
LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxR3IMAv
THI3Xai/dGm/ezfZqd/jQxclR3m5+7vR3wr9xqx0CqqPcD9aHZzIXf0CjzjE4xtg
hv0nfvoXKNoJeGRKziHWlfP1gmcJTG2oH0hswr8DtQYor4StR/Dv+z89Y0wrsnNQ
HlcDDdYDRWQz2PNUBt+sCwQ/d0fwrokSPo8rjtcPY6xcUciPhUkVbZb05xZsDTnD
TFajGZ12z+hrivEK2lWsCaNFjQYOWs9mp3hsxTUguKoTrygcdZAAMg1TTYKVzVvF
+9zTLgb2XCOZ5AZhmsQrPK4a6OBJtra1oFb2T1sAAuvPZYQJyukG+lt/r+LLbbnr
z0sdQFpq2Jz4NQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:03 2026 by rpki-client