This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: lNEo0sJ5W+kkr1aXUpLaZ1X68i07VgqorVJkn1FpEKo=
Subject key identifier: E6:5C:74:61:E1:0B:D7:90:96:A7:0C:95:54:98:98:F2:2A:90:69:FF
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019C420FF0A5C321B76AF6F6A7B2AE247C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1541
Signing time: Mon 09 Feb 2026 11:01:06 +0000
Manifest this update: Mon 09 Feb 2026 11:01:06 +0000
Manifest next update: Tue 10 Feb 2026 11:01:06 +0000
Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: YH4fes1ajVKhvi5Gj1/WYriPI/zSKsrv0nH/LkoeBRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:f0:a5:c3:21:b7:6a:f6:f6:a7:b2:ae:24:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Feb 9 11:01:06 2026 GMT
Not After : Feb 10 11:01:06 2026 GMT
Subject: CN=e65c7461e10bd79096a70c95549898f22a9069ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:71:6b:bc:be:3b:31:14:ae:fe:d7:b2:1f:
8c:a4:9d:f3:72:6a:24:8f:42:03:ea:73:3a:53:a7:
fb:92:49:29:54:15:9f:85:29:a5:0b:1c:2d:74:bb:
ec:52:1c:80:da:cf:f3:74:6b:35:15:c7:ad:b5:b7:
cb:f2:e8:f8:69:2a:52:2c:37:8f:44:c8:f8:57:bf:
b6:54:c3:0b:57:72:65:b8:88:06:66:b8:84:31:ec:
2a:c2:0d:34:fa:72:04:49:f9:fc:52:de:62:72:5b:
78:a4:b8:26:55:3c:75:db:d9:bf:2c:27:4c:a7:89:
9a:e6:3c:0f:2e:b2:e7:09:83:55:9d:50:39:b4:e2:
12:18:18:6d:b6:b4:d7:53:59:37:79:ef:6a:68:b5:
41:83:53:ef:8e:84:2c:e1:aa:14:f4:d5:7f:b1:4e:
ee:9f:70:42:3e:8d:3b:14:86:cf:ef:f5:78:53:95:
1b:07:1e:da:7d:73:cb:ad:2d:ab:62:50:9e:dd:95:
72:d9:61:02:64:22:1c:e2:dc:c4:be:21:c8:de:8b:
22:4f:dc:c8:bf:c4:a5:bd:d3:db:86:d9:c4:99:02:
23:33:0f:54:10:a9:ec:45:be:bf:1e:34:cd:bf:29:
dc:5e:9a:eb:d1:8a:e4:e2:19:36:31:ba:af:f4:3c:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:74:61:E1:0B:D7:90:96:A7:0C:95:54:98:98:F2:2A:90:69:FF
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:53:90:59:fd:33:35:6d:de:b8:c4:48:66:32:c3:bb:4a:24:
e4:22:73:65:66:74:74:fe:e0:64:72:38:fc:62:3e:f7:5f:24:
68:7f:6c:5d:24:d8:82:5a:04:ea:a9:68:61:ca:cb:36:72:72:
3a:16:db:32:1b:c9:49:2f:f5:93:66:d0:87:d5:e1:a6:b1:25:
19:1f:55:6f:3c:1d:55:a8:3f:86:4a:1b:54:b8:4b:18:e7:bb:
29:6d:f8:90:6d:54:86:ac:0d:e5:40:53:28:ad:a1:b0:89:69:
65:ae:d4:1e:c9:f1:11:bb:0a:e4:05:68:62:f2:84:2d:34:65:
25:ea:51:c8:12:d5:04:f3:64:ec:96:e2:83:f1:0d:5b:cd:33:
d6:2a:3c:94:ca:64:58:8e:3f:7c:6c:52:50:4b:f7:ca:54:86:
83:17:84:54:8e:96:e2:d4:0f:36:8e:d2:be:c5:1a:b0:cc:5e:
c2:00:a9:8e:99:dd:52:c6:0a:46:00:06:6f:9b:b6:ac:69:2a:
0e:0c:7e:31:e1:46:57:ed:42:fb:20:97:e4:3f:8b:2a:b6:7a:
f4:76:7a:d5:e5:6e:03:ca:95:0a:1a:08:fc:b0:5a:8e:7f:1f:
91:f4:16:ba:74:40:90:e7:df:18:8f:65:a8:07:4c:e2:10:14:
3c:6b:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:07 2026 by rpki-client