This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: xqXeVBQNzA9Q/0x1j13q2vbqqsAsM7aIusZITArhr7Y=
Subject key identifier: 32:3C:67:49:EC:6A:C1:D7:39:28:D7:A5:AD:1B:C4:37:98:73:46:ED
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 019C41A24FFC84B575030A7E429F1F1F5911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 157E
Signing time: Mon 09 Feb 2026 09:01:22 +0000
Manifest this update: Mon 09 Feb 2026 09:01:22 +0000
Manifest next update: Tue 10 Feb 2026 09:01:22 +0000
Files and hashes: 1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: jhE73XH0nKqvd5Ucb0KQLMZsspX/Gg91Vxf3MXALaNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:4f:fc:84:b5:75:03:0a:7e:42:9f:1f:1f:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Feb 9 09:01:22 2026 GMT
Not After : Feb 10 09:01:22 2026 GMT
Subject: CN=323c6749ec6ac1d73928d7a5ad1bc437987346ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:25:48:ec:19:a4:5e:e7:07:55:04:f7:89:
f2:86:98:af:73:b5:3c:ae:a9:1b:59:f5:b3:62:f0:
f8:7a:b3:2f:f2:37:66:bc:83:a2:84:61:6b:67:0e:
92:bb:17:98:09:a5:4d:4a:6f:db:40:40:e5:0f:ca:
e8:2b:06:52:de:e5:cb:a4:99:61:1e:c3:6a:19:e9:
04:77:94:a1:25:29:85:7a:6d:1a:fd:50:90:ae:50:
fe:1f:54:02:1b:1b:01:8f:f8:98:df:6e:c2:82:0d:
a5:74:f1:88:f7:da:b8:f8:16:bc:ae:5a:ed:b4:ba:
9a:dc:3b:d4:d3:3c:15:59:03:26:42:b1:2e:9f:14:
d5:8a:3e:b6:fb:c3:3b:28:62:b4:39:7c:22:bd:ca:
73:f1:b3:0c:12:14:80:5d:eb:e2:41:87:7f:c5:a8:
7c:79:de:f1:77:4f:46:1a:2a:68:29:67:a0:94:e1:
bf:36:ba:77:5b:73:b7:ad:fe:09:00:5b:89:72:bb:
71:6f:58:78:08:19:17:8d:fa:91:21:1c:8d:6f:3c:
ac:41:42:35:1f:a7:56:e6:2f:07:09:c5:ad:36:df:
8a:13:33:22:3c:9d:4d:27:e0:6e:41:1d:dc:ae:d1:
ad:e4:20:ac:50:9c:7c:fb:9d:9d:2e:0c:5b:6c:a7:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3C:67:49:EC:6A:C1:D7:39:28:D7:A5:AD:1B:C4:37:98:73:46:ED
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e5:b8:5f:4b:a7:18:91:06:ac:19:af:cb:5e:70:08:d3:ea:
d9:8c:a0:f8:e2:c0:32:e2:82:7f:e7:44:72:eb:d2:66:67:3b:
ab:cc:4b:63:bd:f8:96:9a:20:3c:ca:aa:fe:df:03:c1:7d:90:
75:ba:e1:2f:91:82:eb:1c:42:63:25:34:cf:00:43:19:33:5a:
92:c7:4d:b4:f5:d0:ab:10:ee:b0:ae:e7:58:fe:63:1f:3e:ad:
22:c5:d8:fa:45:d3:93:3d:d6:c8:3b:a0:1e:c8:65:a3:db:29:
24:2b:97:66:a9:da:ba:dd:04:42:ee:b0:ce:4e:09:99:c5:41:
30:63:dc:c4:36:73:ef:3a:00:e7:9b:b7:0c:92:58:25:b2:43:
eb:d0:10:43:1f:02:87:43:61:51:d3:d5:f5:e1:4f:7d:24:61:
07:1a:dd:2c:6b:bb:c8:63:cb:13:44:2b:dd:e9:73:66:e0:45:
9b:19:73:d6:a1:44:80:a0:87:d4:e2:46:7f:c7:78:96:17:4d:
75:79:cf:12:e8:7b:b1:da:a4:92:3c:fb:3d:d9:f5:cc:17:9c:
bf:fe:37:db:87:74:af:9c:57:c7:a8:34:78:ff:a5:6f:10:33:
9f:2c:01:86:2b:ee:dc:57:a2:d0:1e:e9:f9:62:90:25:3a:bc:
a0:eb:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:45 2026 by rpki-client