This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: ++WHryLsybHA9o0q3SHF12kLJI1KLxbwR8/iQ7CtqAM=
Subject key identifier: 86:16:49:ED:A5:95:09:CD:CB:FD:8C:AB:B7:82:4B:98:07:A6:89:58
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 019C43593796055756C6088CA82B76952000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 0BBB
Signing time: Mon 09 Feb 2026 17:00:46 +0000
Manifest this update: Mon 09 Feb 2026 17:00:46 +0000
Manifest next update: Tue 10 Feb 2026 17:00:46 +0000
Files and hashes: 1: IGqxlIKv9pQSduOZbyMGfJbT9RI.roa (hash: YZCvKKKTyHwkIul63DB5RjCHdqSG34xePQX/iOEjVC8=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: KCcVk3rb3PSSIboREq12QD9itNrrG/o8GK4vTOl0ki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:37:96:05:57:56:c6:08:8c:a8:2b:76:95:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Feb 9 17:00:46 2026 GMT
Not After : Feb 10 17:00:46 2026 GMT
Subject: CN=861649eda59509cdcbfd8cabb7824b9807a68958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:d8:10:d6:1a:ec:da:bb:c4:ec:73:a4:8b:
37:e1:e0:1d:5d:16:53:6e:4c:d3:9e:4b:55:1a:55:
79:f1:f4:56:6c:a8:d0:4d:1c:d8:02:31:47:19:47:
aa:12:7e:d2:a3:47:b0:f7:21:cf:e4:93:6c:b9:0c:
1f:ed:02:46:e2:ec:3d:f6:86:c7:e4:a2:44:b6:17:
63:6e:fc:93:d3:84:fa:9d:c5:67:d0:a5:71:2f:ff:
7f:44:06:3d:50:36:48:c9:59:13:73:f3:5e:45:f5:
59:fe:ff:17:a3:3c:bf:31:01:90:cc:6f:04:fb:1a:
e0:be:48:f2:9d:2a:92:6c:f7:ff:4b:f1:42:db:3c:
7f:5b:ff:a4:47:d5:f4:9c:11:8b:0d:4f:af:e0:7b:
a7:75:7d:de:3d:b5:df:bd:2d:0b:e0:cc:aa:7c:7d:
29:49:63:5e:06:e4:7c:25:e7:5c:b7:53:5f:d2:b2:
da:f1:ca:2b:bb:61:0d:b3:be:b3:da:39:d8:ab:bd:
3b:22:e4:8f:94:ab:5a:ea:76:01:d0:83:2b:62:10:
74:89:84:cd:51:5f:5c:49:34:d8:36:34:d0:23:83:
9d:d6:24:20:e1:d0:83:df:ed:cc:7b:27:71:1a:86:
eb:62:e7:ab:58:57:9f:9f:ff:f9:76:d8:d0:ed:8e:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:49:ED:A5:95:09:CD:CB:FD:8C:AB:B7:82:4B:98:07:A6:89:58
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:74:d8:5b:1e:cc:d4:94:fc:e4:9d:69:c1:e5:cf:04:72:
44:29:59:b6:e8:0c:50:30:0d:eb:fd:77:42:1e:5d:29:8e:17:
2a:64:55:fb:0b:ba:eb:3e:c1:ea:f2:a4:63:3f:f4:2f:59:1a:
1a:9c:e4:f4:7b:7a:66:d6:1f:d0:72:42:73:d2:35:d7:25:1a:
14:bf:0f:c5:26:e5:83:81:e2:28:d9:31:44:f6:58:6f:19:36:
0b:43:54:ef:78:b7:95:77:cf:23:b9:d2:39:bf:5d:fa:d1:f1:
1c:87:e7:bb:01:de:42:f0:92:27:59:6f:8a:73:36:7a:04:f3:
48:ee:64:90:04:39:ea:c5:19:ce:b5:11:a4:40:64:f9:1b:6b:
9e:99:d7:c7:f8:95:70:e3:86:e3:68:d6:9e:41:7c:c5:89:2b:
6f:5f:f3:6f:39:d6:49:d6:fd:41:c0:66:38:2d:c4:6d:40:1c:
49:a9:a4:2d:ec:8c:e9:8c:40:30:8f:3b:c2:db:11:2d:3d:68:
04:6d:ca:ff:1e:9d:6a:43:7d:02:b3:34:50:64:5c:3b:0f:97:
f0:1a:1b:7e:13:40:d6:bb:64:f9:49:d5:8b:a3:7a:cc:5c:e6:
5f:67:fa:47:b4:f3:fd:93:de:6a:d1:11:1c:be:19:f0:50:cb:
6d:fa:90:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWTeWBVdWxgiMqCt2lSAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTU2ZTY5Zjk0NDRjMmIwNjY4NzI1NjA4NWI2YTdhNGU5
ODg3ZjYwHhcNMjYwMjA5MTcwMDQ2WhcNMjYwMjEwMTcwMDQ2WjAzMTEwLwYDVQQD
Eyg4NjE2NDllZGE1OTUwOWNkY2JmZDhjYWJiNzgyNGI5ODA3YTY4OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAzYENYa7Nq7xOxzpIs34eAdXRZT
bkzTnktVGlV58fRWbKjQTRzYAjFHGUeqEn7So0ew9yHP5JNsuQwf7QJG4uw99obH
5KJEthdjbvyT04T6ncVn0KVxL/9/RAY9UDZIyVkTc/NeRfVZ/v8Xozy/MQGQzG8E
+xrgvkjynSqSbPf/S/FC2zx/W/+kR9X0nBGLDU+v4HundX3ePbXfvS0L4MyqfH0p
SWNeBuR8Jedct1Nf0rLa8coru2ENs76z2jnYq707IuSPlKta6nYB0IMrYhB0iYTN
UV9cSTTYNjTQI4Od1iQg4dCD3+3MeydxGobrYuerWFefn//5dtjQ7Y65KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYWSe2llQnNy/2Mq7eCS5gHpolYMB8GA1UdIwQY
MBaAFI8Vbmn5REwrBmhyVghbanpOmIf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEt
MmI3ODViNzJiNGY0LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEtMmI3ODViNzJiNGY0
LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBh02Fse
zNSU/OSdacHlzwRyRClZtugMUDAN6/13Qh5dKY4XKmRV+wu66z7B6vKkYz/0L1ka
Gpzk9Ht6ZtYf0HJCc9I11yUaFL8PxSblg4HiKNkxRPZYbxk2C0NU73i3lXfPI7nS
Ob9d+tHxHIfnuwHeQvCSJ1lvinM2egTzSO5kkAQ56sUZzrURpEBk+RtrnpnXx/iV
cOOG42jWnkF8xYkrb1/zbznWSdb9QcBmOC3EbUAcSamkLeyM6YxAMI87wtsRLT1o
BG3K/x6dakN9ArM0UGRcOw+X8BobfhNA1rtk+UnVi6N6zFzmX2f6R7Tz/ZPeatER
HL4Z8FDLbfqQ7Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:34 2026 by rpki-client