This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
File: mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft (raw, json)
Hash identifier: rNVqyfVCvGBeoa8pQRiCpLPFYJ5aBhGJc/85ikm17bY=
Subject key identifier: 59:BF:2C:8F:2A:BA:29:64:71:87:21:37:4D:0D:97:CF:A9:15:EF:CB
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Certificate issuer: /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial: 019C41D9094C073D557D7A3D38E8BE3402A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
Manifest number: 14
Signing time: Mon 09 Feb 2026 10:01:08 +0000
Manifest this update: Mon 09 Feb 2026 10:01:08 +0000
Manifest next update: Tue 10 Feb 2026 10:01:08 +0000
Files and hashes: 1: mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl (hash: dJAp9k+EqGgA4WOiJOQ3GZ3JCauEj8FxV0naKS+Ad3M=)
2: op3K6GZduC2KDDDM4nqJMijnyzg.roa (hash: 717khJV08/Xsj2zI2MejdnVhjMHlNmTLPlB1H3B4G+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d9:09:4c:07:3d:55:7d:7a:3d:38:e8:be:34:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Validity
Not Before: Feb 9 10:01:08 2026 GMT
Not After : Feb 10 10:01:08 2026 GMT
Subject: CN=59bf2c8f2aba2964718721374d0d97cfa915efcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:ad:bf:86:76:d5:92:d4:f1:9b:e8:59:6f:
dd:17:d0:f5:6c:bb:bf:22:79:a4:77:5c:48:b5:54:
90:89:4c:7a:20:d8:ef:03:48:5e:25:01:f1:be:70:
e7:05:a8:22:0f:0f:b5:66:0f:0f:86:0b:74:9d:79:
0c:e7:1a:9a:20:58:e3:01:e8:17:c1:47:1b:ca:89:
31:0e:3d:a6:70:eb:07:91:46:8c:a1:13:55:09:8b:
ba:75:6a:9f:92:0c:53:31:44:9f:aa:6a:9c:c8:e9:
45:6c:e4:95:74:cd:c0:e1:23:ad:05:c5:60:ef:79:
4d:26:75:62:46:f3:97:80:06:23:8b:02:17:3c:6a:
ea:06:1d:c9:8a:81:25:50:ef:d1:5b:e2:96:07:bc:
b3:1d:a2:5f:25:56:0b:4f:5d:84:21:0c:a9:4b:e9:
f2:f7:50:22:1f:6c:fc:da:39:08:81:68:3f:51:da:
c2:14:31:b3:55:3e:e3:cd:6e:e9:e9:c1:7d:4a:56:
93:7a:e2:2b:ed:d3:50:59:ef:91:d3:b0:74:6a:0b:
ac:7e:1c:66:9d:12:85:ed:a6:c2:b8:4f:f4:78:51:
0c:92:1f:d0:3f:3a:d3:5d:93:2b:54:ed:f3:5f:50:
26:cc:d6:90:75:16:11:fb:7a:b7:16:13:85:0c:98:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:2C:8F:2A:BA:29:64:71:87:21:37:4D:0D:97:CF:A9:15:EF:CB
X509v3 Authority Key Identifier:
keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:6e:5f:db:79:3c:a5:5a:09:4c:64:50:83:c0:56:c3:3c:
a7:65:49:61:9d:0d:8d:b4:64:0b:bd:32:91:83:3f:ab:11:0f:
97:bb:b6:9d:7d:2b:f6:10:41:8f:8a:e6:18:10:47:40:db:c9:
1a:42:08:77:c1:c9:dd:18:72:1a:9c:59:c5:ba:29:2c:2b:8c:
71:e9:df:5c:dc:f7:eb:e5:a1:01:24:1f:01:1d:cf:8b:42:28:
0a:6d:29:b3:77:15:df:c9:e4:c5:27:65:63:08:41:c5:fd:d7:
c4:3e:1f:c0:ba:52:6e:a7:ae:d1:c6:26:a0:99:2c:6d:23:8a:
06:f7:83:fe:b7:f5:63:28:c5:76:e0:89:4a:9a:9b:83:40:40:
59:81:a4:fb:68:5e:11:dd:99:05:89:61:42:17:a1:03:d0:3c:
c7:0a:23:41:dd:d0:91:7a:83:89:de:62:df:77:67:a7:b2:52:
1d:ca:d9:01:b1:94:6b:d0:39:48:99:a2:59:0e:d7:f7:72:02:
72:60:da:7a:5d:4b:1b:ea:da:ab:fd:d1:3c:74:03:e0:37:fd:
89:df:eb:49:2c:4c:1a:7d:ad:3e:3f:ee:70:e4:24:b3:24:ce:
17:d6:d5:d2:81:a2:8d:21:7b:14:35:55:80:01:76:70:d9:51:
40:8c:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:37:58 2026 by rpki-client