This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
File: jVqxQkxBKz-_Tvrprh5o42wr7oE.mft (raw, json)
Hash identifier: 7JVMTKagjdum7kC7VaYe3YDV/VE+Z4uQINCyjW9VOuo=
Subject key identifier: 56:DD:E2:17:A1:6D:FB:94:F2:AE:41:24:B7:CF:64:99:2C:B2:1F:DE
Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Certificate serial: 019C424643557DC3E6D9479EDC745AFD76BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
Manifest number: 0178
Signing time: Mon 09 Feb 2026 12:00:26 +0000
Manifest this update: Mon 09 Feb 2026 12:00:26 +0000
Manifest next update: Tue 10 Feb 2026 12:00:26 +0000
Files and hashes: 1: jVqxQkxBKz-_Tvrprh5o42wr7oE.crl (hash: FoXnYNYnVdjH5HKhUgz47uuWt0t7zAWv7P2XAXJ4XPI=)
2: p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa (hash: haUohiyH5mbkoLGOMq3EZCD2dc1b/l0VJe9Q5+fs1Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:43:55:7d:c3:e6:d9:47:9e:dc:74:5a:fd:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Validity
Not Before: Feb 9 12:00:26 2026 GMT
Not After : Feb 10 12:00:26 2026 GMT
Subject: CN=56dde217a16dfb94f2ae4124b7cf64992cb21fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:47:83:43:d9:78:ec:ac:91:52:f8:7a:ae:52:
a4:4c:97:18:3a:b3:aa:ce:72:71:a6:b3:94:e4:e2:
96:a2:98:2a:1d:23:c1:25:de:ec:da:d4:bd:d5:14:
ab:c2:39:cd:35:7a:dd:ea:99:da:fd:c6:13:d7:3d:
5b:14:d7:d7:28:4f:2d:2a:d6:1a:67:ff:12:09:59:
0a:15:d6:8e:7d:8c:58:22:1e:fd:03:b5:d0:26:5c:
bd:b1:3e:95:70:c8:04:73:db:ca:f3:cc:4e:da:16:
1e:42:3d:87:17:bc:f0:96:95:fa:75:61:1c:7e:2d:
bd:c9:8f:c0:6a:a0:8a:aa:fc:fe:27:27:92:25:5e:
05:65:eb:f3:44:f5:5a:8e:1c:64:c2:6d:d6:9d:77:
9a:72:5b:ab:57:23:c6:02:18:c3:70:28:7d:99:e6:
cc:7f:87:70:82:41:d0:4d:35:9c:d2:ee:39:09:58:
2d:00:35:8e:94:89:f9:d9:1b:49:72:28:d8:bd:95:
c0:9f:05:d5:ac:60:5e:39:b2:48:f6:38:2f:38:2e:
7e:95:a2:1a:07:87:5f:60:d6:8c:13:77:63:5a:bd:
67:c8:55:f8:15:46:b5:69:e4:84:7c:65:9b:d5:57:
1e:14:24:07:e7:a8:2d:92:34:c5:b7:2d:f5:8d:0d:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:E2:17:A1:6D:FB:94:F2:AE:41:24:B7:CF:64:99:2C:B2:1F:DE
X509v3 Authority Key Identifier:
keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:6f:8b:02:ee:d2:43:ce:50:5f:9c:25:47:9d:26:3c:a3:
4e:ac:6c:9c:f9:36:8e:a1:83:7d:83:52:93:af:f9:72:bd:ea:
7b:74:e6:a1:86:07:e7:63:9b:45:b6:ba:81:e7:15:8a:2e:ea:
1c:b2:c7:ac:59:52:fc:78:64:b5:6e:2f:b9:00:c0:ce:fa:f0:
59:33:aa:f2:61:08:bf:59:c5:9c:9e:50:77:cc:e3:6b:69:22:
8e:23:80:3f:38:81:32:94:7d:cd:96:e1:b3:b8:8f:9d:13:67:
0d:66:ef:5a:fd:c0:ec:83:97:76:f2:ca:cf:8b:e7:08:0d:f1:
d7:67:4e:62:c7:0a:ea:62:23:cb:33:64:15:6c:e9:74:84:96:
9c:dc:9b:64:3d:0d:d2:8a:b3:eb:b6:80:1b:f5:77:dc:a7:db:
d8:d8:88:64:b3:ab:54:56:5c:33:72:26:d7:a0:ca:53:de:46:
fa:1c:a4:1b:07:6e:b8:88:e1:80:da:0d:8e:75:8c:92:0d:3f:
55:3b:19:7f:46:5e:81:03:9f:ba:2b:51:17:a5:48:e3:a4:17:
9a:e6:81:7e:50:19:46:6a:b6:4c:8c:4e:0a:d1:ea:7a:c2:bd:
40:4b:26:6a:91:ce:2d:73:fb:86:83:63:41:ac:1b:b7:1d:97:
40:2a:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:47 2026 by rpki-client