This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: 2uKuBgWjCBfasjbAvKCG9u2ZJXdjoBQPtj6cvdUDcds=
Subject key identifier: 84:87:76:F0:56:07:6A:13:42:72:EC:90:BF:D7:C1:24:5E:84:8F:DC
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019C1BDEA85F2F6B0C0AE1AB2AF04711CCFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 05AE
Signing time: Mon 02 Feb 2026 01:01:42 +0000
Manifest this update: Mon 02 Feb 2026 01:01:42 +0000
Manifest next update: Tue 03 Feb 2026 01:01:42 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: doZQhINezbBZEgZzd6mF9O0J7tBfGeGe9NHwmAu6GGg=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:de:a8:5f:2f:6b:0c:0a:e1:ab:2a:f0:47:11:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Feb 2 01:01:42 2026 GMT
Not After : Feb 3 01:01:42 2026 GMT
Subject: CN=848776f056076a134272ec90bfd7c1245e848fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:a8:9e:f0:2b:14:6f:36:b5:93:f1:a2:01:
89:23:08:f0:ca:bc:f3:e4:b3:f4:e4:8e:e4:5a:5a:
a3:2e:6c:01:6a:b0:26:d3:b6:14:95:fe:ce:a8:26:
ba:23:8d:2d:a8:a1:35:7e:60:a4:bd:b1:ad:19:e9:
25:19:44:05:29:1b:5f:54:c0:22:c7:c5:34:89:73:
f3:8d:a0:de:a0:82:34:16:00:ea:e1:94:69:29:55:
a5:da:9e:15:88:04:5f:8c:e9:19:94:f4:12:dd:f9:
4b:64:d0:38:ed:d2:e1:6d:96:25:46:47:78:f8:c0:
2c:a9:3b:07:cf:bc:2f:28:7d:50:2a:da:39:64:0f:
cd:c3:72:33:0f:c4:4e:58:3e:80:cb:e2:92:88:55:
54:a7:79:95:56:c0:d6:ba:0e:36:dc:e1:67:d6:03:
c6:05:af:80:64:f1:4f:48:37:c3:09:f7:c1:ee:90:
9e:a9:94:f8:12:5a:09:db:01:9c:5d:6b:07:91:22:
1f:a4:d1:34:6b:3a:f4:69:35:3f:41:50:d8:4d:33:
70:9b:ca:63:b7:c3:48:bb:48:e0:fc:f3:57:d9:a0:
0f:a0:85:40:9a:c8:ad:3a:c3:72:c8:1a:8f:73:c4:
2f:19:1a:9e:cb:1b:73:46:35:26:f5:ae:21:61:6a:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:76:F0:56:07:6A:13:42:72:EC:90:BF:D7:C1:24:5E:84:8F:DC
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:fd:90:23:a6:d1:a9:8f:d7:4c:a8:d9:62:c5:f3:38:e3:
32:e7:5a:ff:e7:ff:e2:e3:78:b9:73:07:85:1a:f8:38:c1:bd:
50:21:42:ea:06:52:dc:52:ae:97:d8:5a:91:a7:d4:90:41:42:
42:c1:60:6c:57:c4:be:fc:e3:11:bf:9e:a7:b1:7b:19:c0:a5:
16:f6:78:52:46:ef:6b:7f:84:18:8a:26:fb:71:14:93:67:52:
7d:01:26:be:3e:97:0e:c6:32:44:b4:db:48:1f:dc:d9:48:8b:
d0:21:42:5e:3e:af:70:a7:e6:ea:3d:ca:0f:35:fb:cf:e5:53:
dd:b0:3d:eb:13:19:6e:32:83:17:32:44:ba:f2:76:90:58:98:
56:dc:37:31:f8:c4:eb:16:c8:50:6d:69:36:5b:2f:d9:00:3e:
ba:3e:8c:ac:7a:7d:50:36:2c:64:3a:d3:64:9d:2e:f9:57:01:
1b:6f:5e:5c:1f:34:4b:b4:cf:6f:7d:12:15:31:8f:a1:e5:4d:
e6:ce:3c:34:c8:54:62:d1:3f:c0:70:be:10:88:fa:1a:23:cb:
f3:b1:bf:30:19:31:d1:35:90:20:b5:c9:b7:70:9f:4e:db:11:
92:57:c5:2f:db:a3:29:28:ca:a4:27:ee:93:7a:24:6a:51:df:
06:27:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:34 2026 by rpki-client