This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: u2fxKOZnFGa1h9PMld/PF7vJ/LHynZKCfgbiQ9qseV4=
Subject key identifier: CB:39:F2:7C:A2:E2:29:F1:0E:6F:F6:A2:36:CE:2A:3F:EB:25:1C:3B
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 019BDFFFC019281AC12595B68E43ED282B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 17E9
Signing time: Wed 21 Jan 2026 10:00:38 +0000
Manifest this update: Wed 21 Jan 2026 10:00:38 +0000
Manifest next update: Thu 22 Jan 2026 10:00:38 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: 7saj3LWoA6J07TwuGwLmJCrnakrVoCZ5WSfpuURsBk8=)
5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:ff:c0:19:28:1a:c1:25:95:b6:8e:43:ed:28:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 21 10:00:38 2026 GMT
Not After : Jan 22 10:00:38 2026 GMT
Subject: CN=cb39f27ca2e229f10e6ff6a236ce2a3feb251c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:39:36:4d:77:e6:3a:1e:cd:20:9b:9c:b3:
14:4b:d8:25:d7:3c:56:c7:52:4e:f5:dd:0d:41:f9:
2e:2c:4f:12:d2:9c:35:07:34:73:86:64:48:c1:8f:
71:32:b7:bc:54:5f:84:cb:4e:89:a1:71:86:81:8b:
09:58:31:7d:58:b6:fc:9f:25:b4:58:1f:2b:b0:93:
cc:39:9a:94:4c:52:a6:18:8d:05:db:ed:28:92:c5:
d2:7e:c6:11:b0:bc:7a:ec:39:e4:c8:5a:fa:07:81:
54:b1:f4:27:3a:04:ba:e5:da:f9:35:70:ae:fb:4b:
91:29:05:16:08:96:d2:3c:f0:97:f7:52:74:59:d0:
3c:3e:00:78:83:d7:dd:b4:2a:c7:cc:86:1a:47:ba:
40:a1:5d:86:4b:82:3e:b5:82:07:3f:1d:27:91:89:
88:53:0c:47:1b:1d:af:d0:dc:e1:f1:fd:5a:5f:01:
f9:b9:7d:0c:6f:bf:60:4c:5a:c0:a7:a9:17:d2:c4:
4a:81:b8:2f:d4:17:7a:a4:a3:5a:2d:02:ac:e7:e3:
0c:10:9a:a7:55:6a:3a:4e:e8:68:c2:fb:49:f1:b7:
95:ef:22:91:79:2a:97:2a:e5:11:d9:ee:65:11:35:
ea:7f:1a:f0:03:fa:6e:2f:e5:02:3f:dc:8e:31:46:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:F2:7C:A2:E2:29:F1:0E:6F:F6:A2:36:CE:2A:3F:EB:25:1C:3B
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:a0:0c:d6:c6:8f:aa:4d:60:e2:1e:16:bd:f9:da:66:0f:
ed:e4:bd:59:9d:ce:c0:5d:a6:23:fc:1d:49:e5:af:77:ef:ed:
a4:82:16:a5:c7:63:f2:7e:c1:e0:77:b5:ee:92:dd:41:39:b5:
1c:f7:3b:64:ed:7e:21:26:42:84:44:ba:06:3e:b8:6b:9d:e1:
1a:b1:a5:67:1f:6b:12:09:f6:b0:fb:d1:a0:f5:89:4a:c2:19:
f8:15:01:67:e1:ea:66:fb:1a:c3:d1:68:b3:4e:b7:4a:85:12:
c0:5f:7b:70:7e:58:c4:06:b4:4f:cb:5c:23:5f:7d:60:f5:a7:
bc:72:90:d0:d5:1d:12:56:42:77:4b:a2:a9:e1:a8:44:06:4e:
81:74:c1:4f:34:92:a4:86:ab:91:c9:24:20:bd:b9:c7:a2:c4:
9d:ed:17:08:13:7d:86:99:5d:7a:8e:53:25:88:05:ca:f3:53:
cb:5a:7a:44:5b:16:e0:f7:f1:da:02:ab:66:2d:9f:17:6e:06:
73:f4:47:1f:46:7e:2b:51:55:22:f4:c1:2a:99:41:78:37:8c:
0c:67:fa:9f:59:16:81:0b:3b:ee:e0:e6:9d:9b:6f:f3:af:d2:
e0:d5:f2:ca:b2:ec:3f:2e:94:32:50:9f:a5:af:29:61:c5:32:
1a:51:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:16:05 2026 by rpki-client