This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: ZJ3kwIekcLIC0mnv0fD80g5uQKQrditc1g/X2ZtzDRM=
Subject key identifier: BE:92:F9:40:97:BD:DB:2A:9E:E6:D1:1F:50:B0:9D:7F:D7:FA:7A:D9
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019C42466F448298A165E5B532F4FE980F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1529
Signing time: Mon 09 Feb 2026 12:00:37 +0000
Manifest this update: Mon 09 Feb 2026 12:00:37 +0000
Manifest next update: Tue 10 Feb 2026 12:00:37 +0000
Files and hashes: 1: OBXirIBylsu5hF24eFc4dWHtfUA.roa (hash: V67fHNvga440B5p2S4z73zdpX5hKFuY2GyqyJaC4HdU=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: S/AeEYVjd2moTY8yX3LrQ5J42UBDbUpAuMOwq/DT/s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:6f:44:82:98:a1:65:e5:b5:32:f4:fe:98:0f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Feb 9 12:00:37 2026 GMT
Not After : Feb 10 12:00:37 2026 GMT
Subject: CN=be92f94097bddb2a9ee6d11f50b09d7fd7fa7ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:86:2e:56:7e:63:37:b2:c8:9b:d1:a8:df:
d9:9d:49:5f:09:60:1f:26:e1:0b:f7:11:03:39:8c:
ea:12:86:ea:e1:a5:3b:2b:95:b1:03:bd:a2:65:14:
01:d1:b4:fa:c0:8d:0a:51:b6:20:26:e9:8b:ab:3f:
38:76:5f:b4:c0:f9:2a:d7:13:68:47:e2:a9:ae:aa:
c6:33:c8:65:62:54:c4:61:8c:03:a5:5c:8c:f0:06:
54:1e:76:f4:6f:7c:c8:2c:17:24:04:c4:64:6c:7a:
e5:9e:4a:05:11:37:5e:6f:be:90:bd:ad:3c:ac:95:
4c:2e:01:5e:ad:6f:5c:7e:b9:99:eb:67:cc:08:f1:
a5:2f:d0:03:07:04:59:3e:95:0f:56:a1:e7:63:d9:
3c:38:75:91:1f:02:3e:96:29:58:60:2e:e7:89:ff:
54:01:54:6b:3c:9e:a7:a7:fb:00:6e:f7:20:57:51:
25:4f:77:8b:51:42:1a:01:88:6b:85:ab:ee:72:c0:
32:44:8b:ed:e3:85:05:fc:af:0c:e8:26:b4:25:63:
fc:9f:96:63:d4:16:b8:0b:42:50:3a:47:7d:2a:23:
a8:09:dc:66:d0:fd:ba:b0:f1:62:f6:53:37:a2:a7:
b6:40:14:76:e3:d9:c3:9a:c6:0a:c3:15:5e:c3:47:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:F9:40:97:BD:DB:2A:9E:E6:D1:1F:50:B0:9D:7F:D7:FA:7A:D9
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:70:b7:d0:ac:75:a1:9c:93:83:86:8f:1f:57:ee:f5:12:
ac:cc:ea:73:e4:e3:8d:e5:0c:70:eb:f0:1b:51:43:38:19:b5:
dc:d7:4d:c3:83:cc:cd:07:1d:18:03:c7:10:90:66:d7:d9:d0:
9f:59:83:8f:37:1a:f6:6e:d4:b3:b9:20:a1:51:9e:3a:16:fb:
40:16:60:b3:c0:94:b8:a9:5b:ec:0e:f6:bd:3c:0a:35:c1:98:
cd:91:71:3c:e5:88:b0:03:56:fa:d8:30:39:4b:83:13:c4:bf:
e1:0b:c8:82:67:89:38:a0:c5:09:0e:3b:08:0f:aa:2b:23:f7:
90:38:53:ef:8f:36:9b:0c:71:f7:34:ea:64:62:82:b3:59:3c:
f7:b2:56:dc:fc:f4:2c:9c:24:d4:30:00:70:ce:64:7b:98:35:
86:66:9b:fa:e3:e6:83:d7:37:b7:af:aa:b3:b9:30:cf:d1:9e:
26:34:81:bd:78:c1:a4:60:ff:a6:b8:6f:75:d2:7d:28:7d:29:
0d:a3:2b:22:b8:d9:05:13:0e:39:1c:89:3b:de:18:4b:e1:73:
2b:84:0f:38:4a:24:0c:99:d8:62:cd:db:e6:5e:ee:1a:35:dd:
e5:bf:c9:cf:87:dd:27:53:fb:40:ba:2b:02:40:8f:bc:0b:94:
cd:52:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:28 2026 by rpki-client