This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: kdAJLrGt6fpuqgExSQBKIjw6eSblHPy5nRmBwmaTlYQ=
Subject key identifier: C1:14:68:2E:9D:C0:30:8D:16:28:83:5C:37:75:06:14:02:9A:AC:A7
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019C416A839E4895509584D17D9ECC172667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 08:00:25 +0000
Manifest this update: Mon 09 Feb 2026 08:00:25 +0000
Manifest next update: Tue 10 Feb 2026 08:00:25 +0000
Files and hashes: 1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: aW+FpBXNXC8cKJvinPkhnkePiu0oEq5vb7fKQB0uQ/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:83:9e:48:95:50:95:84:d1:7d:9e:cc:17:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Feb 9 08:00:25 2026 GMT
Not After : Feb 10 08:00:25 2026 GMT
Subject: CN=c114682e9dc0308d1628835c37750614029aaca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:ad:bf:47:6c:a8:2b:fe:6a:95:f0:17:ca:
c1:fa:83:90:40:fe:14:7a:08:27:92:fe:91:6e:71:
5c:39:6e:a8:be:0a:70:d2:fc:2a:e2:b0:ee:64:f0:
5e:9f:92:0c:7a:10:8a:d9:b2:15:68:fa:cf:0d:41:
73:18:d3:42:09:d5:9b:27:7d:f0:ad:2c:37:5c:5f:
8d:b4:43:80:35:59:68:eb:62:2f:ce:a3:66:3e:26:
1b:ca:06:9e:1a:8b:85:2a:1e:10:4c:6b:d8:f1:5c:
fd:42:e5:4a:47:c1:f9:3f:95:c0:3d:34:f3:1b:0e:
56:48:55:94:ba:d6:00:aa:08:e6:d3:e0:19:1c:45:
a6:87:b8:8c:44:d2:52:7c:45:d3:3f:69:3a:2f:d5:
4d:c7:d2:31:ad:16:6e:0d:e6:0f:9a:61:c7:c8:b8:
7d:77:24:79:de:71:1e:a6:16:f1:d8:c8:96:2d:d2:
73:e7:94:26:55:43:88:27:4a:5f:62:9c:d6:02:f4:
90:f3:44:4f:ab:c7:f1:cf:9c:ca:13:d8:ba:c3:a3:
1f:fa:6f:52:3f:ee:25:d2:74:b0:75:5a:b2:ba:12:
f4:5c:49:43:1f:00:a8:03:0c:e0:6f:95:9c:83:14:
71:d1:6a:86:f8:74:00:86:24:eb:7a:15:8f:83:4b:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:68:2E:9D:C0:30:8D:16:28:83:5C:37:75:06:14:02:9A:AC:A7
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:9b:9a:1a:ec:e6:14:9d:f0:56:db:12:63:55:e6:65:ce:
3b:64:28:a0:00:46:0e:ce:3b:cb:16:c6:a4:82:6b:08:61:ef:
c8:08:64:65:29:9e:aa:0d:dc:75:40:79:80:62:d5:c6:8e:57:
16:f5:65:6a:c4:09:d0:bc:8e:c5:88:4c:04:ea:6d:0d:de:56:
8c:eb:a9:c2:66:93:09:af:ca:f0:8c:fc:1f:0e:28:b0:b4:09:
3e:b6:25:43:87:f4:70:52:9f:39:f1:60:df:62:86:66:4e:d8:
4f:2d:22:e8:11:ad:e9:27:90:70:60:8b:a3:16:ad:6d:86:81:
ca:e1:11:08:a5:ce:64:b4:3e:38:ae:6d:3c:dd:fc:db:98:b6:
f1:a4:3e:e6:f5:b0:ee:49:79:78:92:44:9b:c8:dc:98:71:56:
25:b0:1b:98:76:92:20:0c:bb:54:34:20:e8:e5:a4:c2:2d:98:
82:f7:97:5c:f9:59:11:1b:69:6d:10:f3:67:38:95:f2:5c:09:
ec:3f:c0:f0:6f:46:61:ad:e7:56:3e:c0:70:86:2a:39:1a:bb:
d2:75:f4:b2:67:8b:49:f3:37:f6:7f:cd:3b:3f:84:f8:79:5d:
90:b1:1e:06:71:7a:00:47:5a:64:14:23:47:12:a6:33:0f:13:
73:8d:fa:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaoOeSJVQlYTRfZ7MFyZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjYwMjA5MDgwMDI1WhcNMjYwMjEwMDgwMDI1WjAzMTEwLwYDVQQD
EyhjMTE0NjgyZTlkYzAzMDhkMTYyODgzNWMzNzc1MDYxNDAyOWFhY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yytv0dsqCv+apXwF8rB+oOQQP4U
eggnkv6RbnFcOW6ovgpw0vwq4rDuZPBen5IMehCK2bIVaPrPDUFzGNNCCdWbJ33w
rSw3XF+NtEOANVlo62IvzqNmPiYbygaeGouFKh4QTGvY8Vz9QuVKR8H5P5XAPTTz
Gw5WSFWUutYAqgjm0+AZHEWmh7iMRNJSfEXTP2k6L9VNx9IxrRZuDeYPmmHHyLh9
dyR53nEephbx2MiWLdJz55QmVUOIJ0pfYpzWAvSQ80RPq8fxz5zKE9i6w6Mf+m9S
P+4l0nSwdVqyuhL0XElDHwCoAwzgb5WcgxRx0WqG+HQAhiTrehWPg0tXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEUaC6dwDCNFiiDXDd1BhQCmqynMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR76bmhrs
5hSd8FbbEmNV5mXOO2QooABGDs47yxbGpIJrCGHvyAhkZSmeqg3cdUB5gGLVxo5X
FvVlasQJ0LyOxYhMBOptDd5WjOupwmaTCa/K8Iz8Hw4osLQJPrYlQ4f0cFKfOfFg
32KGZk7YTy0i6BGt6SeQcGCLoxatbYaByuERCKXOZLQ+OK5tPN3825i28aQ+5vWw
7kl5eJJEm8jcmHFWJbAbmHaSIAy7VDQg6OWkwi2YgveXXPlZERtpbRDzZziV8lwJ
7D/A8G9GYa3nVj7AcIYqORq70nX0smeLSfM39n/NOz+E+HldkLEeBnF6AEdaZBQj
RxKmMw8Tc436cw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:31 2026 by rpki-client