This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: ti+cHawmT6/2G5QgLa96GL3jQIs9LRE9Ued90zZ9+Ek=
Subject key identifier: 8A:25:4D:4F:ED:F2:20:85:64:AF:16:1F:54:09:68:93:08:14:2C:79
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019C42466D083FACEB5E13A7F8E2223F7745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1762
Signing time: Mon 09 Feb 2026 12:00:37 +0000
Manifest this update: Mon 09 Feb 2026 12:00:37 +0000
Manifest next update: Tue 10 Feb 2026 12:00:37 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: SUKGCgI0lqibx9fd8TlXFzYk503fgDDfEvB+qM9V+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:6d:08:3f:ac:eb:5e:13:a7:f8:e2:22:3f:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Feb 9 12:00:37 2026 GMT
Not After : Feb 10 12:00:37 2026 GMT
Subject: CN=8a254d4fedf2208564af161f5409689308142c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:86:5a:dd:64:63:d7:d8:d6:52:8b:73:89:
b3:66:c5:bf:fb:1e:6d:40:2a:22:27:72:d0:d0:49:
4b:ec:c5:1c:c6:c3:fe:96:3f:9a:ef:b0:5c:84:75:
f9:df:dd:a6:fc:23:cd:e5:75:2c:cd:5f:64:5a:0a:
bf:06:5c:cb:43:34:92:c5:46:4b:eb:c5:17:82:bd:
5c:9b:99:83:c5:19:b7:48:cd:23:1e:2f:2b:4c:b8:
f9:5d:65:b0:af:2d:80:d6:8f:09:29:ea:0c:8b:81:
4c:33:f0:5c:c3:80:a5:71:42:c2:3e:e1:18:87:83:
5b:9f:d9:5f:12:1d:94:4d:05:80:cd:7e:9a:8d:99:
2b:3a:10:1f:81:c8:cb:8c:e7:60:6e:36:18:21:6e:
a6:54:e7:cd:06:f5:3f:52:c3:6b:e2:66:20:01:63:
57:99:fa:6d:4b:2a:d0:5a:f6:84:03:4b:46:dc:48:
08:ca:d1:c8:ac:bb:57:35:e1:ab:e3:d2:47:e3:5d:
29:8f:69:e3:e8:38:18:ae:58:81:54:df:17:a3:79:
49:13:1c:10:b3:b7:e8:58:a2:f7:76:1f:2b:95:0f:
00:f1:08:c7:95:7f:49:ea:35:e7:f1:78:3e:0e:7d:
38:d8:04:6d:86:ec:73:b3:9c:1d:92:ca:77:d6:a2:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:4D:4F:ED:F2:20:85:64:AF:16:1F:54:09:68:93:08:14:2C:79
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:9e:23:fd:65:67:3a:ad:b9:c2:b8:18:45:77:1f:73:6b:
ff:af:69:b9:2f:4c:e3:5f:b8:27:fa:85:73:44:39:20:8b:67:
5f:aa:96:24:79:66:b3:62:40:c8:bb:f6:02:61:40:db:e3:ec:
98:67:53:74:7e:73:d4:f0:08:a2:da:5b:e4:95:f3:7b:93:82:
14:c7:86:a1:35:51:72:40:97:15:79:e1:30:9b:72:fa:0a:dc:
13:41:1a:e2:82:79:43:85:5d:58:f7:14:6d:73:1a:ed:c9:fe:
3c:6c:4d:1d:33:2c:74:80:2b:18:8b:d1:a9:50:68:61:11:1d:
dc:fa:cd:8b:6d:cf:3a:bd:ff:1e:8e:cb:c8:35:e5:31:58:dd:
4a:5a:5b:00:0a:7f:b2:59:93:1d:b3:0a:8f:a8:7b:28:e4:55:
2e:68:fd:f3:35:16:ee:6b:ef:55:ff:aa:4e:19:6e:5c:74:1e:
4a:91:47:01:11:41:13:30:77:8e:4a:73:66:74:8c:c7:6e:bc:
2b:fb:2a:8e:f6:3c:a0:39:cd:f1:b5:85:07:3f:1f:0c:8f:16:
81:d8:f6:f8:70:a1:65:76:35:77:7b:fa:65:fc:09:43:77:de:
9b:1d:64:97:03:70:06:89:14:33:d8:19:bf:ba:2d:a5:79:d6:
17:47:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:22 2026 by rpki-client