This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: URQIxWQM43/LHKhtLIHlfZRIEI+Gjs19H92Ce/5pX9I=
Subject key identifier: 1B:2A:A3:4E:9D:87:67:AC:81:CD:53:D9:C5:0C:2D:3B:36:4C:43:D0
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019C438FCECAFF45695DF8E4B8F2CC382194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 18:00:23 +0000
Manifest this update: Mon 09 Feb 2026 18:00:23 +0000
Manifest next update: Tue 10 Feb 2026 18:00:23 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: 1K/krm3xwcBmRICfha3+MilTh6QmbSNNYugsV5scVr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:ce:ca:ff:45:69:5d:f8:e4:b8:f2:cc:38:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Feb 9 18:00:23 2026 GMT
Not After : Feb 10 18:00:23 2026 GMT
Subject: CN=1b2aa34e9d8767ac81cd53d9c50c2d3b364c43d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:4e:83:97:f6:27:1a:d1:39:9a:e8:1d:9b:
65:62:b2:88:59:94:1b:71:ab:66:8c:a8:73:d1:27:
70:d2:84:18:bb:db:cc:44:9d:91:cc:5d:03:0e:7a:
70:3b:98:f0:82:16:9f:32:4d:86:b1:97:0d:85:bd:
3c:7f:42:87:e3:b2:05:e8:7f:1b:0a:36:85:2a:83:
6e:32:1d:48:f9:b8:49:d9:5b:ed:01:af:6b:2c:75:
db:2b:e7:05:6e:e4:41:b6:ff:bf:9c:41:c2:3c:48:
37:c6:47:49:c5:09:4a:21:11:c3:40:c9:d2:ea:b3:
ad:e3:8a:27:31:e8:77:18:33:07:60:25:e4:ba:03:
5c:c8:50:57:8d:76:1f:77:0f:38:af:67:28:08:f0:
db:64:a7:68:f3:37:3e:6b:2f:ae:ed:d6:11:39:77:
42:14:51:10:50:b2:4c:ac:e8:32:f9:10:18:11:b7:
21:6f:84:7a:75:4b:9d:7a:05:3f:88:74:c7:a5:e6:
94:81:de:da:9d:57:cd:fa:57:46:9a:64:05:e3:a7:
9b:fb:20:ae:8d:37:50:4c:fb:ed:55:46:f9:dd:95:
cb:ed:ab:32:f5:60:de:24:06:93:7d:64:64:fa:55:
a0:36:cd:97:32:2e:a5:b4:ba:7e:1b:f4:19:d7:cb:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:A3:4E:9D:87:67:AC:81:CD:53:D9:C5:0C:2D:3B:36:4C:43:D0
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0a:e3:ae:87:51:a0:d1:10:f4:90:3a:a6:e5:1c:40:e8:67:
e9:77:a1:cd:06:01:b4:4c:1b:c4:74:c7:06:94:78:56:3e:ac:
d0:5d:d8:4c:0e:e0:b2:88:da:ab:74:1c:f9:d7:d4:ed:84:70:
d0:cf:06:e7:d5:2f:4a:da:d5:f9:9b:96:a1:ba:75:ce:e4:7a:
83:60:54:e0:c7:79:cd:16:33:3e:fe:b9:d6:8e:0e:87:af:5e:
e7:d0:06:c0:ba:fc:b2:24:90:e4:c9:06:27:04:86:ef:29:6c:
17:d7:c1:52:09:cc:b6:23:b0:7a:5a:db:55:ef:20:52:9d:db:
6e:d7:37:57:75:4c:e9:90:d8:a1:50:fb:ee:b2:5c:5d:6c:7d:
c6:2a:eb:26:39:2e:20:4d:53:64:f3:8d:e3:43:cd:65:67:06:
2d:35:38:ee:9e:4a:a5:98:b3:c6:0f:56:87:d0:0d:07:26:fb:
c6:6f:43:85:6e:26:7e:a9:63:c3:18:32:f6:3d:82:08:6c:6c:
8d:3c:ea:37:14:ec:10:82:c8:d8:4f:93:b6:20:8c:fa:e5:9f:
23:d2:00:19:70:c4:af:f4:94:d2:f1:14:02:3c:65:a6:0c:cf:
ae:35:0d:fa:d5:b4:e1:cd:c1:a4:20:dd:56:04:c8:d4:ac:42:
61:79:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:48 2026 by rpki-client