This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: m/uvQmo/2d3wKAjhzAPUmMM7GNccI3xHfuwquIavYC8=
Subject key identifier: 6B:16:7D:10:26:29:67:84:3F:8C:34:DB:5E:96:F2:00:2B:DD:85:C4
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019C427D4C3D5F03A6C00C48643B46EF1E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 10D1
Signing time: Mon 09 Feb 2026 13:00:33 +0000
Manifest this update: Mon 09 Feb 2026 13:00:33 +0000
Manifest next update: Tue 10 Feb 2026 13:00:33 +0000
Files and hashes: 1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: UY4Yqxbc9sSKhreDQMl82padkQSAePrJ5QnJ7B4Lgus=)
2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:4c:3d:5f:03:a6:c0:0c:48:64:3b:46:ef:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Feb 9 13:00:33 2026 GMT
Not After : Feb 10 13:00:33 2026 GMT
Subject: CN=6b167d10262967843f8c34db5e96f2002bdd85c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:78:e1:f3:50:08:65:ef:23:d4:71:64:cc:
b6:e8:04:8e:99:12:e4:c5:e0:65:44:e8:2d:fd:60:
20:b0:58:ab:38:93:f8:1e:1d:0c:da:af:19:d6:ab:
94:7a:d3:50:89:c4:a2:6a:4c:bc:a1:d7:22:c0:6b:
03:34:bf:42:d9:56:72:1a:90:fb:45:9f:8e:72:e0:
5f:2b:65:bf:ac:85:52:c2:d1:58:39:74:db:7c:af:
bd:f0:4b:44:13:f3:8d:cc:f2:6b:b3:09:f3:67:6f:
bb:ae:50:c6:d6:94:86:ba:be:1a:61:6e:f7:48:1a:
13:a8:54:00:52:6f:7e:0d:0c:0a:23:63:a6:4a:4b:
0b:fc:53:93:ae:4c:b8:03:0e:7f:2a:1e:79:00:bd:
2a:c1:f7:f4:c6:88:ab:9f:e5:71:13:af:45:f2:1b:
c8:fb:56:17:2f:5f:8c:c2:5f:6a:da:7c:38:7d:ad:
fe:39:0e:6d:2c:02:f1:eb:62:0c:92:aa:af:4d:a3:
d9:38:37:95:08:f2:79:66:eb:7f:26:00:ee:b0:b0:
4b:96:22:2f:b3:14:59:58:36:8f:88:e2:6b:14:cc:
0c:6a:c0:ae:c5:c0:04:3c:84:33:b4:80:6d:51:94:
b0:7f:8f:c2:88:d7:4d:e8:d6:26:c0:2d:91:d2:34:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:7D:10:26:29:67:84:3F:8C:34:DB:5E:96:F2:00:2B:DD:85:C4
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:33:ad:83:39:bc:e6:1a:90:a0:39:ca:3f:cd:a0:47:a7:f6:
16:fc:28:fc:f2:28:61:e9:23:89:1f:be:13:f7:af:3c:3d:68:
29:10:76:21:71:77:36:e7:90:49:8a:e6:da:b5:2d:43:f0:67:
32:df:e7:1b:9f:38:9c:05:4c:75:b5:37:e0:1c:5b:c8:91:be:
2e:1a:09:be:e4:09:d1:12:8c:12:30:e5:6d:12:20:77:03:ce:
5d:b8:44:d9:87:29:d4:65:96:e2:cd:24:37:37:1f:ca:b9:2b:
aa:54:0c:1c:39:60:b9:a1:e1:98:77:22:ef:a6:08:b3:fa:cf:
96:2c:fe:0e:e7:e8:36:08:14:c5:d7:69:d4:69:fe:c0:09:a7:
21:70:e5:16:d2:1b:16:ed:8d:6c:1f:20:ad:a7:b2:cb:92:20:
6f:c9:45:74:b2:dd:1b:79:09:5e:55:20:33:d8:a0:1a:b7:cd:
c2:3f:fa:b8:f7:af:c6:d7:d3:40:8b:d5:cd:80:6f:af:98:e8:
49:be:cf:1b:d7:2e:78:24:c2:20:40:fe:1c:05:cf:7f:8b:1e:
68:89:b5:4a:b8:b8:55:28:34:f5:d8:44:29:e4:f6:b7:ab:ca:
92:31:45:79:c0:95:75:1b:38:bf:7c:6f:16:68:7c:8b:01:39:
eb:59:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:42 2026 by rpki-client