This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier: mZsOHUJZQvNVmV0VqyzuYLfWKLUfLVBQg3ZzPRZoPOI=
Subject key identifier: 56:88:E8:0D:25:30:BE:7B:EB:EA:80:26:3E:36:6C:F9:7B:BC:72:8A
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 019C42464668508B0256D492B40015DE7D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 12:00:27 +0000
Manifest this update: Mon 09 Feb 2026 12:00:27 +0000
Manifest next update: Tue 10 Feb 2026 12:00:27 +0000
Files and hashes: 1: AanVvurhzUc2_YlhTUVI0EdSJQM.roa (hash: D8Ey7qoWHGx1lJPT+RSbE0DodoNoh42qXfRsH7R0814=)
2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: 68gi3aw3slos4sY5NcLov5UqIhZvMbbVrUi8erpL/m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:46:68:50:8b:02:56:d4:92:b4:00:15:de:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Feb 9 12:00:27 2026 GMT
Not After : Feb 10 12:00:27 2026 GMT
Subject: CN=5688e80d2530be7bebea80263e366cf97bbc728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:b5:64:ca:23:0f:07:b1:8b:d7:84:3c:a8:
dc:b1:12:a8:3b:db:3d:3c:af:93:e1:8d:f5:a7:3c:
c5:06:80:74:4c:dc:2e:2e:30:d1:cb:db:15:12:23:
9c:35:b5:50:df:99:06:8a:f7:ab:ff:1d:51:6d:fc:
5b:94:41:fa:9e:e5:57:9e:fa:ed:9b:c8:a9:88:23:
bb:aa:2f:31:3b:ba:54:4d:bc:32:23:a1:1d:87:66:
7f:d2:de:15:29:a1:f1:66:94:eb:fc:62:f7:a9:25:
fe:32:6d:ee:13:1b:4d:c1:6b:96:45:27:a8:34:f6:
78:45:30:e2:46:94:83:5b:27:b9:78:e9:ec:a1:5a:
b7:f4:d0:ac:1d:3c:8d:53:f5:72:50:4b:9e:2f:72:
08:30:51:16:6a:ba:d6:e2:e2:1a:6c:83:ff:f5:bf:
2b:9f:07:35:34:40:81:19:f7:71:15:08:00:d3:48:
f9:59:db:52:27:e7:27:49:9d:c4:ef:84:aa:d0:65:
47:1c:e1:43:b3:43:7d:36:8e:cd:26:8e:45:46:b3:
5e:d7:9c:05:64:9b:75:99:65:1c:5e:b1:ef:a1:b3:
0c:6f:e3:2b:29:db:35:38:e8:5c:1c:da:2c:46:81:
e0:b6:14:67:dd:05:88:5f:dd:6e:c5:8c:50:c5:10:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:E8:0D:25:30:BE:7B:EB:EA:80:26:3E:36:6C:F9:7B:BC:72:8A
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:22:da:8d:b5:ec:5c:97:5c:a1:41:40:3d:8f:33:63:29:
df:e7:6f:e1:1e:6c:29:f0:47:b1:46:9e:81:46:28:44:dd:b5:
25:ef:c6:a0:6d:fd:cb:41:0b:a8:60:87:84:60:28:df:ea:55:
2e:25:33:24:db:3f:61:09:e0:ba:c8:f8:e9:8c:90:31:4b:c7:
32:ae:a3:11:27:0e:b1:fe:00:72:f4:17:ea:33:ac:2f:46:9a:
32:ab:68:77:4f:df:64:63:42:75:2b:69:4b:fe:b5:7b:89:f5:
4d:d1:c6:58:c5:f5:77:da:63:8f:3a:3d:18:84:c0:89:72:0f:
f8:66:1a:56:cf:bc:cf:9b:95:95:ba:e6:66:15:a3:30:4a:27:
82:17:62:2d:3d:59:d2:8d:86:4d:0e:a5:ed:33:56:31:73:14:
e9:69:50:21:98:8b:cd:0e:bb:75:a4:4a:01:e0:2e:5b:c2:57:
92:91:d9:e6:0d:49:f6:b5:b8:c6:e0:df:43:d8:0d:d6:83:0b:
02:07:95:7e:e5:98:53:a9:71:81:97:6b:ed:52:20:34:da:4b:
86:0d:20:07:17:9e:ae:5f:d2:38:ff:be:a3:32:5a:87:c8:de:
a6:d1:00:0a:96:81:62:d8:e5:01:4f:6e:97:a1:f1:e4:98:b0:
a3:a5:b6:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkZoUIsCVtSStAAV3n0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2RjZmZjYTU3OTVhNDdmY2MyZTEzOGNlNTQ3M2U4MDAw
OTgyOTUwHhcNMjYwMjA5MTIwMDI3WhcNMjYwMjEwMTIwMDI3WjAzMTEwLwYDVQQD
Eyg1Njg4ZTgwZDI1MzBiZTdiZWJlYTgwMjYzZTM2NmNmOTdiYmM3MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9y1ZMojDwexi9eEPKjcsRKoO9s9
PK+T4Y31pzzFBoB0TNwuLjDRy9sVEiOcNbVQ35kGiver/x1RbfxblEH6nuVXnvrt
m8ipiCO7qi8xO7pUTbwyI6Edh2Z/0t4VKaHxZpTr/GL3qSX+Mm3uExtNwWuWRSeo
NPZ4RTDiRpSDWye5eOnsoVq39NCsHTyNU/VyUEueL3IIMFEWarrW4uIabIP/9b8r
nwc1NECBGfdxFQgA00j5WdtSJ+cnSZ3E74Sq0GVHHOFDs0N9No7NJo5FRrNe15wF
ZJt1mWUcXrHvobMMb+MrKds1OOhcHNosRoHgthRn3QWIX91uxYxQxRDYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaI6A0lML576+qAJj42bPl7vHKKMB8GA1UdIwQY
MBaAFI89z/yleVpH/MLhOM5Uc+gACYKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYt
YTBjZmUxMmYzZDUxLzEvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYtYTBjZmUxMmYzZDUx
LzEvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0wi2o21
7FyXXKFBQD2PM2Mp3+dv4R5sKfBHsUaegUYoRN21Je/GoG39y0ELqGCHhGAo3+pV
LiUzJNs/YQngusj46YyQMUvHMq6jEScOsf4AcvQX6jOsL0aaMqtod0/fZGNCdStp
S/61e4n1TdHGWMX1d9pjjzo9GITAiXIP+GYaVs+8z5uVlbrmZhWjMEonghdiLT1Z
0o2GTQ6l7TNWMXMU6WlQIZiLzQ67daRKAeAuW8JXkpHZ5g1J9rW4xuDfQ9gN1oML
AgeVfuWYU6lxgZdr7VIgNNpLhg0gBxeerl/SOP++ozJah8jeptEACpaBYtjlAU9u
l6Hx5Jiwo6W2JA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:35 2026 by rpki-client