This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: xh9dxxt5yUHULoJ+Wwnq2pQKF5EAZJPLodTSrwzfIZA=
Subject key identifier: 37:9A:A6:07:8B:99:26:BC:D5:27:62:12:FD:F0:7E:F0:14:7E:0E:8A
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019C43904F0BA851EDEDE901A22C2A77E17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 18:00:56 +0000
Manifest this update: Mon 09 Feb 2026 18:00:56 +0000
Manifest next update: Tue 10 Feb 2026 18:00:56 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: xjim8UG4JxvU7tt362ddw5ILKjST26JJFosRv9dIgy0=)
2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:4f:0b:a8:51:ed:ed:e9:01:a2:2c:2a:77:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Feb 9 18:00:56 2026 GMT
Not After : Feb 10 18:00:56 2026 GMT
Subject: CN=379aa6078b9926bcd5276212fdf07ef0147e0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:c0:6f:44:ed:ec:c7:18:ba:68:a5:13:06:
b8:78:8c:06:fb:4f:3b:e4:b9:bd:4b:7b:ab:41:e2:
2d:9c:e1:63:bc:38:d3:14:82:41:10:e9:5d:bf:29:
aa:79:fd:51:ef:ef:7e:ab:30:b1:3f:57:86:c6:88:
9a:1d:1b:14:d8:9f:20:71:d6:aa:5c:aa:c0:14:5a:
c6:a4:76:00:55:07:95:18:55:05:04:82:37:ed:91:
b1:02:7d:0f:35:ec:1b:2a:63:f8:12:79:95:17:bc:
69:c6:d1:0e:74:fe:89:53:b9:7e:de:c7:01:a9:60:
2e:0d:4d:46:31:4e:d3:71:6f:dc:fe:93:90:60:c5:
1a:5d:a3:95:a9:1c:05:3d:8e:50:49:48:76:7d:fa:
9e:29:b6:c1:18:d1:36:5a:3c:12:79:17:04:22:83:
8c:8a:42:82:0d:85:bf:a4:e5:18:d2:c5:8e:f7:76:
69:7d:27:1a:e4:a5:26:b3:7a:cc:7b:61:8c:88:32:
77:c9:5c:6c:44:21:84:60:0b:bf:c3:95:28:bc:22:
d7:63:68:44:09:f0:eb:aa:2a:0b:5f:1a:74:4a:f0:
9f:3d:ad:96:34:10:b3:27:b1:f4:56:94:fd:c7:e7:
cf:58:f7:9e:ee:0c:2c:36:1f:94:a8:e1:d2:08:a9:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:A6:07:8B:99:26:BC:D5:27:62:12:FD:F0:7E:F0:14:7E:0E:8A
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:e1:0c:2e:ba:be:17:8d:b0:33:f2:f1:c3:2f:e0:32:a3:
96:0d:15:bc:84:57:9f:29:ce:99:23:61:fb:f8:5c:12:54:9b:
ad:2d:6b:bb:1b:c5:9a:bf:dd:ba:ed:c7:27:c7:49:8f:eb:8c:
fd:36:0d:ff:81:51:23:99:23:9f:24:be:7f:07:1a:27:f6:d8:
5a:5c:ad:42:cd:3d:a0:a0:3d:d7:e4:24:ea:19:ee:68:5e:d0:
bb:77:c6:3f:1b:d3:08:7a:91:fe:03:57:5e:e7:18:bd:3f:d1:
5c:d2:99:82:47:1b:38:0b:fa:9c:a8:72:fa:e1:e7:d4:60:ad:
e0:20:12:ce:d9:6d:83:de:cc:4f:87:92:f2:1e:47:06:25:81:
65:8c:ec:aa:bd:6b:fe:4d:81:37:ec:53:c6:b9:10:b0:da:33:
9f:35:ae:5c:39:34:0e:9f:19:db:8f:f7:33:3c:f2:01:43:4f:
37:85:4c:e3:a6:40:91:92:ad:5d:d2:5d:23:f7:ee:e5:fc:38:
32:54:28:7e:f3:28:4e:e8:95:8f:1c:34:26:4e:ee:21:ab:dc:
6f:3c:70:ca:e6:3b:44:82:67:f7:39:4b:23:44:da:13:81:83:
dd:2e:f2:69:1e:7a:23:e1:5c:98:39:be:de:ac:57:bf:f1:0d:
71:05:a7:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkE8LqFHt7ekBoiwqd+F9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi
MjkwYjQwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD
EygzNzlhYTYwNzhiOTkyNmJjZDUyNzYyMTJmZGYwN2VmMDE0N2UwZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjDAb0Tt7McYumilEwa4eIwG+087
5Lm9S3urQeItnOFjvDjTFIJBEOldvymqef1R7+9+qzCxP1eGxoiaHRsU2J8gcdaq
XKrAFFrGpHYAVQeVGFUFBII37ZGxAn0PNewbKmP4EnmVF7xpxtEOdP6JU7l+3scB
qWAuDU1GMU7TcW/c/pOQYMUaXaOVqRwFPY5QSUh2ffqeKbbBGNE2WjwSeRcEIoOM
ikKCDYW/pOUY0sWO93ZpfSca5KUms3rMe2GMiDJ3yVxsRCGEYAu/w5UovCLXY2hE
CfDrqioLXxp0SvCfPa2WNBCzJ7H0VpT9x+fPWPee7gwsNh+UqOHSCKnXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeapgeLmSa81SdiEv3wfvAUfg6KMB8GA1UdIwQY
MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt
YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll
LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBXhDC66
vheNsDPy8cMv4DKjlg0VvIRXnynOmSNh+/hcElSbrS1ruxvFmr/duu3HJ8dJj+uM
/TYN/4FRI5kjnyS+fwcaJ/bYWlytQs09oKA91+Qk6hnuaF7Qu3fGPxvTCHqR/gNX
XucYvT/RXNKZgkcbOAv6nKhy+uHn1GCt4CASztltg97MT4eS8h5HBiWBZYzsqr1r
/k2BN+xTxrkQsNoznzWuXDk0Dp8Z24/3MzzyAUNPN4VM46ZAkZKtXdJdI/fu5fw4
MlQofvMoTuiVjxw0Jk7uIavcbzxwyuY7RIJn9zlLI0TaE4GD3S7yaR56I+FcmDm+
3qxXv/ENcQWn3g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:05 2026 by rpki-client