This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: KtwiKV1nrONRTiow1tJ6HF434FyWBSbDp8A5sv5sj6E=
Subject key identifier: 5A:24:89:33:C4:CE:58:D4:0E:63:7C:2F:BC:C3:57:CE:BF:DF:C4:E1
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019C39E8CB0AF9A573BBC4AF05C135C469A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 179F
Signing time: Sat 07 Feb 2026 21:01:23 +0000
Manifest this update: Sat 07 Feb 2026 21:01:23 +0000
Manifest next update: Sun 08 Feb 2026 21:01:23 +0000
Files and hashes: 1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: Y5AEdfJ1+K2mqDgWv5QJZZmNaf7ul2wVlYHLx5OMa0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:39:e8:cb:0a:f9:a5:73:bb:c4:af:05:c1:35:c4:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Feb 7 21:01:23 2026 GMT
Not After : Feb 8 21:01:23 2026 GMT
Subject: CN=5a248933c4ce58d40e637c2fbcc357cebfdfc4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:3a:b6:62:83:d7:12:ad:a1:83:4b:eb:32:
e6:0d:6f:ae:d1:dc:38:b2:81:93:4e:8a:2f:da:56:
2d:d9:60:d6:c8:9f:83:63:10:0d:e2:c7:42:8f:83:
8f:f2:27:e3:98:a7:03:54:51:43:37:3b:a2:c8:23:
0f:a0:4f:2c:a4:a0:59:79:c9:6e:be:f6:df:7b:5b:
1f:9e:b6:b6:77:39:25:21:f7:a5:33:b2:de:8d:4c:
b2:02:e6:db:1e:b0:6e:86:a6:e3:0e:9f:eb:9b:e2:
af:dc:5c:73:3f:48:90:66:15:0d:dc:72:39:31:12:
31:00:5d:59:f1:c2:ea:a7:cc:c5:31:50:0e:93:63:
0c:49:48:98:6f:d7:55:28:d9:df:b9:65:da:f0:2b:
0c:0b:e2:83:69:c2:30:f5:b9:02:b5:8d:fa:77:97:
80:2c:85:15:55:a5:4d:48:f1:5f:00:8a:26:b5:7b:
35:8a:a1:45:18:72:c0:1b:a9:cd:7c:11:90:df:54:
83:32:8b:f0:4e:a3:4e:f9:80:15:98:d7:09:ee:6b:
d2:3d:28:77:f4:b6:ca:b2:bb:be:eb:be:c1:aa:5b:
09:7a:dc:ec:f7:51:70:23:e2:82:58:a2:be:6e:cb:
70:f4:aa:d4:1b:b6:cf:4a:ec:ab:11:64:d8:d7:e7:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:89:33:C4:CE:58:D4:0E:63:7C:2F:BC:C3:57:CE:BF:DF:C4:E1
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:aa:ea:ce:fc:77:61:bc:a7:44:58:a9:5d:51:c4:b6:89:b2:
53:89:0c:23:38:4b:cc:2e:a4:a9:62:25:cd:4e:bd:63:6f:47:
55:2a:59:5c:02:f8:5b:20:63:b9:cf:0e:b4:68:35:7f:06:d8:
a8:23:a3:3b:9a:24:04:09:c7:1f:e7:98:14:4a:45:81:aa:26:
b4:98:35:bb:ed:36:8a:3a:78:f1:eb:7e:f5:b6:8d:03:68:30:
12:62:f2:e6:11:48:88:0d:49:01:52:df:4a:a2:95:c7:22:aa:
82:90:70:4c:45:08:71:d6:76:44:aa:1a:35:78:28:85:84:fa:
13:13:c3:ed:11:75:71:22:41:b4:3a:bb:e2:e9:36:41:98:b9:
3c:7f:47:9f:e9:0d:cf:a0:80:82:b2:c6:6e:13:12:57:e8:ad:
0f:0b:06:94:29:d8:66:52:d3:0a:0c:97:1c:45:97:d6:04:f8:
02:03:58:5e:5d:f5:40:bf:f5:74:a0:37:f0:43:93:82:d6:e0:
b6:9e:7b:82:21:5a:42:25:72:8d:c4:bc:91:c5:6d:eb:59:57:
df:51:ab:bd:8d:23:57:13:f3:00:0f:1a:11:a7:24:c9:32:61:
65:ec:36:86:7c:51:2e:3b:2f:a8:56:a0:cc:ce:49:bb:f7:6b:
b6:c0:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 06:25:23 2026 by rpki-client