This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: DZDNCU/hFXAliPiz2oBISXs10mwm5ta6xFNOOpg1uqA=
Subject key identifier: 86:06:C2:49:6F:6F:14:C3:81:46:25:C3:2D:FF:31:CF:1F:94:AF:C0
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 019C416AA99B2BBDA53EE660E126006A53FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0B16
Signing time: Mon 09 Feb 2026 08:00:35 +0000
Manifest this update: Mon 09 Feb 2026 08:00:35 +0000
Manifest next update: Tue 10 Feb 2026 08:00:35 +0000
Files and hashes: 1: GlykVOikn4XnRoLuWNGdM56c2EM.roa (hash: PEeEYZ6zGRcz+bkEXEUMwgvLYtQPN6tXT1/DZfRULqk=)
2: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: Z0Fus1kIlWURwiaR9IVEARHsLWNuEkeijgf+5tuPu44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:a9:9b:2b:bd:a5:3e:e6:60:e1:26:00:6a:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Feb 9 08:00:35 2026 GMT
Not After : Feb 10 08:00:35 2026 GMT
Subject: CN=8606c2496f6f14c3814625c32dff31cf1f94afc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:84:b1:e1:4e:9c:72:31:f9:90:4e:eb:f2:
e9:4b:8f:1d:50:da:16:41:90:a4:38:d4:3f:92:df:
2f:25:50:93:26:3a:ff:c7:2b:2e:9e:af:f4:de:76:
8f:20:90:87:0e:78:92:d0:6d:64:81:6e:9c:d2:aa:
9a:ee:54:40:31:52:e9:3c:32:06:93:c8:aa:a9:26:
b6:2a:04:b5:3f:b0:57:a5:5f:a8:51:96:f6:b3:d2:
e4:3c:0a:fb:79:cb:37:99:7e:92:90:35:e5:5b:de:
39:c7:16:e6:5f:5e:1e:fe:5e:fa:11:45:b8:f1:e3:
0c:32:26:ae:80:f5:8b:4c:e5:fb:88:13:c8:90:ff:
af:32:a4:9a:0e:a7:14:d5:a7:74:14:ac:b0:62:3d:
46:b0:60:fd:c6:c0:bc:25:6b:00:99:7a:8c:fa:f9:
4a:49:8f:95:d2:70:2a:3f:ac:c0:19:d5:be:ae:e5:
4f:ae:b2:2c:64:8f:2c:fd:35:ef:b7:c5:9b:79:3c:
f6:4d:02:5a:71:e6:3a:a4:30:6c:56:80:72:de:34:
39:95:76:93:45:61:4a:ff:f0:7e:1e:49:6e:80:46:
82:06:51:7f:27:6f:21:75:fa:db:91:1d:16:22:92:
b6:91:06:02:4e:35:f5:3f:c6:10:56:8e:11:22:b6:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:C2:49:6F:6F:14:C3:81:46:25:C3:2D:FF:31:CF:1F:94:AF:C0
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:b0:5b:eb:a9:1e:d8:52:3d:ee:76:f7:25:01:64:59:c2:
dd:c1:f5:e0:a0:c0:b3:d9:40:37:46:66:20:df:50:29:ce:eb:
68:97:11:11:7a:5c:db:96:47:32:f8:02:22:2b:5e:bf:1d:b7:
b2:48:1d:c3:10:72:5b:b4:9b:86:72:fb:b9:1b:8c:7c:a6:8a:
42:02:5e:8b:05:f5:c7:84:9b:ca:a9:98:5f:79:0a:27:77:61:
b6:f3:04:82:89:a6:ea:71:5c:a8:40:3f:b6:ff:41:c3:02:d9:
75:c4:35:f6:ea:82:d9:79:f4:0f:0f:57:ad:8e:42:5a:b2:14:
b5:01:19:66:1f:2e:23:27:00:b5:74:41:29:13:ac:50:76:6c:
c4:92:cb:4b:2e:ba:f6:3b:29:c2:df:84:27:a0:e9:64:69:c4:
91:e1:a0:d2:e2:bb:ce:c3:4b:11:ff:34:93:bb:e3:b6:64:4c:
34:8c:43:7d:f8:a6:f2:17:d7:48:04:8b:11:db:7a:00:59:bf:
89:04:c8:fa:09:b5:7d:a5:90:a2:d5:89:7d:1a:e0:8a:a4:10:
2a:7a:f7:68:b9:aa:4d:09:c6:32:34:e9:a2:c3:04:06:0c:a1:
c8:7b:0d:a8:ae:67:9e:f3:dc:df:c4:4e:b3:b3:26:25:6c:72:
bf:b6:1f:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaqmbK72lPuZg4SYAalP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTgyNzdkMWZlYWI1MjM4N2VhYjI2ZjhkY2NhOTI2MGMy
NThhM2QwHhcNMjYwMjA5MDgwMDM1WhcNMjYwMjEwMDgwMDM1WjAzMTEwLwYDVQQD
Eyg4NjA2YzI0OTZmNmYxNGMzODE0NjI1YzMyZGZmMzFjZjFmOTRhZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSWEseFOnHIx+ZBO6/LpS48dUNoW
QZCkONQ/kt8vJVCTJjr/xysunq/03naPIJCHDniS0G1kgW6c0qqa7lRAMVLpPDIG
k8iqqSa2KgS1P7BXpV+oUZb2s9LkPAr7ecs3mX6SkDXlW945xxbmX14e/l76EUW4
8eMMMiaugPWLTOX7iBPIkP+vMqSaDqcU1ad0FKywYj1GsGD9xsC8JWsAmXqM+vlK
SY+V0nAqP6zAGdW+ruVPrrIsZI8s/TXvt8WbeTz2TQJaceY6pDBsVoBy3jQ5lXaT
RWFK//B+HklugEaCBlF/J28hdfrbkR0WIpK2kQYCTjX1P8YQVo4RIrb86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYGwklvbxTDgUYlwy3/Mc8flK/AMB8GA1UdIwQY
MBaAFCXoJ30f6rUjh+qyb43MqSYMJYo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMt
YmFmMjU3MmU4MDkzLzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMtYmFmMjU3MmU4MDkz
LzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE+wW+up
HthSPe529yUBZFnC3cH14KDAs9lAN0ZmIN9QKc7raJcREXpc25ZHMvgCIitevx23
skgdwxByW7SbhnL7uRuMfKaKQgJeiwX1x4SbyqmYX3kKJ3dhtvMEgomm6nFcqEA/
tv9BwwLZdcQ19uqC2Xn0Dw9XrY5CWrIUtQEZZh8uIycAtXRBKROsUHZsxJLLSy66
9jspwt+EJ6DpZGnEkeGg0uK7zsNLEf80k7vjtmRMNIxDffim8hfXSASLEdt6AFm/
iQTI+gm1faWQotWJfRrgiqQQKnr3aLmqTQnGMjTposMEBgyhyHsNqK5nnvPc38RO
s7MmJWxyv7YfLQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:13 2026 by rpki-client