This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: 4/ehE2f2l6Smfk0MYgr7pr2mcWXrD05dNDJwb//znCg=
Subject key identifier: 8B:74:6E:F9:8B:61:6E:C7:5F:20:C4:88:6D:88:95:A5:A8:EE:67:AB
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019C424643CA0EAD2BAD6368F092E9024578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0CE5
Signing time: Mon 09 Feb 2026 12:00:27 +0000
Manifest this update: Mon 09 Feb 2026 12:00:27 +0000
Manifest next update: Tue 10 Feb 2026 12:00:27 +0000
Files and hashes: 1: HicIDZMbcNLp_sFaOT70NM1dk-A.roa (hash: oFoTMWe4jG5kyZXaz3ugU3TiaWlqRkipFfUCxRN/kLw=)
2: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: tcm+0FDCMZEZVTI57mv64XI2lzodIK+KJyST3FMv1xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:43:ca:0e:ad:2b:ad:63:68:f0:92:e9:02:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Feb 9 12:00:27 2026 GMT
Not After : Feb 10 12:00:27 2026 GMT
Subject: CN=8b746ef98b616ec75f20c4886d8895a5a8ee67ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:e7:56:d7:6a:25:22:0e:81:7c:36:75:f7:
18:56:8b:12:45:a5:2b:6e:d7:fe:a1:96:ad:46:fe:
dc:0c:03:bb:42:c7:f9:50:22:f6:ab:60:23:84:1d:
f7:a4:66:a6:7f:9b:0a:b8:3a:57:4b:46:5d:f9:3d:
4a:00:0c:b9:09:88:41:8a:6e:54:43:58:f3:3c:67:
aa:ea:34:b8:97:db:ba:fc:84:8e:db:ce:45:7a:90:
f9:dd:18:f8:1b:69:7a:04:53:97:b6:57:36:5c:6a:
9f:1f:5c:fe:38:dc:a6:57:bf:79:a9:fa:d2:e5:ac:
16:ed:96:1d:da:cc:30:18:04:0b:90:83:b2:2a:40:
12:aa:2a:56:04:86:95:46:21:6e:6a:8a:08:29:c4:
f4:25:83:2d:83:f5:cb:f4:f0:05:bf:c3:a1:63:fb:
dd:da:e5:68:a7:3f:4c:a1:ea:34:c3:78:d1:b2:fe:
d6:99:d8:ec:14:2a:ae:39:66:e1:f9:9a:36:09:5a:
d3:c6:a1:6a:28:0c:78:9b:59:db:23:9a:b0:78:16:
96:f7:4e:f4:50:a8:1f:40:00:57:a0:6c:e5:81:56:
62:65:01:82:44:eb:78:7c:11:e2:c8:71:9f:8d:c3:
24:19:82:d6:45:60:26:14:5c:db:be:b1:96:a7:3d:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:6E:F9:8B:61:6E:C7:5F:20:C4:88:6D:88:95:A5:A8:EE:67:AB
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:22:ef:08:67:e5:27:3b:f2:0f:03:02:23:9d:02:ff:68:fa:
a7:07:b8:af:2a:55:3f:9e:4b:e7:e5:56:f0:1c:4c:77:88:f4:
c2:2b:95:ae:fe:a0:e0:64:ce:65:04:f8:c8:a6:7e:70:ab:91:
33:a8:09:3b:ff:f3:a9:73:c9:85:99:24:3f:37:59:b3:a2:76:
d6:dc:43:da:be:3c:66:82:c7:f6:24:34:ce:ef:00:e1:27:ca:
8d:c1:7e:97:c8:a6:fe:03:f9:30:47:a8:b6:8b:b3:d8:e2:3d:
f1:e2:eb:c1:36:1e:cf:d1:b1:80:10:e1:28:5a:33:e5:13:eb:
91:11:7b:18:f5:de:29:bd:b3:63:f4:72:57:85:5f:9d:02:5d:
cc:a9:b8:02:da:ae:e3:83:fd:48:0c:c8:fc:2d:44:34:33:5b:
38:45:ff:11:f8:fd:4c:df:b5:77:d2:34:ed:5b:32:80:26:65:
0e:04:a8:25:fc:19:62:af:4b:e3:81:84:7f:fc:77:ec:e8:e4:
74:ca:e5:c5:e9:7c:38:1e:da:d8:d8:e2:2b:da:fa:de:8e:75:
e2:cb:f9:36:56:f8:f3:fa:e9:4a:e6:c3:f1:2f:da:b5:3a:99:
dd:ce:cb:89:17:de:b3:9b:c1:71:e0:b2:93:ff:cf:a9:c5:bf:
22:3a:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:51 2026 by rpki-client