This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: cDt6xRR4Nz4Q9Zp7NmQViCdYYXUWQovm1xqTX+jbBxI=
Subject key identifier: EA:8D:58:19:CC:3C:CE:4F:DF:18:68:A0:65:8E:1F:73:E7:29:C2:F3
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 019C4322DBE402B64E7ED3FCD36ADA388603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 0B6E
Signing time: Mon 09 Feb 2026 16:01:23 +0000
Manifest this update: Mon 09 Feb 2026 16:01:23 +0000
Manifest next update: Tue 10 Feb 2026 16:01:23 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: BmgFvCq0CA4pIRCOuk3Kv4orRCjtbfokgiQ3njuwlSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:db:e4:02:b6:4e:7e:d3:fc:d3:6a:da:38:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Feb 9 16:01:23 2026 GMT
Not After : Feb 10 16:01:23 2026 GMT
Subject: CN=ea8d5819cc3cce4fdf1868a0658e1f73e729c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:8d:03:85:25:57:bf:02:48:95:2a:27:8b:
5c:b5:d9:1a:1e:e9:65:36:fc:50:8d:79:84:4b:ce:
7e:d0:68:74:44:8b:d5:c4:04:b6:57:16:05:9a:89:
ca:fc:92:12:bd:ea:78:e7:c8:92:0e:bf:ef:83:1d:
ac:71:4c:87:03:b6:ca:1b:75:c1:3e:39:90:4b:f1:
27:34:2f:6b:f8:de:22:13:a8:be:be:32:a9:8c:48:
ed:d6:f9:77:fd:72:7e:fe:9f:01:07:c1:b1:cf:59:
14:1a:5d:a3:5b:68:b6:96:cb:28:93:1d:f7:d2:af:
b4:9c:45:1d:59:b4:90:4b:5d:de:7e:35:fa:80:65:
cd:e8:e9:46:15:ab:99:79:2e:89:3b:4f:a6:0f:83:
eb:24:91:e3:e4:3e:fe:4e:0d:53:79:ee:d7:b3:82:
5d:34:ca:4d:90:de:f5:09:ba:13:4d:07:9a:83:19:
9f:0a:54:16:68:5c:da:88:5a:dd:e9:3d:7a:a4:57:
de:d6:37:02:74:eb:a8:f2:4d:67:02:16:11:3a:de:
7a:8d:5f:5b:88:6f:24:35:6b:a9:e6:f0:6d:fe:c5:
ef:59:ff:6b:04:ba:a4:24:bb:cb:cd:c2:ef:3b:97:
24:2e:23:39:66:4d:32:39:03:34:fb:0d:6e:ce:b7:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:58:19:CC:3C:CE:4F:DF:18:68:A0:65:8E:1F:73:E7:29:C2:F3
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:48:ce:3e:ec:20:9d:2a:2a:c2:16:24:8d:ab:e1:77:52:
24:6f:85:1c:4d:9b:65:bc:5e:b5:b2:07:d6:a5:79:7b:4c:14:
21:b1:15:51:a6:10:08:e8:98:44:77:ec:fc:ef:78:ad:50:70:
80:ce:d6:ae:93:9c:7e:cc:67:ff:0b:20:d8:58:d7:d7:4f:11:
bd:f8:50:9f:36:a8:5f:0c:0a:ee:ca:69:5e:01:a3:8b:1a:5b:
f8:cd:3b:e0:97:60:58:17:36:d3:99:17:ce:9a:87:71:d7:12:
02:11:a8:e3:a7:0e:b2:c3:5f:1c:d0:ce:a9:e5:fa:c8:37:72:
4f:92:de:04:20:c5:a5:62:63:60:d5:04:6b:e3:b0:89:ba:ad:
db:f8:47:69:0c:2a:d1:3b:0e:e7:c1:0b:d2:a2:33:a6:49:b3:
13:48:5a:2f:ec:e4:d7:3c:ec:d7:af:9a:1b:bf:18:64:a3:86:
73:4b:64:a8:0b:74:f1:da:ce:c5:71:49:78:f1:1d:4e:69:cb:
bb:b9:53:eb:3c:77:d7:9f:7b:8c:e7:c6:b1:f3:99:53:d0:b5:
78:ad:80:de:cc:22:9e:ab:d6:ee:b2:fc:57:cb:da:bb:65:b8:
bd:31:81:34:a4:01:00:a7:c7:80:6e:9f:f0:ff:9d:6b:9e:cd:
cd:d4:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:02 2026 by rpki-client