This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: QHHJPYRc65pN+IKET+A19u9iQaugQFu2zRUzv0epDOw=
Subject key identifier: 2F:F3:F1:82:59:F7:97:F3:F1:F7:5B:CE:56:78:D6:86:05:A1:4A:37
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019BF462CA219A1554B16D8B71B1808C11E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 176A
Signing time: Sun 25 Jan 2026 09:01:13 +0000
Manifest this update: Sun 25 Jan 2026 09:01:13 +0000
Manifest next update: Mon 26 Jan 2026 09:01:13 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: gqBicG4O3FgzN+KtrB3+lObhKKwjX8PlmtonKUeoLtE=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:ca:21:9a:15:54:b1:6d:8b:71:b1:80:8c:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 25 09:01:13 2026 GMT
Not After : Jan 26 09:01:13 2026 GMT
Subject: CN=2ff3f18259f797f3f1f75bce5678d68605a14a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:40:8b:bb:ed:ab:84:3b:8f:1d:dc:99:81:
26:ed:56:75:8f:08:27:00:76:a1:31:83:74:91:a4:
bb:44:56:56:99:2a:89:74:c1:a7:4b:13:88:de:c9:
5c:01:fb:76:55:7a:08:ee:d1:d1:8e:5b:4e:b4:ee:
d7:28:5a:71:0b:99:94:d7:87:9e:d6:bd:fd:8f:e5:
ea:31:93:e1:7a:fc:af:18:9e:e4:d9:1a:3a:1d:53:
6e:46:21:ab:f1:d3:4d:82:ad:91:b4:5c:4f:a6:a2:
97:9f:b1:66:02:14:9a:85:5d:48:9a:1b:f5:cf:ed:
14:e2:31:bf:98:9a:77:87:86:18:a9:aa:a8:11:10:
d4:33:6f:1f:f6:b6:e3:00:4c:bf:57:bd:09:d5:74:
21:34:21:f1:97:b0:eb:e2:54:c5:01:53:d1:3e:bb:
36:2a:75:ff:25:2c:a9:dc:74:fe:2f:d3:66:16:86:
d0:68:92:a0:05:43:e1:7c:37:b4:94:aa:3d:a7:2e:
0c:b6:c5:4c:7b:64:ad:d5:3d:78:c4:c0:5f:ec:f2:
60:e4:02:64:36:23:a7:c6:57:c5:f9:24:42:25:19:
8f:6c:49:6a:6b:64:1d:72:fb:39:7c:21:8b:11:2f:
2d:19:8c:3f:8e:8d:a6:05:bf:17:ce:8a:7b:2a:79:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:F1:82:59:F7:97:F3:F1:F7:5B:CE:56:78:D6:86:05:A1:4A:37
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0c:92:f1:d8:59:b5:20:48:6a:ee:e8:b5:77:e2:46:cb:e5:
1e:3f:17:f1:fa:66:db:25:37:62:a8:34:7e:b7:b2:ae:60:9b:
63:0a:48:30:a9:74:ec:e4:3d:b5:ba:70:20:f5:1a:a6:a3:5a:
67:54:2a:86:b1:db:15:91:f2:ab:0c:76:23:e7:56:91:a4:61:
06:e4:80:5f:38:b1:71:6b:18:89:23:98:f1:5e:ad:24:f4:f4:
8b:6f:26:f7:e1:10:74:05:ac:a3:3a:a2:f2:28:81:21:8e:20:
a0:b8:f1:6a:9b:65:a1:32:e7:54:a9:ea:2c:bb:48:be:64:2e:
a2:2a:0b:5a:d4:a3:cb:59:08:03:f0:df:1d:ad:b4:84:bc:bb:
aa:ff:be:b7:9b:1a:b0:4a:f6:34:00:2e:86:25:c9:a8:60:b9:
56:2d:df:4f:29:5f:37:3c:a6:36:99:04:76:22:03:2d:a7:fd:
e2:18:59:04:67:a4:aa:82:45:44:4d:7b:d7:bd:78:d2:90:9e:
c1:45:3c:ba:af:97:fa:33:2e:12:8d:2d:5b:b4:bd:53:57:14:
e5:89:76:fb:70:56:59:9f:16:c3:f3:8c:a8:e5:13:9f:07:ce:
ad:d0:bb:a3:a5:82:c3:65:14:cd:43:52:30:b5:02:c4:4e:af:
75:9a:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:48 2026 by rpki-client