This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: AEyA+gffJFtxP/IuG418BnwWM+BKLMoKzkKH2APWCPM=
Subject key identifier: C5:F5:9B:67:05:00:8B:E6:6E:55:30:BA:2C:61:6D:97:8C:CA:98:56
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019BF61A55B149F3FBD926C0895C016C79C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 17:01:19 +0000
Manifest this update: Sun 25 Jan 2026 17:01:19 +0000
Manifest next update: Mon 26 Jan 2026 17:01:19 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: AEkogedBNQTOdh8kW7qCT7QqYC0zIERbGAcHAHQQwLU=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:1a:55:b1:49:f3:fb:d9:26:c0:89:5c:01:6c:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jan 25 17:01:19 2026 GMT
Not After : Jan 26 17:01:19 2026 GMT
Subject: CN=c5f59b6705008be66e5530ba2c616d978cca9856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:b9:2b:d5:26:02:36:45:d5:26:93:03:50:
c5:1e:51:9a:33:42:53:24:a6:9f:8e:66:63:14:48:
61:f2:7b:aa:84:bb:dd:f0:7a:55:43:75:80:0a:e5:
29:38:02:98:b2:3f:bd:2a:f4:84:03:21:08:2b:3f:
80:0b:7e:b3:db:62:0a:f0:e1:36:17:e1:5d:bf:7b:
47:fe:09:cc:f3:d0:95:fd:32:16:bd:b4:df:5b:61:
72:7e:2f:12:e2:39:b0:e0:5c:3b:63:a9:dc:98:b8:
ac:33:91:d5:73:40:f4:39:b3:1d:f4:10:10:8a:ee:
2d:fe:51:24:9d:78:aa:57:ad:29:a9:84:77:e4:7c:
01:3c:f5:a5:36:16:dd:af:4f:88:cf:23:9b:f8:43:
cc:b9:11:d8:82:37:7c:fc:2b:db:ac:73:b8:2e:91:
fe:10:fd:8f:a3:25:f9:ff:50:c5:5a:08:1f:e7:6d:
ac:42:64:8d:5c:8a:ab:cf:56:94:3c:91:f6:37:ac:
ed:d7:d9:21:80:1a:76:da:4b:c5:6a:51:34:54:a8:
7c:4c:fb:ef:fc:03:06:ff:ff:24:2d:a7:2c:3f:62:
2e:e0:3b:d0:5a:d4:38:2a:f5:7b:4f:e3:05:da:99:
2e:60:91:91:00:0d:89:fa:40:1d:be:ab:a4:95:21:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:9B:67:05:00:8B:E6:6E:55:30:BA:2C:61:6D:97:8C:CA:98:56
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a2:2f:c1:59:e3:2e:0a:57:db:50:5d:a0:5b:5c:d4:a5:38:
52:26:57:16:3a:c2:9d:bd:52:0e:96:92:4f:13:22:e0:d3:1e:
95:83:b3:14:a3:05:60:44:f3:82:63:05:6e:37:17:c2:87:ce:
cf:fe:79:e5:ae:f5:9d:fa:ad:6a:93:8a:c6:2b:a8:f8:92:22:
84:95:89:3a:b1:6a:4c:13:bc:40:9e:e7:da:95:af:08:bc:63:
41:15:67:33:f2:91:eb:3e:09:6f:f2:bf:a1:bd:c5:14:f5:df:
58:df:c8:c9:c1:04:9d:a0:29:85:bc:db:35:dd:c6:86:5d:f8:
f3:17:f0:c1:4a:75:76:48:e7:02:52:8a:ec:ae:c6:f1:fa:68:
66:c0:a0:48:ef:3b:dd:44:95:22:d2:b3:fb:96:13:1c:4a:88:
f2:2c:2a:dc:f7:91:40:f4:52:d9:87:b6:cf:b3:dc:54:65:7e:
e0:6c:48:08:e8:26:08:e3:ef:a2:54:41:44:1d:48:84:e2:fe:
e4:08:1c:e7:b8:a1:57:f7:21:fe:01:a7:ad:53:ff:62:5e:04:
3d:cd:c0:f1:2e:54:da:00:0f:aa:cb:b0:57:2e:58:d2:4e:4e:
fa:64:8d:5a:79:ea:b3:a6:eb:fc:a1:8a:2c:a7:26:56:2c:a0:
82:fb:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:28:08 2026 by rpki-client