This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: jk8v3RzRxIYQxpV1AW4QuKvAj8o/PkZDKZzN5VXMUlo=
Subject key identifier: AF:78:A0:33:84:12:29:5A:5A:A5:6E:E8:29:EA:CD:96:F7:A9:A9:53
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019BF91B3F426DA2E108FBEE9E17B7482D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1835
Signing time: Mon 26 Jan 2026 07:01:10 +0000
Manifest this update: Mon 26 Jan 2026 07:01:10 +0000
Manifest next update: Tue 27 Jan 2026 07:01:10 +0000
Files and hashes: 1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 0i79/zf5F+8KGQ89uhFgi2X+MXPs2sutM/3iuH3EPuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:3f:42:6d:a2:e1:08:fb:ee:9e:17:b7:48:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 26 07:01:10 2026 GMT
Not After : Jan 27 07:01:10 2026 GMT
Subject: CN=af78a0338412295a5aa56ee829eacd96f7a9a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:2a:a3:89:7f:eb:c4:e6:ea:cb:fa:24:89:
90:e3:58:f2:45:08:b1:f1:c6:81:d6:55:ca:e0:87:
72:37:5c:f5:98:95:d9:4b:6e:a9:7d:72:de:9f:f1:
b4:4d:f4:79:81:64:fd:1e:1d:17:c6:e1:5e:77:cf:
c4:18:c0:3a:32:5d:85:f6:29:b2:82:eb:6f:a8:94:
3e:df:37:cb:ff:13:31:f9:d0:92:02:76:0c:0d:1c:
20:e9:8c:cf:07:33:ec:cd:f7:5b:22:37:4d:c4:0f:
22:14:f0:61:bc:6c:81:f0:96:1b:bf:56:4a:9c:ce:
24:87:ee:22:c1:38:a6:ab:29:6f:d2:8b:af:41:bb:
5d:e3:8f:17:5c:01:29:15:26:37:5e:10:ef:72:f4:
63:e7:6a:86:aa:54:7b:d5:7b:11:03:b4:de:56:0b:
fe:55:d0:b7:7b:e3:d3:0e:d2:bc:d2:aa:c6:12:76:
57:6d:8f:84:b6:33:68:8e:b2:d7:5c:b4:23:28:3d:
38:ab:c7:2d:7b:ec:d8:07:41:fd:1e:16:45:79:65:
93:c0:dc:97:fc:29:bf:eb:3c:d3:8c:99:16:45:79:
d6:f0:d9:94:cb:df:5f:a9:a6:03:9d:bb:cb:66:c1:
1d:9f:d7:23:f5:f2:b1:cb:4d:bc:f7:08:97:13:81:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:A0:33:84:12:29:5A:5A:A5:6E:E8:29:EA:CD:96:F7:A9:A9:53
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:45:23:8d:e6:12:56:0f:fe:c8:b4:48:c4:8a:09:46:cb:65:
60:bc:6e:ed:93:d5:60:81:55:4c:ba:c7:1a:7b:d9:56:94:d3:
47:34:6c:1c:25:75:7a:fa:09:59:4c:6c:46:c4:91:9d:bc:6e:
2f:31:17:b1:50:6c:1e:c8:1c:a2:fd:90:f1:9a:e5:8f:10:da:
c6:25:d6:89:34:6d:35:c3:9c:1b:77:b2:ae:1b:5e:d4:88:37:
e6:2a:64:41:f9:f9:ea:20:0d:08:a5:49:53:2e:67:b3:0e:83:
5d:3e:2b:20:e0:73:14:a4:d2:69:dc:a9:3a:d7:8c:45:6b:4b:
49:f7:f3:fc:b9:35:e3:82:0e:c1:37:1e:8b:35:34:87:01:e3:
a3:a5:ee:b8:9d:d8:2c:1c:cc:11:36:da:cd:77:cf:23:b5:54:
b1:14:88:60:87:83:96:ff:80:e0:50:0e:80:43:9e:61:0b:fa:
77:44:09:46:9b:34:ae:f1:ea:18:30:4b:12:c4:52:17:6d:b6:
cd:5a:75:a9:84:64:bb:34:32:86:04:89:63:0e:e8:d7:4d:f9:
ce:0c:47:dc:25:ff:ec:a2:f1:8e:d4:f0:78:92:f1:6a:cd:8b:
ee:a5:bd:e0:9b:14:99:3a:01:1e:f3:0b:0e:66:cc:23:aa:6e:
71:0a:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:03 2026 by rpki-client