This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: 6oGi9LFK2t86lni/7IE1DPffAkr4sXAJZ2BD90Yj5Y8=
Subject key identifier: C9:CA:3C:F7:36:5A:AE:6A:A6:DB:6E:5F:72:90:0B:EE:B5:B8:B1:BE
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019BF687E98A49211F42B9CE864004015999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 19:01:00 +0000
Manifest this update: Sun 25 Jan 2026 19:01:00 +0000
Manifest next update: Mon 26 Jan 2026 19:01:00 +0000
Files and hashes: 1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: UQONVwlgxyXZR5glsNUawVFjxymStPu5X5tfBK/47eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:e9:8a:49:21:1f:42:b9:ce:86:40:04:01:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Jan 25 19:01:00 2026 GMT
Not After : Jan 26 19:01:00 2026 GMT
Subject: CN=c9ca3cf7365aae6aa6db6e5f72900beeb5b8b1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:e1:4f:70:b0:9b:73:1d:e1:4a:86:c2:6a:
dc:d9:6d:bc:dd:a9:7e:23:5f:81:02:4e:5f:f3:94:
c1:3d:f0:9c:e1:80:b9:e2:12:35:43:17:cb:c9:3c:
00:3a:78:13:cd:4c:42:26:b6:20:5b:1a:de:01:59:
47:df:95:f9:5d:29:c3:62:cf:a7:12:61:35:56:70:
c8:93:2d:9f:81:be:8e:3d:d9:ee:c8:8c:c9:d7:ed:
38:db:94:2c:c9:a7:d6:0b:51:2a:32:bb:8f:32:01:
8d:75:89:92:a6:e4:38:84:d9:9e:9b:11:9f:2c:54:
e2:e7:c6:10:23:5c:09:d7:61:af:fa:21:1b:de:23:
db:7b:07:88:ca:27:2f:6d:0b:aa:cb:94:92:e5:56:
58:8a:34:d7:33:e6:90:85:1a:c0:da:1e:3a:6c:c5:
0d:ed:cd:fc:c2:f1:5a:ac:b8:fc:9a:52:be:54:ec:
c9:34:61:18:3e:59:de:ba:ab:ef:ba:db:11:79:41:
fa:d2:2a:5a:01:30:9e:fa:28:62:8b:4b:c0:58:29:
fa:2c:a4:6d:fd:9a:33:3a:c7:9c:7d:70:b8:92:bf:
ac:17:24:07:11:e9:50:98:a6:e4:e0:77:c3:14:fa:
27:29:32:b5:e8:4f:ba:0b:b0:a0:54:6d:da:33:d6:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:3C:F7:36:5A:AE:6A:A6:DB:6E:5F:72:90:0B:EE:B5:B8:B1:BE
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:bb:d7:c8:96:a3:7f:db:7c:eb:1c:35:0b:38:29:d2:ea:
84:f0:39:aa:41:7a:94:9a:2e:99:65:5f:4f:41:19:99:3b:47:
b5:8c:ca:ff:db:f6:ab:73:12:f4:da:98:17:50:0a:92:5a:d7:
be:44:89:86:ad:30:4c:74:2c:ce:db:de:72:40:ed:1c:8a:e2:
19:24:c2:2d:df:cf:84:64:66:fe:40:7c:aa:e2:91:11:d0:46:
4e:8c:8f:fb:39:91:e2:10:f8:cf:0b:91:46:70:84:e5:e2:6e:
79:35:0b:4d:2a:ce:bc:32:dd:24:b5:4a:9d:3b:ac:c5:e9:bc:
2c:7c:fa:a2:2a:51:fc:f0:14:24:11:97:2e:69:60:8c:05:0c:
b8:1f:3c:f5:5c:79:f4:0b:ea:64:44:e9:14:66:d1:0d:f8:6a:
31:3b:14:08:9a:98:2a:d4:47:6a:e0:a8:aa:cc:72:6c:f0:29:
00:75:8b:7e:87:70:9b:a4:be:0a:8b:be:b6:ba:df:32:f3:71:
5b:b0:47:19:0a:1a:77:db:2e:75:a1:fb:44:83:24:78:55:0d:
6d:d8:25:28:51:9a:68:94:d5:46:8f:3d:72:87:c1:97:a7:d5:
1b:5b:5d:c9:bb:88:03:d0:50:ff:61:3a:7c:7c:bd:bd:13:32:
9d:16:43:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2h+mKSSEfQrnOhkAEAVmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll
Yzc1M2EwHhcNMjYwMTI1MTkwMTAwWhcNMjYwMTI2MTkwMTAwWjAzMTEwLwYDVQQD
EyhjOWNhM2NmNzM2NWFhZTZhYTZkYjZlNWY3MjkwMGJlZWI1YjhiMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT/hT3Cwm3Md4UqGwmrc2W283al+
I1+BAk5f85TBPfCc4YC54hI1QxfLyTwAOngTzUxCJrYgWxreAVlH35X5XSnDYs+n
EmE1VnDIky2fgb6OPdnuyIzJ1+0425QsyafWC1EqMruPMgGNdYmSpuQ4hNmemxGf
LFTi58YQI1wJ12Gv+iEb3iPbeweIyicvbQuqy5SS5VZYijTXM+aQhRrA2h46bMUN
7c38wvFarLj8mlK+VOzJNGEYPlneuqvvutsReUH60ipaATCe+ihii0vAWCn6LKRt
/ZozOsecfXC4kr+sFyQHEelQmKbk4HfDFPonKTK16E+6C7CgVG3aM9asUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnKPPc2Wq5qpttuX3KQC+61uLG+MB8GA1UdIwQY
MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt
OWM1ZTFkZWIyYzMzLzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz
LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZu718iW
o3/bfOscNQs4KdLqhPA5qkF6lJoumWVfT0EZmTtHtYzK/9v2q3MS9NqYF1AKklrX
vkSJhq0wTHQsztveckDtHIriGSTCLd/PhGRm/kB8quKREdBGToyP+zmR4hD4zwuR
RnCE5eJueTULTSrOvDLdJLVKnTusxem8LHz6oipR/PAUJBGXLmlgjAUMuB889Vx5
9AvqZETpFGbRDfhqMTsUCJqYKtRHauCoqsxybPApAHWLfodwm6S+Cou+trrfMvNx
W7BHGQoad9sudaH7RIMkeFUNbdglKFGaaJTVRo89cofBl6fVG1tdybuIA9BQ/2E6
fHy9vRMynRZDkQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:17 2026 by rpki-client