This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: e0ciguT6RIs1nImEQ22AFSCSJDc7w9Ef93vA3WRWfGk=
Subject key identifier: DB:1B:03:A4:CC:76:08:E8:07:74:14:E8:56:12:7F:FC:48:96:6A:C1
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019BF23D31BACFA8B0BDD18F7AA32BB8ABFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0A72
Signing time: Sat 24 Jan 2026 23:00:55 +0000
Manifest this update: Sat 24 Jan 2026 23:00:55 +0000
Manifest next update: Sun 25 Jan 2026 23:00:55 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: /SFGyU7S2E/Milr0BiU5gmY55mE9f68pmv0k1P/LZ6Q=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:3d:31:ba:cf:a8:b0:bd:d1:8f:7a:a3:2b:b8:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jan 24 23:00:55 2026 GMT
Not After : Jan 25 23:00:55 2026 GMT
Subject: CN=db1b03a4cc7608e8077414e856127ffc48966ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:78:fa:11:36:cb:1b:ba:d1:34:f1:bd:c1:
d5:92:37:c0:93:17:4a:71:9b:bc:43:5b:30:71:7f:
93:dd:a1:7b:3d:f7:9c:f6:3f:c4:f7:43:9b:59:52:
30:8b:57:f0:0b:77:d7:3e:f2:3b:be:f9:28:e7:cb:
99:64:56:78:04:41:4e:93:77:f9:31:ea:0c:c1:e2:
17:ad:14:7f:37:5f:2c:5e:23:f8:a6:26:f2:e9:8e:
7a:9f:a8:27:d6:4b:48:da:74:51:57:6f:5e:89:cb:
8c:7e:98:d5:b3:14:79:89:29:da:73:14:0e:66:49:
49:f7:8b:54:69:e0:43:86:ef:19:b6:7a:de:94:c8:
fc:26:5c:ad:40:a7:6e:08:7c:40:63:ce:12:79:cc:
c3:1b:b1:31:68:5d:86:bb:70:66:2e:3c:e8:02:cb:
50:06:86:52:fe:ed:73:2a:f5:7b:dd:fe:db:23:f6:
67:d6:da:24:4c:86:e8:af:70:8a:e5:68:87:1c:3f:
30:ce:3d:07:a1:19:25:42:46:75:24:5e:f4:d3:50:
e4:07:f2:62:bd:d0:b4:f1:0f:51:f9:dc:51:ff:06:
4f:dd:06:88:02:c7:32:65:b2:34:bb:cc:3a:d3:40:
65:0a:20:eb:65:75:d9:65:09:55:f8:10:95:2c:d6:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:03:A4:CC:76:08:E8:07:74:14:E8:56:12:7F:FC:48:96:6A:C1
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:33:90:45:04:a5:5d:41:7d:bb:84:88:92:34:95:d3:47:5f:
09:8c:79:d3:ab:d4:e9:26:09:ac:4e:af:43:97:e2:a7:99:c5:
85:2c:46:cf:b4:29:88:cf:d4:9b:05:8b:f1:df:2c:1a:5f:d6:
5d:b4:cb:ae:8e:88:d9:45:03:fb:bd:15:6c:ac:7f:58:d6:82:
cc:10:cd:ef:57:df:9e:e0:68:ca:5c:5e:36:06:9c:97:31:9d:
a2:8a:46:e3:54:ce:1b:13:69:77:bb:80:d2:8e:c1:f4:4d:61:
d0:10:c8:42:71:9f:e9:68:46:a0:a0:66:39:d8:07:9d:27:9e:
69:70:da:2b:75:dc:d7:5d:ef:c2:04:33:2e:40:be:bf:8c:c8:
b4:d3:02:b7:e3:81:02:e2:df:90:26:74:a3:a6:f6:76:a6:1c:
40:03:1b:cd:64:cc:68:90:0d:9d:ff:b5:73:bf:6d:ee:9b:53:
e9:02:ae:7c:60:03:5e:58:d8:2a:2a:47:fd:70:b2:b7:04:1f:
76:f0:1f:2c:e8:88:bd:cd:0c:0e:67:04:44:04:93:53:ba:c8:
79:ba:4d:3e:d9:95:fa:60:bb:8c:f2:89:f4:63:b2:7e:48:a8:
81:c2:5f:c1:04:1a:8a:f8:99:95:e7:55:15:0e:8c:cd:ca:b4:
75:fa:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:04 2026 by rpki-client