This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: e3NxT0SibbT2GqaEkFFSSwVzqpntSrvBgv+oPasFiAg=
Subject key identifier: A8:C7:0A:EF:2B:4E:EE:69:A2:4A:2D:70:E8:DA:16:46:64:4A:32:3A
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019BF91B3AADC3A9CAE63063661B7BB6D31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 17EB
Signing time: Mon 26 Jan 2026 07:01:09 +0000
Manifest this update: Mon 26 Jan 2026 07:01:09 +0000
Manifest next update: Tue 27 Jan 2026 07:01:09 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: s0yxlalkhSk2vfnTDe/wMSrCTQzZgOzBe/SKIZZykmE=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:3a:ad:c3:a9:ca:e6:30:63:66:1b:7b:b6:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jan 26 07:01:09 2026 GMT
Not After : Jan 27 07:01:09 2026 GMT
Subject: CN=a8c70aef2b4eee69a24a2d70e8da1646644a323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:3a:56:c2:ce:2a:03:3e:0a:3c:74:0e:b4:
b9:8c:b3:fd:1b:29:95:e6:a2:bf:4c:62:80:f7:24:
88:d6:7f:24:4e:63:d1:8d:bc:e7:01:00:5d:f0:c4:
cc:49:19:c5:77:8a:53:2c:61:48:23:ac:b7:14:0c:
02:47:bd:52:ae:06:fd:7c:95:85:af:96:17:69:3c:
78:a9:41:ba:1f:6b:ed:ec:45:00:75:8a:38:eb:4f:
5a:96:8c:f7:d2:ec:ce:ae:8c:df:fe:48:c1:d8:42:
8d:68:3d:15:a1:f1:09:37:e2:9a:94:4e:ac:4a:56:
fd:f6:03:0f:03:17:8b:d9:68:ee:ec:f7:42:60:4f:
56:71:24:97:6b:18:9c:15:4f:ab:29:7c:65:d4:fa:
73:10:cc:0f:e6:55:d1:ad:53:c1:63:66:02:63:21:
d6:7f:f4:11:b1:e9:14:18:00:1b:ae:21:2f:26:aa:
ab:d4:33:64:fe:60:c1:9a:7f:84:8b:6d:23:f4:5f:
5d:28:ad:14:c1:72:56:18:b0:cf:ee:49:d4:5c:bf:
fc:26:c5:ee:f4:0e:2d:ff:e1:40:4b:01:d5:55:d4:
b3:3c:39:03:be:92:27:f4:83:03:f7:ee:0b:c5:ac:
66:31:f4:70:bc:da:b2:28:de:fc:c9:84:fd:9a:8b:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:0A:EF:2B:4E:EE:69:A2:4A:2D:70:E8:DA:16:46:64:4A:32:3A
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:24:f6:c0:d1:48:63:15:d7:9c:fb:76:6c:ab:9b:32:00:
ad:7a:2a:4e:ef:b2:c9:f4:6c:97:7d:96:75:0b:48:2b:9d:69:
0f:44:7c:4a:5f:f5:42:9a:18:f0:af:4d:6e:bf:6b:2f:ad:b4:
1c:f1:55:9c:90:3c:3c:db:05:5a:00:36:95:de:24:d6:d6:28:
b8:30:7f:38:c2:1c:db:ab:fc:ef:c0:a2:a4:1a:fe:a3:fd:36:
1d:ec:a3:89:76:5f:a1:2e:32:61:20:ce:31:32:f3:22:a9:7d:
cb:8b:a4:6a:22:40:c0:54:a7:b3:fb:e9:22:7e:d7:95:2c:69:
31:de:36:39:d4:00:f3:69:46:68:cc:54:29:96:0b:c3:10:a4:
94:ed:55:6b:eb:2a:46:44:f7:15:3d:20:83:0f:f9:05:17:fc:
ad:06:23:86:bd:6f:40:cc:da:3a:67:b8:37:47:80:4e:46:81:
4e:9e:8f:3e:54:a2:64:28:ef:84:2e:85:50:94:18:11:a2:f4:
7c:f1:50:25:b3:49:6b:24:bd:92:40:c5:28:7b:b6:7b:51:02:
b1:dc:b7:76:cf:c8:07:23:0d:4a:9b:70:4d:80:4b:78:cd:8c:
af:93:69:5e:15:c9:75:29:d4:73:86:fa:34:3e:8a:c6:72:2a:
38:27:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:22 2026 by rpki-client