This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
File: JXjmbXV_leptaTqn-E_LJ0l1yLs.mft (raw, json)
Hash identifier: dtcoP27HBhVWFq6ZH0jNKb9sZKrFp6qhqKofzWyG5uo=
Subject key identifier: 44:E0:10:D6:96:EF:75:A8:9E:75:56:91:B2:B2:9C:3A:95:0C:3A:05
Authority key identifier: 25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB
Certificate issuer: /CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
Certificate serial: 019BF72D135820D2F921DAD1AF59A9C802CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
Manifest number: 0885
Signing time: Sun 25 Jan 2026 22:01:24 +0000
Manifest this update: Sun 25 Jan 2026 22:01:24 +0000
Manifest next update: Mon 26 Jan 2026 22:01:24 +0000
Files and hashes: 1: 3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa (hash: UxELvj3/BwuEYvPZpfgXSHe6qxTJGCYo6ChpgKnBJA0=)
2: JXjmbXV_leptaTqn-E_LJ0l1yLs.crl (hash: VM6tqxycCA3rPJTO9ykpgBqW6CdWopBB/BJCtk92GV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:13:58:20:d2:f9:21:da:d1:af:59:a9:c8:02:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
Validity
Not Before: Jan 25 22:01:24 2026 GMT
Not After : Jan 26 22:01:24 2026 GMT
Subject: CN=44e010d696ef75a89e755691b2b29c3a950c3a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:ef:c4:4f:b1:ff:9f:ea:8b:e5:cd:b3:16:
41:06:35:68:4d:2f:de:38:62:f9:38:f6:b3:84:94:
1f:dc:76:3c:79:93:74:39:6c:de:d7:04:5a:ea:7a:
49:dc:a5:7d:2e:51:c8:e9:60:29:72:ed:03:b1:9c:
2e:75:71:64:55:e5:d3:82:e6:9f:91:f9:f2:55:88:
a2:3d:da:72:95:be:f0:e8:95:0d:87:5e:70:69:e5:
a5:84:e4:64:d8:40:97:56:20:a0:bb:94:38:44:db:
98:c1:71:f8:c8:71:6d:e2:ee:a8:13:3b:34:e7:0e:
7b:e2:02:69:94:f5:91:3f:ae:ac:09:43:c2:f9:f3:
dc:2a:ac:f5:f3:f1:74:04:dd:d2:b8:df:03:78:aa:
63:a9:12:a6:78:6e:14:80:44:c8:c4:f8:c0:eb:cb:
16:c7:f2:50:4c:f0:2b:bd:10:34:34:29:e9:ee:14:
33:51:01:da:68:b1:7a:6e:9a:9a:67:f0:61:92:f4:
1e:dd:20:02:b5:d2:41:43:8e:d0:c7:57:fd:b3:11:
fd:74:6c:f4:48:07:52:35:6e:ca:dd:b4:18:40:3b:
d4:61:29:49:79:87:93:04:6a:5f:b7:8a:d6:cb:04:
b2:18:85:2c:8e:f4:bf:97:db:a1:c1:ef:42:d0:82:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:10:D6:96:EF:75:A8:9E:75:56:91:B2:B2:9C:3A:95:0C:3A:05
X509v3 Authority Key Identifier:
keyid:25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:2a:c2:f0:44:95:2e:48:12:b0:54:b1:4a:23:fd:c1:d5:
28:66:3a:7f:ec:89:8b:79:1b:e9:c1:a2:9e:e3:22:30:e6:29:
08:28:30:26:aa:a8:fd:cf:8e:f5:af:8e:1b:f6:74:12:60:3e:
1b:56:7c:d9:d9:6c:d4:ea:f1:18:5f:aa:1d:4d:13:91:77:23:
95:f8:82:89:a1:0e:50:e2:8e:ad:62:9a:79:4f:55:64:e5:68:
16:d5:0b:42:6e:a8:43:10:93:47:a0:4e:09:d3:88:e2:ec:37:
6d:2f:81:44:26:b7:72:c7:0b:0b:15:ad:11:57:79:d1:48:4f:
c1:2f:5c:5c:fe:82:44:fe:08:52:c1:8f:9c:89:de:e8:bf:f1:
57:88:8c:da:bd:3f:4c:87:1a:d5:16:44:4e:0d:74:f2:01:7a:
9e:6c:44:1c:73:d6:42:ae:68:c6:44:c9:f1:29:e6:85:cf:c2:
6a:58:cb:a4:26:96:cb:25:48:c3:70:30:07:8d:d1:24:5d:c0:
c3:36:2d:87:c9:8d:d2:e4:79:f7:f5:d7:a4:ae:ba:1f:df:23:
9c:bf:9a:0b:97:04:e3:3f:0d:ee:49:e8:f5:83:d6:08:41:9e:
98:b5:30:cb:f0:99:db:39:e8:ed:6d:7b:47:02:74:49:ab:de:
b7:9e:b7:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LRNYINL5IdrRr1mpyALNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzhlNjZkNzU3Zjk1ZWE2ZDY5M2FhN2Y4NGZjYjI3NDk3
NWM4YmIwHhcNMjYwMTI1MjIwMTI0WhcNMjYwMTI2MjIwMTI0WjAzMTEwLwYDVQQD
Eyg0NGUwMTBkNjk2ZWY3NWE4OWU3NTU2OTFiMmIyOWMzYTk1MGMzYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthzvxE+x/5/qi+XNsxZBBjVoTS/e
OGL5OPazhJQf3HY8eZN0OWze1wRa6npJ3KV9LlHI6WApcu0DsZwudXFkVeXTguaf
kfnyVYiiPdpylb7w6JUNh15waeWlhORk2ECXViCgu5Q4RNuYwXH4yHFt4u6oEzs0
5w574gJplPWRP66sCUPC+fPcKqz18/F0BN3SuN8DeKpjqRKmeG4UgETIxPjA68sW
x/JQTPArvRA0NCnp7hQzUQHaaLF6bpqaZ/BhkvQe3SACtdJBQ47Qx1f9sxH9dGz0
SAdSNW7K3bQYQDvUYSlJeYeTBGpft4rWywSyGIUsjvS/l9uhwe9C0IImOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETgENaW73WonnVWkbKynDqVDDoFMB8GA1UdIwQY
MBaAFCV45m11f5XqbWk6p/hPyydJdci7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWIt
ZmJhZDYzN2M0MTQyLzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWItZmJhZDYzN2M0MTQy
LzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCYqwvBE
lS5IErBUsUoj/cHVKGY6f+yJi3kb6cGinuMiMOYpCCgwJqqo/c+O9a+OG/Z0EmA+
G1Z82dls1OrxGF+qHU0TkXcjlfiCiaEOUOKOrWKaeU9VZOVoFtULQm6oQxCTR6BO
CdOI4uw3bS+BRCa3cscLCxWtEVd50UhPwS9cXP6CRP4IUsGPnIne6L/xV4iM2r0/
TIca1RZETg108gF6nmxEHHPWQq5oxkTJ8Snmhc/CaljLpCaWyyVIw3AwB43RJF3A
wzYth8mN0uR59/XXpK66H98jnL+aC5cE4z8N7kno9YPWCEGemLUwy/CZ2zno7W17
RwJ0Savet563nA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:48:36 2026 by rpki-client