This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File: js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier: hx6L4q9d81ayckaWpDwMZXWYXUVThq3M5P6HnALLbOo=
Subject key identifier: 79:70:B3:B8:D2:C8:09:04:11:D3:02:DE:A8:A6:A6:9A:46:4F:49:B4
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 019BF2E1FC0F976883F1554E8F7A2516F5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number: 0A25
Signing time: Sun 25 Jan 2026 02:00:54 +0000
Manifest this update: Sun 25 Jan 2026 02:00:54 +0000
Manifest next update: Mon 26 Jan 2026 02:00:54 +0000
Files and hashes: 1: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (hash: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=)
2: LAWT8-8DrVGXo-g5H4GZO3z7fS8.roa (hash: Na6k/8EGssv/5DxPGxpYhkk2M4Z1QcQ+K49dXTrHKUI=)
3: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (hash: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y=)
4: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: amsmafQKe8mFuiCQL4NUypFLYB0VRHjfyE79vXDYliI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:fc:0f:97:68:83:f1:55:4e:8f:7a:25:16:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jan 25 02:00:54 2026 GMT
Not After : Jan 26 02:00:54 2026 GMT
Subject: CN=7970b3b8d2c8090411d302dea8a6a69a464f49b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:fa:ad:78:52:4a:b7:1c:83:4d:37:35:90:
8d:cd:3f:ec:f0:32:ae:ef:ce:41:b5:86:30:78:78:
fd:b5:16:25:b1:eb:37:c3:a4:87:46:c8:db:a9:fe:
67:56:08:c3:86:69:58:d8:8a:08:6f:ea:92:62:cd:
9f:ba:a1:82:5c:48:4a:af:c6:59:38:2c:c7:ae:cf:
3e:18:a2:84:eb:e6:79:d9:85:db:ca:10:31:ac:1d:
fb:ef:21:5e:3c:4d:ff:28:fb:e1:b0:1f:a7:af:e7:
82:0c:be:05:22:fd:b1:87:4d:00:e0:a4:10:11:a2:
ee:da:13:c2:9c:4d:4c:87:c9:61:30:4b:0e:d9:01:
61:ed:42:fd:47:57:d3:f0:4d:e2:ac:96:dd:68:d7:
04:2d:06:cb:1e:1f:77:b9:94:60:a9:74:e6:56:70:
5a:09:5d:ea:b4:ef:67:f4:ed:d0:bf:a9:88:b8:d3:
fd:d2:b1:73:50:63:e7:7f:d0:34:a8:76:eb:38:c9:
9d:71:ba:fd:7b:bb:d6:b2:54:c4:27:70:f4:af:30:
4e:de:7a:65:ad:22:86:17:33:32:b1:3a:4e:1e:bc:
a6:21:7f:b8:cb:ac:ec:b5:fc:b7:e9:6e:bd:99:fe:
c0:ee:c5:21:be:c8:d5:a1:2d:5b:ee:ee:13:02:75:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:B3:B8:D2:C8:09:04:11:D3:02:DE:A8:A6:A6:9A:46:4F:49:B4
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:7d:e2:44:98:fc:2a:c5:f4:c3:b8:dd:6c:96:2c:10:17:
08:3d:e3:5b:94:76:9a:ff:76:e6:53:a8:79:07:89:69:0d:28:
e4:04:d4:d6:19:8d:7a:10:85:24:61:bf:d8:34:eb:c2:fc:d7:
8c:1a:a5:7e:a8:6d:23:a2:6a:07:2f:be:15:e5:4f:14:6a:ac:
c2:be:6c:33:74:04:31:e6:20:ad:97:97:eb:fd:e0:44:e8:4a:
3c:2b:f4:00:68:4b:05:75:fe:00:fd:71:ea:2b:fa:af:54:5b:
ed:f8:03:d8:44:06:74:87:ef:59:69:1b:32:9f:a0:a9:d2:07:
41:85:a4:b5:4a:d7:c8:b0:6d:85:5b:32:33:7c:50:13:cc:1e:
5a:d4:1f:81:58:90:c4:50:e0:17:72:cc:52:42:cc:b4:54:74:
37:89:c0:ae:7f:ea:cf:51:b0:0e:33:3d:f8:98:ad:94:a2:a3:
7d:71:fc:bc:1b:c3:11:77:6a:5f:b6:51:76:65:7d:91:ec:3d:
f8:91:db:f0:b3:65:38:47:b7:83:db:83:23:65:89:8c:89:f4:
7a:d3:91:14:2e:f4:9d:5c:b5:3d:7a:f9:e9:d1:fe:d4:0d:cf:
cf:21:a6:b6:69:9e:ca:9c:73:3e:dc:09:d7:e9:7d:58:1b:42:
d2:52:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:42 2026 by rpki-client