This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: rFO7nkazxf/bjkPGJkisXj/szlAvBjeGt+1NOB2/GNU=
Subject key identifier: FB:45:37:AE:5F:4E:E4:DF:63:C5:B6:03:F0:14:5F:37:A8:8A:4A:9F
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 019BF68833D969C9B98F8CE1ED6F1B3BD168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0E17
Signing time: Sun 25 Jan 2026 19:01:19 +0000
Manifest this update: Sun 25 Jan 2026 19:01:19 +0000
Manifest next update: Mon 26 Jan 2026 19:01:19 +0000
Files and hashes: 1: NhrnmLNt3an0IpFoDz-zJe6YFwY.roa (hash: ZgZEuJac2hSv6b6Lumyy52RbL6AyfgoQUadQhidKXEs=)
2: UIv6jVS0p5268_XYhub9OHb_bA0.roa (hash: KT5y+HpZ43GmqDM+m5jLP788GzijAuuEants3+erKgY=)
3: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: +kcVE1itT0UDQYv47O1vn8BlJ6tUfZZaN5oYTQoQjlo=)
4: lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa (hash: qcCySn5tj9h14UpAI2UnCKnAlV7VQfAi0DGrUD+71GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:33:d9:69:c9:b9:8f:8c:e1:ed:6f:1b:3b:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jan 25 19:01:19 2026 GMT
Not After : Jan 26 19:01:19 2026 GMT
Subject: CN=fb4537ae5f4ee4df63c5b603f0145f37a88a4a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:8e:b1:3a:34:b0:1f:1f:2a:cd:8a:49:32:
ca:65:dd:dd:9c:57:c4:66:5c:86:82:70:9f:c2:52:
0d:1e:91:fd:a1:5c:1e:d3:25:c8:81:09:4f:ff:ff:
db:7d:95:01:22:e0:80:fe:65:79:11:54:9f:a5:9a:
84:68:17:d3:ad:76:7f:2c:ce:10:3f:c0:c6:99:9d:
d7:9a:19:33:eb:1d:f3:12:5b:1a:bb:8a:46:6f:e1:
50:5f:de:13:3a:68:e6:db:be:76:d2:78:fd:9d:d7:
c3:4a:3a:99:fa:a4:0e:2c:a4:4d:15:77:86:77:c8:
d1:8e:6b:64:22:2d:fd:f2:c7:50:c6:d7:a4:ab:cd:
6c:3a:5f:2e:74:70:d9:fb:35:61:16:d1:52:87:94:
82:cb:72:ce:17:6d:e3:93:c6:2b:30:0a:61:71:60:
32:0d:a6:56:27:27:a9:e1:73:86:75:21:ba:a5:01:
f4:8c:6b:1b:ea:7c:4a:db:ef:13:8a:11:f9:1f:41:
03:98:40:47:82:37:5f:ba:0c:55:73:5f:c1:b7:98:
0c:45:b7:31:79:8e:df:7d:25:16:94:b7:c5:fc:b0:
1e:65:72:d2:4d:3f:00:be:24:ed:62:6c:e4:b4:09:
05:22:84:43:83:52:75:fc:93:5b:08:99:4a:1d:54:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:37:AE:5F:4E:E4:DF:63:C5:B6:03:F0:14:5F:37:A8:8A:4A:9F
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:63:ef:d7:f3:2a:48:40:86:67:a7:15:fc:db:0d:b1:76:93:
7f:1f:b2:a2:d6:48:90:d5:01:20:c1:9d:25:40:de:3c:ab:ac:
fe:54:e5:2a:2a:0d:2b:64:f1:7a:5e:26:aa:85:a0:95:ec:f1:
a6:a8:19:a7:6d:67:7c:89:fb:4c:da:79:41:70:91:33:c2:20:
e4:58:c2:2b:d9:12:af:34:1d:4c:59:90:8e:f8:8c:67:95:75:
20:8e:db:83:15:9d:27:3e:e3:cc:27:66:8c:f5:78:08:a4:e0:
5c:aa:5d:f6:ae:63:fd:f7:ee:43:ed:12:8e:8e:0a:2d:9a:62:
a0:a4:f2:82:3f:48:8d:28:4b:1e:df:63:7a:59:6d:8f:ca:26:
31:3b:d3:81:d3:12:d4:43:57:69:03:57:41:af:bb:40:12:63:
32:8c:71:02:af:ba:40:7e:85:f9:47:92:ca:f5:0f:98:cd:0b:
7c:88:d6:7d:8a:a5:d0:72:15:82:01:86:14:14:48:5e:42:19:
8c:89:e7:a2:6b:d0:58:bd:52:82:d7:c2:91:2d:8c:e3:54:30:
24:0f:bc:1a:6b:6b:55:ed:94:82:64:d7:f1:8d:8c:c2:97:3a:
1f:db:b7:f0:f6:7e:69:f2:f2:28:e2:17:ac:ac:b7:db:ec:92:
81:25:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:55 2026 by rpki-client