This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: ObvUlJYfu3fR0Ja3OQu/FlGp6AjFU5UluHlUYpX5kTM=
Subject key identifier: E0:7E:E3:79:E2:49:08:31:B1:EE:EB:D1:1A:E2:39:BA:03:CD:71:6A
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019BF7632CE47982F6A300B0C6933657FBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 23:00:30 +0000
Manifest this update: Sun 25 Jan 2026 23:00:30 +0000
Manifest next update: Mon 26 Jan 2026 23:00:30 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: lCV4vbiFcYKQUVWQEq8nsd5GegQSNgQc36aCkHShkek=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:2c:e4:79:82:f6:a3:00:b0:c6:93:36:57:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jan 25 23:00:30 2026 GMT
Not After : Jan 26 23:00:30 2026 GMT
Subject: CN=e07ee379e2490831b1eeebd11ae239ba03cd716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:78:26:8b:96:48:38:b3:a4:50:f6:37:bd:
99:be:33:19:2c:e4:65:82:9d:fd:79:76:59:20:8e:
10:c1:9b:72:cc:39:1c:fb:a6:e7:bb:e0:43:1a:59:
63:4a:6d:27:42:eb:ec:3b:dd:2f:dc:10:fd:77:f6:
d5:bd:fc:e2:fa:ef:a9:3b:33:bf:69:27:dc:c3:5c:
99:bd:23:17:a1:bc:e2:e5:ae:ca:3d:09:0c:1f:9e:
36:31:a8:63:21:31:cb:66:42:88:3b:df:57:31:0d:
03:e0:49:75:c7:fe:fd:f1:4c:c9:53:46:0e:ad:05:
26:b8:42:bd:84:e6:c7:15:1e:63:2d:60:79:71:ca:
e8:7d:a4:bd:2e:92:86:2b:9d:c3:50:10:97:4b:02:
3b:59:af:ca:77:84:3b:85:97:4e:04:ce:47:a1:47:
42:52:4b:e0:a2:67:28:c5:6f:11:65:c8:85:7c:0f:
68:98:cc:a9:ee:91:55:80:1d:b3:e1:df:1e:98:04:
d6:c6:90:ac:e9:5a:c5:12:88:5c:1a:b0:ad:ef:29:
28:f8:04:31:92:ae:4b:1f:8e:10:22:69:29:f8:59:
7a:cf:38:4e:f6:96:37:e4:37:c9:61:3e:9a:33:b7:
30:72:9b:d0:a6:22:86:e5:25:d6:30:e5:2d:ea:b0:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:E3:79:E2:49:08:31:B1:EE:EB:D1:1A:E2:39:BA:03:CD:71:6A
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:31:4c:d9:05:9a:a1:13:3d:10:4c:61:d2:ea:d3:b6:7d:
b1:76:8f:6a:34:a8:97:7c:b8:da:e5:31:bc:21:5b:d0:31:c1:
1b:06:b4:50:86:a2:ae:aa:b8:1f:50:01:43:43:bb:1b:44:9b:
b3:b1:d9:0e:a5:b4:23:45:7d:82:63:e4:37:3c:84:53:aa:0f:
46:52:d7:5b:ae:24:70:c7:45:81:13:1a:9f:7b:ac:ac:ce:c3:
6d:f6:a2:8f:c6:77:8b:88:c3:45:ac:39:6e:3b:f2:74:ef:c5:
bc:d8:f9:a7:52:93:58:ee:09:fe:90:4f:8c:44:90:e9:4b:3b:
20:61:03:fe:d9:2d:26:61:75:34:4d:26:36:e6:1e:21:21:54:
86:f0:e4:ac:b7:8b:0d:b0:ad:6d:16:f7:88:47:6a:b4:07:0b:
20:5a:32:70:66:b0:e8:0e:6e:15:6d:31:0c:52:59:c4:5f:53:
3c:7e:af:3a:57:5a:92:76:f4:95:ce:ba:b0:cf:d5:e6:28:6d:
40:96:82:26:67:a0:20:eb:40:12:35:5f:0b:2f:66:d3:7c:41:
9e:45:b2:51:05:6c:88:e5:15:5f:d1:fd:1d:c3:91:5d:7c:6d:
42:4f:a9:ef:c4:e3:81:e9:f8:a4:ea:79:fc:11:85:5d:cd:0c:
b3:45:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:08:59 2026 by rpki-client