This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: tVdQWU6qIBd3Z3fACD8YC2GUjB1lSyhjuPsndBgqzDM=
Subject key identifier: AC:D9:27:E6:96:8D:CA:6A:3F:E3:FB:7E:D2:F4:85:BA:55:90:63:15
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 019BF79A3C788F1E70E1149C8DF40B6CEF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 152F
Signing time: Mon 26 Jan 2026 00:00:38 +0000
Manifest this update: Mon 26 Jan 2026 00:00:38 +0000
Manifest next update: Tue 27 Jan 2026 00:00:38 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: PgPWWxWhXbJTw6ina8WRvkf6nUxzysAaF+7d0q5uT20=)
2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:3c:78:8f:1e:70:e1:14:9c:8d:f4:0b:6c:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Jan 26 00:00:38 2026 GMT
Not After : Jan 27 00:00:38 2026 GMT
Subject: CN=acd927e6968dca6a3fe3fb7ed2f485ba55906315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:cc:22:9d:e0:db:98:0b:76:c9:d5:bd:6f:
a8:8a:61:a8:90:31:95:b2:91:62:33:a1:0d:8a:c3:
57:eb:96:67:4c:91:18:f1:3a:31:f8:6c:e0:46:32:
83:08:10:a0:e0:d2:96:e0:fd:23:fe:45:dd:87:cb:
a7:2b:9f:c8:16:97:73:2e:18:b6:76:67:ac:53:ff:
60:d4:c3:39:6f:1c:22:ed:85:ae:ff:91:29:98:c5:
22:80:12:a5:e9:45:54:ec:a2:c4:44:2d:64:9d:53:
e9:f3:45:60:c7:9d:e8:e0:57:b5:40:a5:29:ed:77:
49:49:20:32:18:fc:d7:e7:54:db:f3:3c:2c:40:8d:
3d:ae:6b:64:c5:ca:75:3b:a3:45:e8:ca:9b:07:a4:
93:95:bb:2b:bf:62:1e:c7:17:01:27:51:3b:bb:e0:
e5:45:cf:d1:fe:e4:aa:ca:e3:c3:35:ac:b9:2e:b1:
90:7b:58:97:e2:3d:4f:7b:fc:51:2d:db:55:ea:96:
18:57:69:8d:d4:9e:e8:5e:b1:e4:de:23:3e:13:19:
ea:fa:9e:d5:9c:f0:35:0b:7d:c1:6b:17:ce:cc:7c:
ea:89:62:62:d1:78:43:c3:0c:04:8d:12:ec:3d:50:
1a:31:b1:d0:93:fc:b6:8b:7c:0a:44:1f:ad:6b:e0:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:27:E6:96:8D:CA:6A:3F:E3:FB:7E:D2:F4:85:BA:55:90:63:15
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:1c:94:19:7d:b4:09:02:ad:e3:80:93:57:fb:f4:e1:77:
a1:2e:c0:b9:ec:62:f7:4e:70:0d:fa:ca:45:db:fc:95:00:e6:
91:d0:bd:2f:68:c1:eb:ce:cc:da:f2:73:7d:51:b7:b3:8e:ac:
ae:b6:87:cf:a3:a3:cc:6e:07:8d:f1:a2:15:08:81:90:23:dc:
25:0c:fe:83:c8:dd:43:43:d7:48:74:bb:9f:c6:f2:ba:11:ae:
e2:30:2b:90:fe:67:4f:25:38:b1:2c:1f:73:f6:7a:43:ff:40:
2c:8e:c1:01:c8:03:ec:27:99:2a:bf:e8:92:d8:dc:34:9c:38:
60:ac:34:1a:bb:87:7b:61:aa:ff:dd:1c:09:b4:49:1c:d8:5a:
08:71:db:ce:9f:4e:bf:9a:cd:a2:f5:85:39:ac:70:86:9f:f0:
02:c9:8d:99:93:a4:12:ee:93:b8:fe:21:b5:e3:cf:71:c7:b3:
01:21:8f:24:96:f7:7c:af:36:da:f5:4e:ff:62:15:1b:45:75:
2e:64:24:cb:65:8d:82:bc:77:1f:41:b6:f7:46:0d:41:89:5e:
61:8d:61:b4:48:a0:16:19:88:b4:a7:44:ff:90:51:d0:3d:d7:
b4:2b:27:3d:7a:28:9b:5c:c0:53:a7:46:b5:47:11:a3:7c:2b:
4d:8b:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:06 2026 by rpki-client