This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: FQ2yQLpg3RIBXD8+wZLXTN/cHlAy5/iVfIWCsLJaGSc=
Subject key identifier: 2B:BE:BD:79:31:5F:CA:3C:AD:2A:21:D4:F4:33:39:D7:31:83:13:B0
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019BF951C54301FDC1A30C993B8F37976DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 16EB
Signing time: Mon 26 Jan 2026 08:00:44 +0000
Manifest this update: Mon 26 Jan 2026 08:00:44 +0000
Manifest next update: Tue 27 Jan 2026 08:00:44 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: nG06YshJAhhtOoPS95+vfFZHAQJfgkV+c+JzwFWYhjc=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:c5:43:01:fd:c1:a3:0c:99:3b:8f:37:97:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jan 26 08:00:44 2026 GMT
Not After : Jan 27 08:00:44 2026 GMT
Subject: CN=2bbebd79315fca3cad2a21d4f43339d7318313b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:19:bc:aa:33:ee:56:26:97:cd:23:0b:d8:
2b:63:30:da:02:8f:e3:c7:b3:c8:36:39:30:40:ef:
f3:4d:2a:64:16:65:0a:13:52:73:d9:b0:79:91:34:
31:ae:57:69:1e:b6:b9:9d:b6:3e:32:25:2b:7d:75:
4b:ef:41:89:7b:4d:f3:a2:de:fd:f4:84:49:ba:de:
d0:00:ea:33:1f:fe:28:2a:5c:a6:f1:7b:58:35:cd:
28:42:5c:29:98:ef:7d:98:17:55:e3:27:a2:c3:40:
c2:7b:c6:fa:1d:c6:f7:74:28:4c:c7:ea:7f:bc:d8:
33:9c:e2:e6:4d:02:5c:3a:58:9e:51:f7:51:29:cb:
97:5e:69:e7:f8:3f:e1:bb:b4:75:90:a4:d5:90:a4:
62:47:9e:dc:cc:73:05:cc:78:bf:2e:b6:5e:85:4f:
0b:2e:8c:3d:5a:24:b4:df:ae:1b:8d:7c:fc:ab:98:
61:02:f0:d8:f7:6d:67:9e:91:ed:8c:2c:3d:f5:33:
00:af:00:1e:67:69:9f:7c:65:07:82:af:c5:f3:aa:
21:6d:9f:8a:4e:2f:d4:45:9a:0a:fc:f0:0e:30:b0:
d5:5f:65:d1:2c:df:e1:9e:3a:cc:75:1e:db:a4:97:
c1:7c:ae:70:7c:41:ea:c0:dc:8f:45:64:f2:9a:63:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:BD:79:31:5F:CA:3C:AD:2A:21:D4:F4:33:39:D7:31:83:13:B0
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:89:87:8a:e4:b5:58:98:72:ce:4f:37:3f:29:ed:68:9e:ab:
02:93:69:fb:38:d0:dc:74:be:f5:d9:ce:8b:c9:e6:8e:bd:0d:
b1:8d:7d:d6:40:e2:d0:9e:01:06:ea:fc:01:a2:88:db:1e:d2:
cc:8f:1d:8e:ea:64:d9:b8:4b:ea:2c:e3:e6:de:c7:da:c0:43:
f4:71:0c:58:87:ab:b6:d4:ab:1d:c8:43:42:df:ae:d8:15:04:
27:ef:8a:04:dd:a4:99:53:aa:b8:da:7b:b4:02:0a:b5:1d:74:
e2:bb:d1:bb:94:4f:fa:83:d5:37:6a:e2:6b:ca:5f:37:38:e8:
52:74:d6:49:f7:05:e4:4c:8e:3a:3f:8b:25:55:a8:be:70:40:
71:a9:41:5c:32:66:11:fe:1e:0e:15:84:89:21:72:28:12:00:
7b:c1:b4:39:92:e7:da:38:2b:e4:3e:0d:b2:56:25:78:28:43:
32:f6:1f:61:5a:34:15:33:22:4f:c1:74:8e:c1:20:5f:38:11:
84:29:a1:3c:e7:ed:cb:a4:30:db:62:3b:d8:0d:c3:50:22:79:
f2:2d:f0:4e:e0:d8:e4:5b:f7:3c:45:3c:22:e0:47:8c:c1:35:
82:41:51:6f:90:ec:dc:ce:86:f8:06:45:45:1f:f5:57:42:6f:
8c:f9:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:42:49 2026 by rpki-client