This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: /7jcw1xuE3TtYtTIr18GH086j/nzPm5ppODQG0UyvpM=
Subject key identifier: C3:75:45:9F:B4:44:F9:DB:37:48:C9:4D:BB:70:9E:58:D3:D4:8B:3B
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019BF3BE05AB3DACCA4F3CF584B7987BFDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 13CC
Signing time: Sun 25 Jan 2026 06:01:15 +0000
Manifest this update: Sun 25 Jan 2026 06:01:15 +0000
Manifest next update: Mon 26 Jan 2026 06:01:15 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: aLwm/8IXz1tMTdt/OO6fnb2AiY6GnGe6KeNSWAa9+pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:be:05:ab:3d:ac:ca:4f:3c:f5:84:b7:98:7b:fd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Jan 25 06:01:15 2026 GMT
Not After : Jan 26 06:01:15 2026 GMT
Subject: CN=c375459fb444f9db3748c94dbb709e58d3d48b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:d7:38:41:74:30:76:9c:2b:c3:a5:65:37:
6b:a4:e9:65:80:c1:73:91:49:c7:14:9e:35:47:ed:
ee:40:45:cd:9e:a1:c8:08:e7:2a:f3:b8:30:8f:e6:
37:9d:a5:5d:ff:92:85:5d:9f:fe:2a:f2:f6:82:e5:
4f:07:45:25:09:60:97:1e:e0:c7:96:30:11:ee:72:
ce:27:d1:07:ab:60:a3:29:e1:0e:cf:8a:c1:c2:04:
d7:1a:f7:d5:af:db:5e:75:c4:8c:ba:92:fa:2a:1f:
92:b0:b6:ed:7b:7f:20:1d:8b:c1:b0:06:c0:4a:ab:
40:1e:8a:0b:3d:14:4d:c7:06:b6:d3:4a:29:10:a2:
fe:ef:9e:ea:5e:62:0e:9f:d6:8b:d5:ca:0f:42:79:
9e:ff:8c:64:c3:30:24:cf:7e:3f:16:36:44:f7:c7:
69:3d:19:43:a4:22:fd:1d:b8:fd:ef:05:18:b7:f1:
ec:3a:cb:ae:fb:51:87:22:48:4a:38:d4:ac:d4:01:
94:a0:37:b5:12:cd:f3:ed:cd:34:a8:09:be:77:11:
5a:30:bd:e7:bb:19:f5:3d:be:77:d3:d6:d2:0f:07:
4a:00:93:a4:3e:ba:bf:c6:02:54:fb:21:94:8d:3d:
63:32:e6:90:8b:dc:85:e2:21:67:9d:5c:af:48:fe:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:45:9F:B4:44:F9:DB:37:48:C9:4D:BB:70:9E:58:D3:D4:8B:3B
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:52:f4:01:99:02:cf:47:39:5b:a9:b0:10:e3:71:50:bf:b9:
61:9e:18:88:b5:f5:d5:08:31:57:4f:b0:7e:8a:d6:4f:5d:67:
72:dd:89:0a:04:61:f8:43:e9:a4:65:84:3f:9b:5e:1b:4b:8e:
ce:d6:c3:1d:56:3c:4d:72:76:85:78:15:25:57:95:a5:f5:43:
d6:f3:28:d8:3d:a7:89:b1:d2:b3:55:6d:08:4a:a1:84:e8:28:
bc:e8:5b:48:af:60:0e:06:d7:09:35:16:b0:3c:7e:35:f4:04:
2b:a5:27:b1:42:e9:25:16:20:8b:73:79:66:f1:cd:e3:d7:d2:
ce:a6:06:2d:76:f8:e4:d8:72:38:07:0b:9f:ff:8b:2a:6c:5b:
d0:19:e6:c4:f3:63:f8:2c:85:b9:0c:dc:d6:b6:2b:df:27:b9:
de:f2:b1:3f:e7:4f:b5:81:3c:8f:36:0f:d0:95:f6:92:e0:f5:
ab:b0:50:af:6f:70:6c:e2:db:0f:31:1b:49:e2:60:c2:1f:49:
d3:b5:87:ee:7f:35:09:ae:26:68:a6:70:46:ce:93:60:da:b0:
f2:18:ec:9f:08:de:cb:1b:da:d9:92:c4:f3:74:a8:98:b9:ad:
ca:15:39:7d:3f:57:de:4f:76:cd:7d:ed:13:96:1f:95:25:2d:
3e:71:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:32 2026 by rpki-client