This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File: JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier: XLAfCx3vMeYr/kAdIsE/5ncn2lvnXLuXx8kdLPHASn4=
Subject key identifier: 76:A3:EB:6A:89:58:4F:A4:93:36:73:1B:58:30:9C:78:80:63:12:B3
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 019BF6F595913F6C00F0A809CDAB1A638E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number: 17F1
Signing time: Sun 25 Jan 2026 21:00:48 +0000
Manifest this update: Sun 25 Jan 2026 21:00:48 +0000
Manifest next update: Mon 26 Jan 2026 21:00:48 +0000
Files and hashes: 1: FAvWr-t5qLAm6NFSiSaeHXBJNkk.roa (hash: oCnAzbJIAxh+ZmVGXJVHG080J5H06zSvYh/DS9c83V0=)
2: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: UICkgpEomw/Q51X6A6sXgjGZJRdasmIfg/GajgNzhus=)
3: bNA2kutP2fcn6EKqxM5e-6bce04.roa (hash: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg=)
4: bhGF4U1uOTR_d637z55lpBNamlM.roa (hash: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw=)
5: dqIMVQtES41sQVRwnUTr8rX4pPk.roa (hash: 0lWlGGH3qwTUbHSx/AhpVPNTmibHBfbhdn/QehKZoOw=)
6: g0I0kU5MJHKsYF8n6XBnqA0rorw.roa (hash: 0uUsQ8/3tfk0T+PJCNuxoHMkCUWUET0shiGdo7yowwA=)
7: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (hash: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:95:91:3f:6c:00:f0:a8:09:cd:ab:1a:63:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 25 21:00:48 2026 GMT
Not After : Jan 26 21:00:48 2026 GMT
Subject: CN=76a3eb6a89584fa49336731b58309c78806312b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:ab:a6:72:7b:80:05:15:21:7f:3a:79:a5:
50:5e:f0:00:7a:49:1f:e1:03:0a:18:04:e4:18:5a:
24:f1:19:96:01:18:a9:44:a8:c8:29:e2:48:40:51:
e8:5b:4f:ff:5a:81:ba:d0:4f:39:0f:19:71:33:bf:
27:bd:0b:f4:90:29:53:96:80:1f:ef:13:b7:4e:03:
e1:b7:67:de:e0:8d:df:23:46:f5:3c:f9:85:e0:0c:
55:55:f6:fa:c7:7d:53:e3:02:a0:d5:16:3d:cd:c3:
df:9d:b6:dc:25:30:27:d5:fa:dc:5d:72:8e:a3:54:
76:45:82:62:a3:26:1a:90:67:21:0e:a8:69:4c:6b:
e8:24:22:a5:49:65:8a:6d:17:52:69:72:fe:d4:01:
79:d2:41:a3:bc:d2:39:27:a6:2b:3b:5e:a6:03:d5:
a5:2b:ad:96:2e:42:ae:71:04:0c:4b:d7:89:4f:cf:
06:a1:6d:1f:a9:0e:1f:6a:04:bd:32:cb:5e:c2:eb:
f8:ae:c6:34:7c:ee:00:21:61:bf:08:2d:d3:68:2b:
60:a4:de:ed:ad:13:e9:4f:c3:68:be:99:bf:84:17:
aa:80:56:31:da:63:ca:23:2f:55:17:1a:22:a7:31:
ab:2d:8d:36:30:e3:ca:3a:e1:fd:09:3d:f7:ce:a4:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:EB:6A:89:58:4F:A4:93:36:73:1B:58:30:9C:78:80:63:12:B3
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:31:ff:a6:83:81:4c:94:d5:2f:96:1f:ff:b0:23:4e:0a:5d:
12:32:a2:61:59:c0:a2:79:e0:08:1d:cb:13:a6:47:ba:39:8d:
29:02:a6:df:b7:5d:e5:4e:28:0e:d7:4f:fa:c0:84:93:b1:f2:
4f:6d:8e:6c:b4:9b:b3:83:ca:7a:d6:c6:9c:94:ea:c0:20:e9:
d7:83:50:91:88:ee:d7:aa:35:e8:b4:0a:1b:df:ee:1e:b0:bc:
33:2e:ef:a1:0f:bb:e9:ac:90:9e:49:5e:9c:d9:c0:58:9a:27:
08:e3:ce:1b:12:61:45:b9:5e:64:ba:98:8b:39:ee:e6:4a:12:
7e:9e:bf:92:e8:3e:f7:ed:fc:54:f9:79:9d:bd:b3:af:de:00:
be:d5:87:0b:36:d9:f2:0a:93:d7:5c:f2:b7:0d:90:ee:d1:75:
c5:7d:16:15:e9:63:ed:2a:d1:5d:e7:2f:c6:da:ca:1c:25:4e:
0e:06:a8:d0:15:c8:ba:2c:c5:ff:46:8d:0e:19:59:4e:39:9f:
35:da:00:f7:85:70:07:cb:41:37:d2:4f:df:22:b0:9e:23:70:
be:55:e1:84:03:88:48:cb:41:7c:ce:ac:ce:b3:c6:ae:72:53:
21:ad:ba:66:e5:3d:9b:7c:73:5e:c8:ec:e8:8a:cb:32:e3:38:
b0:24:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:03:24 2026 by rpki-client