This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: HCgorGW4i+Bco3XNdDv7OjDiL5hbZK9CK7mZcPmUCHk=
Subject key identifier: A4:E1:4B:11:06:C1:DB:4E:EA:50:B4:F4:B6:3A:27:5D:5E:B0:74:BA
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019BF79A62F08EBFB9F46660C4DCDA3998B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 10C3
Signing time: Mon 26 Jan 2026 00:00:48 +0000
Manifest this update: Mon 26 Jan 2026 00:00:48 +0000
Manifest next update: Tue 27 Jan 2026 00:00:48 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: ADi1WLXS6FGgVfpm5dxCR0/nk1yuuAPWWDVolSA5WFc=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:62:f0:8e:bf:b9:f4:66:60:c4:dc:da:39:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jan 26 00:00:48 2026 GMT
Not After : Jan 27 00:00:48 2026 GMT
Subject: CN=a4e14b1106c1db4eea50b4f4b63a275d5eb074ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:85:ab:1d:18:a1:b2:05:58:4a:4b:04:10:
d9:56:6a:8c:71:7a:cc:01:f5:e5:a6:98:cd:c4:c6:
02:81:c2:3e:7a:2d:52:16:6e:7b:1c:0b:a6:a4:48:
a6:6f:e3:e3:88:ae:bc:af:53:88:7c:e7:0b:98:8e:
69:c3:e2:0b:ab:41:49:a3:f9:20:32:54:a3:4c:40:
32:8e:12:a8:ff:bf:d8:06:cb:89:00:df:80:be:94:
1e:e7:43:87:1b:c7:8e:7e:d4:30:f0:a6:07:08:f7:
1d:34:54:56:85:65:1a:d2:7f:8e:06:49:87:61:03:
39:c1:8a:6d:2a:8e:ba:3e:73:07:6b:ee:b2:38:24:
0a:e1:6d:dd:6a:4a:86:71:26:97:48:0a:24:fc:26:
1a:82:65:73:61:5e:ed:10:42:87:83:70:0f:da:af:
4d:b2:43:d0:88:c3:d3:6d:58:e6:72:0d:d9:58:ac:
5c:eb:ff:ca:12:b2:20:92:91:b7:b1:9e:e6:03:c1:
ef:5d:cf:81:3d:db:39:84:24:9a:d5:9f:ba:64:3b:
86:63:38:52:71:e4:44:aa:d2:4f:80:95:2e:2c:ee:
64:b0:67:87:b2:6a:ad:ae:89:0f:e0:69:0c:98:54:
dc:32:bd:68:80:cd:78:f7:31:b8:73:b1:b7:8d:f6:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:4B:11:06:C1:DB:4E:EA:50:B4:F4:B6:3A:27:5D:5E:B0:74:BA
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2f:bc:08:61:1e:65:5c:2d:d2:ef:dc:8c:10:c1:ee:f2:13:
0f:97:2c:f7:85:f5:ee:3c:c4:13:69:c9:6b:f9:26:17:65:3b:
7e:ca:27:8e:f2:ba:fd:f1:3b:c8:95:51:57:1d:af:9f:e9:14:
f7:e3:06:f2:48:c8:bb:66:f2:6f:17:e3:12:29:1e:87:25:88:
73:19:ff:dc:01:63:4c:50:4c:17:d1:2b:84:aa:3e:82:a6:9c:
d1:6a:4e:e9:3b:5c:49:9d:2d:4e:33:66:3d:58:4b:aa:82:47:
28:2a:b9:b1:ef:9e:c4:1f:70:ee:ec:59:b7:37:b8:53:96:75:
30:4a:00:22:1a:15:e8:72:ad:d6:ff:5f:5a:47:bf:1a:6c:8a:
c0:e6:e7:4d:16:9d:58:44:31:6d:22:fc:f7:b0:c9:7f:83:69:
29:7e:9c:1f:1a:5a:b2:6c:ee:8d:84:50:d6:f4:c7:9f:89:01:
d5:f5:54:ab:c2:59:3e:c5:4f:1a:f1:e5:43:7a:db:7c:49:e5:
cc:63:9b:6f:87:4a:28:a5:7c:63:08:18:6d:f2:ad:2c:60:c2:
59:a5:32:69:08:e4:69:ee:a6:ec:13:b5:d4:f0:c7:9a:78:72:
1e:59:ba:9b:94:86:46:4a:34:cc:e7:61:31:68:13:b3:67:c8:
67:d1:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:12 2026 by rpki-client