This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: I46uDAwczm7STuFfAFwuWPNMVH0TFKXKSUg89avy3rc=
Subject key identifier: AE:48:26:67:17:82:2C:8A:7D:1E:21:B1:D2:57:67:14:37:1F:A2:DD
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019BF49995F0273B48574CAB7246D1D186B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 16BB
Signing time: Sun 25 Jan 2026 10:01:04 +0000
Manifest this update: Sun 25 Jan 2026 10:01:04 +0000
Manifest next update: Mon 26 Jan 2026 10:01:04 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 3JnsImX5rJSddpTiDwoqC4nxwAymfAD8j8ZZ03mT8wk=)
5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:95:f0:27:3b:48:57:4c:ab:72:46:d1:d1:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 25 10:01:04 2026 GMT
Not After : Jan 26 10:01:04 2026 GMT
Subject: CN=ae48266717822c8a7d1e21b1d2576714371fa2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:b9:fb:b5:57:7e:fe:ed:67:86:05:b6:94:
44:28:30:4e:c8:10:67:d3:dd:76:35:78:a0:15:d3:
41:1b:bf:8f:4a:d6:fc:7b:46:63:72:44:3d:dd:45:
84:b8:bf:ae:01:49:ca:4a:06:39:d8:92:91:3d:b5:
1e:49:49:61:01:0b:27:2f:e3:70:f5:c2:6a:b9:d6:
62:c6:09:67:ad:71:d9:b8:38:5e:f1:13:fc:50:e7:
39:8a:e6:03:98:ce:d9:eb:58:79:b6:8f:8b:62:70:
04:47:6a:42:7f:5f:4c:83:24:8a:b8:f8:ce:37:77:
0e:56:f8:3e:ec:a8:b4:29:84:61:05:d8:ea:b9:36:
1f:f4:f4:03:a8:42:f0:1a:2f:9b:c0:3b:a9:d7:f0:
2e:98:a8:81:6c:26:3b:26:48:27:cf:23:66:5f:53:
6c:fd:d8:59:13:84:4a:be:d3:7f:ae:fa:42:34:24:
aa:c3:8f:42:f5:a5:4f:4e:f1:e9:5f:c2:dd:ff:5b:
68:19:9f:9f:60:6a:fd:cd:a6:1b:0b:bf:e8:7e:9e:
16:67:d9:ff:6f:a7:84:d4:4d:21:3b:3e:f2:26:f8:
8f:a3:c6:71:87:a6:33:60:84:81:cd:80:95:a9:09:
88:a7:f1:a0:ec:dc:dc:a0:99:46:6f:a8:d6:19:cb:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:26:67:17:82:2C:8A:7D:1E:21:B1:D2:57:67:14:37:1F:A2:DD
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3f:69:7c:93:5e:35:c5:3d:87:59:68:9b:57:60:3f:3f:4c:
75:b2:c5:9f:18:6f:f6:4c:a2:f0:68:dd:6f:93:11:40:2a:3f:
cb:17:47:ef:e2:73:60:3d:d4:90:b0:7b:84:33:f5:5f:f4:f6:
ba:7b:c4:b6:49:05:b6:a5:98:72:d0:be:81:87:c0:01:ba:ff:
f3:1c:a9:a1:00:4e:62:56:63:1e:d1:76:fc:d1:92:3e:23:60:
d3:5e:77:b2:c7:83:ad:1b:c7:11:ef:35:e8:eb:74:cb:7f:23:
03:5a:4e:e8:87:34:90:fd:e8:e8:42:ab:44:95:bc:b2:49:49:
b0:f7:d0:f0:7f:1b:27:f9:40:10:2f:1c:50:20:df:34:57:70:
7d:04:bf:ed:09:fe:45:99:9f:4d:b3:80:f6:dd:63:66:b4:04:
9a:fe:f8:d6:d4:2e:29:92:f7:5c:e9:3f:22:8a:58:9e:58:3b:
18:32:16:e0:d2:6d:79:8d:43:12:4a:1c:e5:c7:ac:e8:1a:b0:
4e:75:da:4f:e9:61:58:6e:d8:96:8d:c0:49:22:21:3e:5f:f2:
08:4d:56:1c:82:fd:b1:4a:b3:8d:84:16:68:99:b5:c0:71:69:
dd:de:dd:8a:08:78:c6:ab:5a:fd:71:fb:3c:7f:b3:69:3c:cf:
94:5e:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:23:53 2026 by rpki-client