This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: cBufW1jp2aPCPf8No1BN8eDbUeYw4ecuJ4oKNdeURN4=
Subject key identifier: 79:AA:C2:31:22:13:3E:0B:41:70:09:E7:53:0A:C2:81:61:21:9E:C6
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 019C4322A97BA74996349571B529CC15167A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 16:01:10 +0000
Manifest this update: Mon 09 Feb 2026 16:01:10 +0000
Manifest next update: Tue 10 Feb 2026 16:01:10 +0000
Files and hashes: 1: 1WsHGlHkp2WjNpTEWov_RNt1288.roa (hash: pr8q/7m/guyhubc0Lv+HgEZYXjReEisDa6/5dcWRxog=)
2: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: Gu5vSuYJCoqxeC6ukLuP+fjRw8DKxEw2VlC2qwPgfGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:a9:7b:a7:49:96:34:95:71:b5:29:cc:15:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Feb 9 16:01:10 2026 GMT
Not After : Feb 10 16:01:10 2026 GMT
Subject: CN=79aac23122133e0b417009e7530ac28161219ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:bd:72:90:d1:c7:f1:e6:f4:e2:f6:f4:9c:
53:e9:0d:65:b8:65:6a:66:9a:91:73:60:fb:09:2b:
b2:96:05:07:14:9a:36:1b:be:c8:79:c1:2a:44:f1:
39:23:ea:60:2e:c4:ca:56:ee:7e:a5:39:08:ec:dc:
fb:e4:ff:cb:08:91:fe:e4:e1:27:b7:8f:10:55:6c:
a3:04:8f:3b:25:02:95:15:96:f5:11:07:da:9a:5f:
88:cf:36:0a:cb:1f:0e:31:4a:f3:f3:0f:bf:db:2a:
7a:b3:07:bc:9f:5b:73:d3:62:0a:70:f5:61:2a:3c:
a2:f3:75:09:99:00:13:e6:ae:b4:38:2a:61:07:d8:
56:96:df:57:3e:c7:26:50:1b:76:f2:f5:d7:03:e5:
f4:77:75:10:95:14:75:00:49:cf:24:d4:a4:16:27:
8a:2c:2b:db:41:6c:88:00:ae:f1:3d:fc:76:ab:f2:
e1:1f:7e:c3:a2:19:46:f6:72:32:1a:fa:13:ec:9b:
94:45:0e:88:a4:60:33:8b:d3:67:93:ff:dd:7b:ba:
44:01:f8:ee:9b:23:29:48:53:25:33:11:d6:4a:ba:
96:66:c6:0d:a8:a2:3d:8d:71:1e:f6:91:95:c5:b1:
9e:79:f9:8a:d5:2f:06:96:54:cb:6b:43:65:2b:7f:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:C2:31:22:13:3E:0B:41:70:09:E7:53:0A:C2:81:61:21:9E:C6
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:26:39:76:3c:90:ae:df:4f:81:eb:c7:82:c5:76:8c:47:
11:bb:8c:40:c5:e5:29:6d:46:4d:6e:f8:6d:7b:e4:86:52:37:
ff:fb:ed:60:ff:b3:94:0c:9d:52:e1:e5:9d:9a:fd:03:06:53:
e4:16:76:96:6c:c1:94:e2:6e:3c:ff:de:3a:17:20:b8:ad:b0:
ac:37:e5:c6:81:88:0a:79:21:bd:1f:1d:b7:bd:b1:77:1a:f1:
2d:69:9a:3b:87:cb:19:d7:5f:dd:13:0c:37:63:55:89:5a:78:
2a:ec:72:06:b4:0e:45:09:2a:a8:41:b5:22:5f:d3:f6:83:1a:
79:4e:83:37:44:44:0a:ce:f0:36:d8:2b:a8:2b:fd:52:88:ea:
7f:33:be:90:31:6e:e4:fa:41:a9:b5:d2:a3:81:74:c6:b8:a2:
9d:50:18:25:25:e8:e2:0a:d7:c6:fa:18:13:11:6c:f7:3d:8f:
47:93:5c:38:7c:27:9b:6d:b7:f9:ff:ea:70:78:61:c9:80:9c:
b0:d7:0b:0a:69:c9:57:93:2d:43:63:ee:54:a9:11:70:ce:fe:
84:95:b9:e4:a2:0b:1a:21:82:24:3a:b2:5f:99:a5:2f:67:08:
ff:fa:9e:f4:cf:84:d0:8b:8e:6c:46:e2:a8:31:82:a3:03:db:
b5:d2:2f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIql7p0mWNJVxtSnMFRZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzYxMjRiOWY3YWRhODliN2UyMjY0MWM4NTZkMzA1MzAz
YzFmN2MwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD
Eyg3OWFhYzIzMTIyMTMzZTBiNDE3MDA5ZTc1MzBhYzI4MTYxMjE5ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+9cpDRx/Hm9OL29JxT6Q1luGVq
ZpqRc2D7CSuylgUHFJo2G77IecEqRPE5I+pgLsTKVu5+pTkI7Nz75P/LCJH+5OEn
t48QVWyjBI87JQKVFZb1EQfaml+IzzYKyx8OMUrz8w+/2yp6swe8n1tz02IKcPVh
Kjyi83UJmQAT5q60OCphB9hWlt9XPscmUBt28vXXA+X0d3UQlRR1AEnPJNSkFieK
LCvbQWyIAK7xPfx2q/LhH37DohlG9nIyGvoT7JuURQ6IpGAzi9Nnk//de7pEAfju
myMpSFMlMxHWSrqWZsYNqKI9jXEe9pGVxbGeefmK1S8GllTLa0NlK3/BqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmqwjEiEz4LQXAJ51MKwoFhIZ7GMB8GA1UdIwQY
MBaAFCU2EkufetqJt+ImQchW0wUwPB98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAt
Nzc0MmQyNjQ1MmVkLzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAtNzc0MmQyNjQ1MmVk
LzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddkmOXY8
kK7fT4Hrx4LFdoxHEbuMQMXlKW1GTW74bXvkhlI3//vtYP+zlAydUuHlnZr9AwZT
5BZ2lmzBlOJuPP/eOhcguK2wrDflxoGICnkhvR8dt72xdxrxLWmaO4fLGddf3RMM
N2NViVp4KuxyBrQORQkqqEG1Il/T9oMaeU6DN0RECs7wNtgrqCv9UojqfzO+kDFu
5PpBqbXSo4F0xriinVAYJSXo4grXxvoYExFs9z2PR5NcOHwnm223+f/qcHhhyYCc
sNcLCmnJV5MtQ2PuVKkRcM7+hJW55KILGiGCJDqyX5mlL2cI//qe9M+E0IuObEbi
qDGCowPbtdIv+A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:05 2026 by rpki-client