This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: wrA+PoLwXq+qmLgs7zeVjCcaXP1nJOvjTG3ZfvCfzzs=
Subject key identifier: 31:83:A4:1B:8B:5F:09:A3:1D:52:81:57:16:D1:26:D2:D7:5A:CC:7F
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 019C420FDEF3BF9DB3CF8E0BFEC9FD95A097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:01:02 +0000
Manifest this update: Mon 09 Feb 2026 11:01:02 +0000
Manifest next update: Tue 10 Feb 2026 11:01:02 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: vcG3uqCu9x3rMpKeBT+gElX114yGx+07e/noqOs4rHY=)
2: tjRP9kgE-QrIUhZyUs_wp0qikRA.roa (hash: 6nBakq9VtgLHGkO/ABZkQH63HrmGP7X+agXAFxco298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:de:f3:bf:9d:b3:cf:8e:0b:fe:c9:fd:95:a0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Feb 9 11:01:02 2026 GMT
Not After : Feb 10 11:01:02 2026 GMT
Subject: CN=3183a41b8b5f09a31d52815716d126d2d75acc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:19:a4:fd:7b:d8:cd:f0:0a:45:53:89:ae:
88:89:6d:d1:2a:52:92:1e:30:d6:aa:f6:9c:4b:d0:
13:00:88:48:36:d3:64:cf:dd:66:fc:b6:26:ac:85:
10:72:53:bb:39:2d:bf:59:75:f1:31:87:65:57:36:
b5:99:6e:35:f0:e3:c4:89:f0:66:c0:53:5e:0a:12:
b9:ab:0c:aa:70:c7:31:df:81:40:67:35:22:cc:0e:
da:9d:74:6f:a2:15:4d:e2:c0:a1:6c:b5:99:a5:cf:
c8:45:e0:98:05:8d:53:4b:80:52:32:ea:d3:08:45:
29:0b:6d:8f:af:84:20:33:8b:ac:dc:c3:bb:c2:c0:
d0:49:88:84:f9:11:cf:d6:2c:8b:3b:49:a2:ea:d8:
1d:d6:8a:a0:3b:b8:3e:ae:84:0a:ad:d6:3d:05:46:
55:b6:35:1f:c9:e6:85:4e:e9:56:6b:20:11:ae:cf:
85:97:a9:b3:ce:25:6d:89:78:8b:1b:87:84:a9:c5:
97:25:7d:bf:79:02:fd:84:e4:b7:22:13:d6:36:a0:
fc:b5:2d:47:35:77:11:1e:70:72:29:b5:02:48:e1:
e7:79:76:89:97:8b:ce:69:0d:38:d8:db:fc:09:f0:
ca:67:56:14:ce:74:fc:ca:31:a2:46:6f:7c:db:98:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:A4:1B:8B:5F:09:A3:1D:52:81:57:16:D1:26:D2:D7:5A:CC:7F
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:76:00:49:8d:f4:5d:e7:99:01:02:09:49:8c:29:a5:e5:
82:5d:72:b7:16:f7:64:0c:a4:62:6b:33:e8:bd:1f:45:14:04:
15:c3:97:fe:33:ba:55:21:7e:83:b0:f4:dd:83:cb:d2:d5:91:
40:7c:62:ce:00:72:5c:75:2c:16:f8:a5:da:db:aa:f0:13:cd:
ea:a5:6c:33:85:6a:f3:c8:c9:31:db:c7:31:a2:89:a0:11:6d:
98:79:ed:26:e1:84:06:1d:68:5c:7c:89:fa:90:9b:e1:d5:d5:
eb:27:ba:87:ad:e4:18:dd:67:c5:4d:79:f4:87:85:11:23:e2:
82:52:72:d4:03:13:5f:ce:74:4d:4f:5f:b2:cc:e7:51:c5:a6:
b1:da:69:8d:84:00:a2:13:db:6b:1b:bf:52:e1:65:5c:4f:c2:
9d:4a:ce:a8:b4:be:77:32:ed:90:1c:0e:64:ea:df:86:ef:77:
c0:40:13:b9:b5:f6:3e:67:30:65:b7:e5:2b:d5:2e:94:03:49:
e1:79:1c:ac:3f:e9:e5:44:de:81:58:54:5a:16:6c:59:93:23:
38:db:ce:2d:12:f0:66:e9:bd:27:3f:e5:b1:82:b5:1a:37:b4:
9f:04:ba:98:49:55:47:c4:74:5c:38:e0:d9:6f:dc:34:65:c9:
e9:4a:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:20 2026 by rpki-client