This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: DeQTi/2KAwWBzEQ0taP8Dd62vELI8NfrEcglQosB1gk=
Subject key identifier: 14:46:36:E3:01:8E:A8:32:CC:8F:45:3B:0D:B0:71:79:97:E7:E4:2E
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019AF23FF59C6F23A765A71FCF4EC70AD59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 16A9
Signing time: Sat 06 Dec 2025 06:01:09 +0000
Manifest this update: Sat 06 Dec 2025 06:01:09 +0000
Manifest next update: Sun 07 Dec 2025 06:01:09 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: z6Wlg9r+IQuNfsZnxiGkG3Ia633V2/X/FwDWeZVGOwY=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:f5:9c:6f:23:a7:65:a7:1f:cf:4e:c7:0a:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Dec 6 06:01:09 2025 GMT
Not After : Dec 7 06:01:09 2025 GMT
Subject: CN=144636e3018ea832cc8f453b0db0717997e7e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:2e:70:17:29:59:5f:08:e5:9a:ee:41:b2:
be:e4:dd:dd:96:3a:39:ab:ea:e9:e2:5c:27:a4:6f:
94:48:ae:41:a5:19:ee:bc:bc:ab:e0:d1:35:0a:d4:
ee:51:33:27:fe:4a:a3:fd:b5:2d:be:d4:34:f8:79:
85:52:c9:14:71:93:a9:a7:c9:3a:09:3d:34:7a:9c:
3a:ea:0e:83:ee:44:a6:bf:4c:b2:3c:77:8b:f6:0a:
1f:43:01:82:af:a1:97:32:dd:bf:98:59:d3:69:75:
8d:90:ae:ad:7a:6d:fc:1b:76:2c:78:3d:3e:b4:f4:
9d:b9:58:c6:0c:58:15:0f:37:14:65:f9:f6:e9:90:
d0:6e:f6:0b:71:48:04:d7:ea:b5:7f:5c:a3:b2:c1:
d4:93:1b:f3:ca:e0:e2:db:52:9d:19:ef:55:66:d6:
c0:3a:4f:6a:22:e4:16:18:b4:33:7c:37:ee:6d:33:
a7:a3:ad:98:39:79:4b:4e:e0:b2:df:19:81:cd:b9:
ed:af:3b:ca:97:f0:9c:39:76:4e:62:97:0e:89:b0:
f2:f8:70:e8:4f:63:b7:b7:2f:9b:a4:2a:7c:14:41:
2a:cb:e8:2c:3b:4e:82:57:86:b9:0a:41:6e:f9:61:
9b:64:1b:34:78:f7:df:3e:2c:a7:08:6d:01:05:7a:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:36:E3:01:8E:A8:32:CC:8F:45:3B:0D:B0:71:79:97:E7:E4:2E
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:54:d2:3d:62:ce:ea:04:93:62:81:fc:ca:8c:d7:4a:1d:fb:
da:83:08:0b:23:6f:0d:c5:14:3b:fc:93:9b:a6:bd:0a:12:ee:
f0:a8:c2:fb:15:96:f5:a1:2e:72:75:6c:df:11:74:0b:fb:77:
92:fc:35:d0:4d:75:1e:ce:c7:dd:ec:79:4d:e3:4d:55:86:85:
eb:88:a1:f0:54:09:1f:d5:8a:02:91:9c:0a:50:c3:5f:2a:d8:
53:e3:06:ac:30:11:c7:4a:e4:2d:c6:5a:37:3d:3a:fc:b3:0f:
9f:03:de:50:65:ea:1d:f2:05:98:9f:7a:f4:2b:c7:23:2f:46:
98:fb:34:ab:6c:50:f5:63:0e:af:78:44:6d:62:4c:3c:db:ab:
72:22:8b:28:b0:52:89:69:2f:40:dc:61:7d:eb:7a:ea:79:f5:
f2:ca:8a:eb:bc:21:ed:43:e4:3c:3e:cb:2a:b4:93:a9:85:58:
d1:37:71:44:94:4b:e8:72:67:c3:52:f4:0f:12:8e:f4:2c:bc:
7d:af:15:63:3b:d0:a8:c6:3f:90:e5:00:a5:0d:d6:d0:15:fd:
21:fb:7a:35:78:f4:b4:d7:39:42:5e:53:04:68:f3:8a:f3:12:
d7:a2:54:32:23:e0:12:96:98:e4:d9:8c:09:97:e2:fb:1c:20:
3f:14:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:08 2025 by rpki-client