This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: 6toxaO58fT2uDKhqpIJpqehY+0e69P0icB/zO6HFKig=
Subject key identifier: 71:DF:1B:62:F4:2D:90:5A:CA:6F:00:21:0A:5D:6D:C5:F8:2A:82:BC
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 019AF1D238B5275366226F9EFAC6458F568C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 04:01:17 +0000
Manifest this update: Sat 06 Dec 2025 04:01:17 +0000
Manifest next update: Sun 07 Dec 2025 04:01:17 +0000
Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: kaIb2ePb/5OBS0wJTV5horGsyiDQmBSuOtsKYphekEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:38:b5:27:53:66:22:6f:9e:fa:c6:45:8f:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Dec 6 04:01:17 2025 GMT
Not After : Dec 7 04:01:17 2025 GMT
Subject: CN=71df1b62f42d905aca6f00210a5d6dc5f82a82bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:fa:52:be:ea:d9:fe:53:e3:d4:19:3d:2d:
70:73:1f:96:9e:ec:f0:b0:05:2d:5a:0f:d2:fc:a9:
fd:b1:51:40:a0:66:0d:8f:3d:20:04:d8:30:8e:0a:
17:76:f4:5f:84:c8:4c:d4:43:fa:93:b9:af:02:c5:
e8:ae:cc:7a:d1:53:fd:f9:7a:af:a9:d3:19:f9:34:
d1:08:28:d6:9b:48:f6:4a:75:d8:cd:97:3a:45:7b:
3b:12:23:78:a9:9e:88:21:31:28:2b:06:71:17:2f:
46:ad:0e:a7:8d:da:e3:f6:42:b8:20:fa:fa:39:93:
0b:73:8a:2f:68:82:18:2b:8c:c1:9f:75:37:13:e3:
f3:38:23:1e:ec:e9:4e:d3:50:e2:da:96:56:06:85:
2e:eb:77:2b:8b:2d:73:af:db:fd:07:cc:8b:6b:5e:
f7:6b:cc:21:f0:8c:0f:c8:7c:9a:8c:1a:5a:f4:77:
f3:72:bf:f3:f0:c4:90:05:db:55:6c:78:ab:34:8f:
51:38:83:20:bd:f1:3a:06:75:c2:0f:fc:31:7d:c3:
93:67:10:6e:a9:b7:26:9a:f5:11:c4:c7:a7:4e:44:
3f:a7:2f:26:f2:e0:d7:a0:9d:0f:3b:f1:51:d5:61:
2e:d1:30:66:c1:54:89:23:10:9f:28:91:93:1e:4d:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:1B:62:F4:2D:90:5A:CA:6F:00:21:0A:5D:6D:C5:F8:2A:82:BC
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:40:5a:28:14:ed:17:3e:47:78:8d:5d:f8:f2:8f:9b:92:
7a:65:65:64:3c:3e:df:9c:a5:9d:b3:a6:0b:21:c0:02:2a:4c:
87:8a:1f:09:db:b3:44:39:e0:eb:8d:28:f1:0a:b7:51:16:36:
0d:e6:94:c2:35:9c:c1:58:6d:83:c5:59:f3:d1:4e:f3:94:00:
f1:be:f6:2b:3e:ac:ca:e5:ba:c7:0e:0e:f8:23:73:92:a3:b2:
5c:68:83:c2:93:0c:1a:77:57:b6:3b:be:4c:24:d2:ca:98:60:
35:eb:5a:f9:c4:9c:07:87:bf:b7:cd:d8:8f:96:22:88:bc:69:
3d:53:21:46:4c:2b:7c:37:65:d8:e2:ef:5c:68:31:54:4c:32:
4f:51:dc:3a:bc:47:f8:e8:82:e7:e4:6d:1f:bb:08:1f:c3:bd:
10:fd:9f:9f:ee:99:78:12:48:76:b2:2b:00:cd:d2:3f:3c:8c:
f8:5f:1f:93:52:bb:ce:ac:ed:e6:73:4b:6c:0a:14:0b:a6:55:
07:65:f7:2f:0e:4b:a3:ac:4d:53:4a:2b:50:5f:76:23:2e:4a:
f9:95:15:57:f1:9f:ed:f9:b2:cf:c9:2a:79:c2:ad:51:25:1c:
bb:e2:29:5d:a5:da:3c:3c:0d:11:84:90:4f:cd:7b:e2:d0:f3:
f4:6f:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:29:43 2025 by rpki-client