This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: J+6wciw6WG/1OInF8nHQmap5a/4P4nBXs2sfjvBHXkU=
Subject key identifier: 1A:BB:F2:46:6D:3F:02:24:6D:05:14:B8:24:D6:EA:9E:3D:09:DF:36
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019AF24018577821452D8B7A8070DBDF4F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 06:01:18 +0000
Manifest this update: Sat 06 Dec 2025 06:01:18 +0000
Manifest next update: Sun 07 Dec 2025 06:01:18 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: Z0GWkHVt48s9u+n8/TWlt7UxqgiwMwi7CkM8VKkWaB4=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:18:57:78:21:45:2d:8b:7a:80:70:db:df:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Dec 6 06:01:18 2025 GMT
Not After : Dec 7 06:01:18 2025 GMT
Subject: CN=1abbf2466d3f02246d0514b824d6ea9e3d09df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:12:25:5b:7c:f0:f9:14:aa:49:cc:25:e5:
ed:ae:34:85:67:8a:36:c1:34:fa:4c:92:5c:a7:71:
66:b5:64:68:e7:63:4b:42:91:e7:9b:18:ce:cb:36:
d2:2a:eb:b9:0d:f6:cf:fc:9e:ce:06:38:41:90:12:
1b:6a:0b:a1:10:ca:73:ad:77:52:e8:c8:8d:eb:e3:
cc:25:06:f3:20:9b:03:9e:6c:dc:0d:e0:3b:42:01:
b9:f9:7b:81:7e:f8:d8:b5:b2:47:4a:0a:c4:33:4f:
e1:a3:7f:4b:1e:ab:35:8e:4d:76:38:f2:72:8e:78:
ef:1c:35:0b:2f:74:fe:45:e7:55:a9:10:b2:ac:b0:
19:75:01:a5:49:e6:0d:ad:19:0e:f4:87:48:6c:ba:
19:4b:67:41:aa:fb:17:05:6f:f3:db:b0:26:83:f1:
7a:86:1c:22:f3:9c:20:bb:9a:98:4e:59:f5:44:b0:
56:25:cf:d3:67:76:e0:7d:2e:2e:bb:78:46:56:2d:
7f:bc:b3:19:c5:eb:1e:9c:5e:4e:8e:5e:60:68:3f:
cc:57:8d:e9:ea:ac:23:73:25:7b:d0:46:f6:ac:8a:
92:d3:52:e4:9d:f2:70:16:4f:d7:c6:e2:bb:27:04:
35:bc:86:ac:b2:c6:ca:ef:eb:d9:65:ba:a9:36:cf:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:F2:46:6D:3F:02:24:6D:05:14:B8:24:D6:EA:9E:3D:09:DF:36
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:7a:93:50:04:18:72:60:e9:00:7c:32:66:1c:8b:04:e4:
87:5c:19:f1:9e:5e:4a:aa:35:8a:db:00:7c:ab:18:6a:b2:21:
2e:65:04:81:37:0d:86:dc:0e:07:e0:32:57:cd:f5:b0:69:d7:
7e:6d:fb:80:bc:97:30:f5:11:7e:91:c8:43:79:89:22:9e:97:
6e:74:65:f1:85:03:d5:46:6a:7c:69:68:28:cb:9c:e7:43:69:
10:8c:05:52:d1:b1:da:df:a9:fd:37:88:f5:e2:ab:12:7d:6d:
3d:1a:97:64:67:d9:e2:d6:03:89:e3:51:1b:6d:dd:85:bc:77:
55:e2:9c:6d:e0:03:ec:f3:b6:87:45:ea:2c:2c:48:0c:9a:7f:
ec:4c:43:3a:64:41:d3:56:c6:78:ef:4d:cc:23:40:93:ad:ad:
40:5e:4e:ff:6b:ec:48:e1:30:a5:55:7a:1c:15:a6:2a:d3:1c:
ee:fe:5c:04:7a:6a:31:f9:bb:10:7a:e2:b2:63:2a:e4:e4:1d:
a7:91:00:24:2c:98:df:62:7f:b0:8e:8a:99:fb:f3:ae:7f:9f:
7c:3c:21:7b:24:68:e4:62:5b:19:e5:67:aa:90:b8:f4:97:a2:
a6:bb:47:38:28:d8:72:e7:d7:4c:16:f3:4c:5a:63:16:f6:c6:
6e:18:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:09 2025 by rpki-client