This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier: tKNjKEU0uPsbhlK5ClfX6JBCRj6ZECNfoghOYyvJAdU=
Subject key identifier: 6A:C3:9C:1B:41:F4:4F:B3:AF:EC:02:62:CB:81:B3:89:77:8A:F4:82
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019AF276BE6D975712549CF323DF5710EE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number: 1701
Signing time: Sat 06 Dec 2025 07:00:59 +0000
Manifest this update: Sat 06 Dec 2025 07:00:59 +0000
Manifest next update: Sun 07 Dec 2025 07:00:59 +0000
Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=)
2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=)
3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=)
4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=)
5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=)
6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=)
7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=)
8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=)
9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=)
10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=)
11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=)
12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=)
13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=)
14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: V60oZUrh97vv8oGNAkCYOv//KSbPlUtf2BQy9d+YBJU=)
15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=)
16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=)
17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:be:6d:97:57:12:54:9c:f3:23:df:57:10:ee:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Dec 6 07:00:59 2025 GMT
Not After : Dec 7 07:00:59 2025 GMT
Subject: CN=6ac39c1b41f44fb3afec0262cb81b389778af482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:c5:d6:46:55:98:28:8f:8b:9c:86:42:60:
79:d3:91:1d:08:95:3d:d9:f8:54:91:5b:71:86:4e:
bf:c1:c1:cb:f6:53:de:e7:20:6b:66:82:7d:f2:3e:
b0:ff:4c:98:d0:eb:2c:1a:fd:89:20:ed:4d:42:01:
4d:04:79:81:26:fe:c1:d4:c1:7a:8c:26:eb:9c:c5:
89:92:a9:1a:52:33:ea:80:70:94:43:21:1e:1b:08:
83:82:bc:60:5f:d9:e1:b8:bc:b9:aa:1d:2b:b5:38:
74:55:f8:6e:51:dd:4e:20:f6:5d:e5:35:70:89:8a:
eb:d8:27:05:57:2e:cf:3f:5f:d6:31:69:61:c5:61:
af:a2:c2:c0:8b:3f:d6:78:d6:93:d0:1e:33:6c:c8:
1c:fe:f9:33:83:16:f7:e7:57:ef:b7:80:b1:ef:d5:
8e:2e:b3:b7:2c:61:4d:1d:0d:dd:c6:0d:55:bd:47:
26:8a:4d:8d:11:e2:97:30:b3:97:01:c8:e4:9b:a0:
c9:ef:c2:44:b4:87:16:b7:23:0b:34:bf:aa:1f:3b:
01:fb:a0:f0:55:7d:2e:2f:ef:f7:a0:a0:23:34:29:
53:8f:2d:a9:21:92:be:19:21:2f:14:92:8a:03:c0:
04:f8:01:4a:5e:35:c7:08:2f:fe:46:d6:3d:77:f4:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:9C:1B:41:F4:4F:B3:AF:EC:02:62:CB:81:B3:89:77:8A:F4:82
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f7:98:57:8c:ed:25:cd:b2:50:d0:4d:78:7d:2f:0c:12:c1:
18:12:3d:cb:f7:51:78:27:5f:83:84:04:18:c6:a7:21:a6:fd:
b1:43:b4:65:94:24:3d:b9:a1:8b:a5:48:63:40:d0:11:1e:40:
5b:c2:8f:65:df:c5:87:93:19:26:36:98:96:6b:f1:03:c5:c0:
1e:53:d8:86:5a:2c:d7:64:56:9f:40:e1:49:01:47:d5:38:fd:
b6:c2:4e:2e:74:45:ac:b8:ae:09:44:9e:5c:ba:14:b5:f7:0d:
84:40:0d:e2:23:76:30:6f:d0:83:a4:d5:13:82:3e:c2:d5:00:
85:83:01:50:34:ee:12:92:41:69:cd:f0:95:f9:c5:10:0b:95:
7f:1f:ab:43:b6:bd:97:c2:5a:5a:94:ba:fd:fe:f7:77:e5:db:
d1:38:97:bb:81:d8:17:fb:3e:18:32:82:ce:4b:b1:8e:d9:99:
0f:ff:26:17:ae:50:0e:db:4d:c4:cb:9a:7f:42:58:b2:19:c1:
ba:ea:71:43:f0:c9:45:19:01:be:4c:e6:de:6e:07:69:e0:73:
2c:89:b7:30:25:09:ab:6a:b2:7b:2b:70:b0:00:de:98:21:76:
a6:45:b2:4e:8d:1d:1c:8a:d9:28:4d:24:84:e0:ac:fb:32:30:
0b:2c:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:42 2025 by rpki-client