This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File: JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier: GJzQDzcfHN/sw42H+xQHsVWELbNpveMyyZ5P0vaFMBE=
Subject key identifier: B8:FB:D2:AF:BE:50:2B:A2:25:FA:F9:8D:E6:F7:B8:EE:94:A1:B2:CC
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer: /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial: 019AF42E1FA278545D7B97838FDB735B748C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 15:00:54 +0000
Manifest this update: Sat 06 Dec 2025 15:00:54 +0000
Manifest next update: Sun 07 Dec 2025 15:00:54 +0000
Files and hashes: 1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: 0AhyX3FsSv8X/VZKoUPq/nd2i2kyHLIRA4DmXKDRHEc=)
2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:1f:a2:78:54:5d:7b:97:83:8f:db:73:5b:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Validity
Not Before: Dec 6 15:00:54 2025 GMT
Not After : Dec 7 15:00:54 2025 GMT
Subject: CN=b8fbd2afbe502ba225faf98de6f7b8ee94a1b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:85:05:f7:8a:3a:b2:f3:d7:9e:cf:97:c8:
32:50:96:5c:b5:da:38:99:0c:f1:ca:53:5a:c4:f1:
9c:79:7d:71:a6:af:2e:48:08:f5:68:f7:65:e3:86:
79:dd:de:bc:ea:08:0e:6d:5a:6a:03:9b:28:ee:f7:
6a:5a:9a:36:3b:29:ae:c1:aa:30:dc:33:07:b7:86:
7d:ca:4b:04:56:b9:98:45:8e:1a:58:0f:f6:5f:44:
bc:28:71:f4:7a:8f:8d:6b:8a:42:e8:38:b7:65:08:
9f:ac:f4:56:ca:dc:f8:9b:85:54:56:e3:8b:b1:5e:
12:a9:f4:9d:3d:01:57:87:37:d0:07:af:ce:32:d3:
a0:79:e2:dd:95:d0:b0:43:ad:1f:26:03:97:fa:ad:
b0:26:b5:fb:2d:cf:e8:e2:0e:8e:6f:4a:27:50:cc:
23:e9:b3:7f:d0:d3:10:db:40:84:4a:4d:3f:8b:8f:
f1:e0:1c:17:1e:54:8c:f6:82:9c:03:4b:2f:51:d1:
7a:42:cf:e8:60:c0:fe:68:07:92:9d:a2:06:ae:73:
94:a9:03:ac:b6:36:f3:0a:c3:3a:fa:2a:a8:a8:50:
4f:c6:46:1e:08:02:9b:92:62:a0:71:f3:44:b2:3b:
8c:9c:e0:59:35:fc:5d:a3:c7:56:f7:2a:22:3f:03:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:D2:AF:BE:50:2B:A2:25:FA:F9:8D:E6:F7:B8:EE:94:A1:B2:CC
X509v3 Authority Key Identifier:
keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:62:24:74:48:c4:bf:1f:41:07:f8:67:b3:29:1b:40:fa:4d:
31:0f:ce:4c:b3:ca:3f:a0:d5:d4:fe:5f:ea:69:ae:0b:ca:ab:
5e:4c:c0:3c:ce:5b:d3:d9:ed:bc:c9:bc:29:14:cc:1b:0b:6c:
53:59:5f:8e:ba:7e:9c:f0:8e:b6:84:c3:cc:f7:92:42:0d:d1:
ae:ab:c1:25:3c:99:70:1c:c9:cb:af:d6:ef:74:ce:79:f2:cf:
41:04:9a:50:cd:87:76:89:76:ae:49:e6:14:fd:09:cc:5c:c5:
46:3d:b9:04:72:1b:bd:16:ee:fb:d8:c7:a7:08:2a:2e:09:82:
35:3b:bf:14:ae:91:5e:12:2f:33:43:e7:ff:fd:95:30:6a:f7:
b2:7b:af:7e:33:38:a4:05:7d:83:1b:35:42:d6:1a:af:11:a5:
b3:3b:31:17:94:fe:45:c1:b3:4f:05:01:9a:f1:c0:4c:9c:ea:
e4:22:d6:6d:30:31:62:d8:09:89:fa:8b:78:1e:7d:21:6c:47:
04:05:67:8a:cd:2c:54:b5:c3:57:4a:63:53:3d:bc:8b:84:49:
5b:b3:b9:57:3a:2b:ab:8b:7b:2a:0a:6b:e7:14:0e:9b:c1:dc:
91:ec:3c:06:df:06:f3:66:d7:7b:6e:d4:c7:7a:4d:02:84:7a:
99:73:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:15:54 2025 by rpki-client