This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File: Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier: Z7U4OG3At7Y2bpMoRVA2s7r5wQkpoImMsbSVgO3WIsA=
Subject key identifier: DE:09:53:0D:21:15:3F:DC:16:AA:9C:72:68:19:AA:13:FC:87:5E:A4
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 019AF163F5FAB88CA46F98D93C3167DBF8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number: 1766
Signing time: Sat 06 Dec 2025 02:00:51 +0000
Manifest this update: Sat 06 Dec 2025 02:00:51 +0000
Manifest next update: Sun 07 Dec 2025 02:00:51 +0000
Files and hashes: 1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: Qy53WoYZ+/Ly1iBuXCQnx48/DmO0reamqqPl1WjNZOs=)
3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:f5:fa:b8:8c:a4:6f:98:d9:3c:31:67:db:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Dec 6 02:00:51 2025 GMT
Not After : Dec 7 02:00:51 2025 GMT
Subject: CN=de09530d21153fdc16aa9c726819aa13fc875ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:e8:20:b1:8c:78:ff:f1:45:cf:40:ef:04:
16:4d:c3:49:85:83:90:46:01:56:4a:58:85:e2:d7:
24:a4:a1:89:4f:2a:79:73:39:a1:46:5c:cb:63:7c:
6d:5f:be:8b:4a:ac:90:4f:11:f4:2a:4e:a1:9a:80:
ca:0f:07:38:30:70:30:11:45:6a:ef:3c:67:86:04:
30:33:53:d9:a5:55:12:6a:65:92:09:1d:e3:a0:aa:
08:1e:db:c6:9d:12:6c:f9:dc:01:28:31:4f:51:b0:
aa:c1:41:0d:9e:79:f0:1b:1b:6c:ed:93:ad:72:d5:
0b:49:07:62:85:93:2c:c3:cf:bf:a3:51:87:58:5f:
e5:62:2a:0d:b8:a9:72:45:c5:fc:0c:8e:0d:64:4d:
08:bd:8c:9a:17:c5:75:28:16:d9:87:f7:8f:bc:4c:
4b:c4:27:18:20:f4:70:b8:27:ca:19:cc:ee:ff:e7:
31:75:0e:03:91:d9:f9:3f:49:2c:6c:de:ff:e3:cc:
72:64:13:0d:df:02:c3:c9:f5:44:7e:fd:bd:9f:b5:
e3:bf:2c:f9:fd:79:e8:f6:13:dd:96:22:46:16:f6:
d3:30:32:a8:36:94:1d:4a:91:56:b2:7f:7b:2b:2a:
9e:e6:74:e8:ce:8a:5d:3e:0d:79:fa:94:79:49:0b:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:53:0D:21:15:3F:DC:16:AA:9C:72:68:19:AA:13:FC:87:5E:A4
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:7e:5b:94:61:f0:6f:02:f9:74:4c:b2:60:57:72:e3:c4:
5c:a6:27:ff:e5:16:3e:b3:37:71:8f:31:f8:47:14:74:3d:ce:
2b:f3:c5:52:b4:8a:53:b2:13:24:8b:73:01:be:5e:08:a2:39:
db:fe:1b:d4:20:7f:52:14:61:19:78:95:79:04:e3:68:32:22:
36:85:39:03:aa:f7:df:8f:42:de:c3:d7:e6:1a:16:47:cc:8f:
79:25:50:be:06:e0:28:8f:69:4e:0e:19:12:c8:2d:a1:d9:17:
f2:5b:22:da:5d:da:e4:a8:52:c8:39:3d:6a:91:6f:fb:af:5d:
38:82:30:b6:75:18:18:84:06:de:1a:df:4f:99:a9:7d:6a:d4:
b0:a0:eb:24:3a:f0:b1:00:ee:dd:55:c8:d7:27:48:84:0d:29:
f4:ba:0c:a7:7e:fb:83:96:8d:cd:24:7d:53:2e:7c:a6:f4:da:
87:3f:74:74:df:a2:ba:6f:17:d0:21:da:c8:af:60:47:a8:a8:
57:0e:6b:66:3e:73:d3:b5:fa:c2:38:0b:5a:80:3c:40:20:ed:
02:14:9a:9d:5a:97:ca:a1:8a:6e:d6:cd:2c:46:16:20:49:4d:
10:9e:f8:b1:bb:8f:b5:42:8a:52:a4:14:83:b2:5b:15:67:a6:
4b:ff:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:27 2025 by rpki-client