This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File: Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier: iw2SHpl/ZHMzOMTB4A9hZb2GVBhOptkCLbUfOZazwZo=
Subject key identifier: 9C:DF:FF:14:F2:24:DB:15:AF:67:D0:C0:F3:CE:83:40:0E:1A:F3:C3
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 019AF12D0262DD10BC5A0870F7C30B89E6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 01:00:49 +0000
Manifest this update: Sat 06 Dec 2025 01:00:49 +0000
Manifest next update: Sun 07 Dec 2025 01:00:49 +0000
Files and hashes: 1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=)
2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: JBze/SzcxvG51yQy/Y6BEeFf+gTyo1KVuDLFCoKlwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:02:62:dd:10:bc:5a:08:70:f7:c3:0b:89:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Dec 6 01:00:49 2025 GMT
Not After : Dec 7 01:00:49 2025 GMT
Subject: CN=9cdfff14f224db15af67d0c0f3ce83400e1af3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:b0:bb:37:1d:8d:0f:d8:ac:f3:0c:23:37:
f2:f0:78:54:98:9c:a7:8b:c3:ba:38:ea:bd:23:89:
c2:94:1d:f1:ee:87:12:1d:ed:75:fa:cb:26:10:20:
dd:4a:4a:7c:19:4b:3a:77:03:ad:01:1a:20:51:f2:
93:d4:5e:de:50:a5:1c:e0:42:b0:6f:7a:c5:77:43:
61:d8:5d:7e:04:14:40:de:a8:ac:aa:e2:1d:c4:65:
3d:f2:7c:a1:6a:b3:7a:21:d5:f7:33:d5:4c:61:7d:
e9:a2:13:5c:2c:bd:ed:51:94:6c:25:d3:d3:a4:bb:
50:b7:00:7b:d8:21:a6:3f:c3:75:1b:eb:5d:87:80:
91:50:90:1d:37:8a:a7:b8:0f:49:b2:73:98:06:8b:
05:5c:ca:5a:5c:a6:26:aa:bf:c2:78:1b:c5:65:3c:
45:a6:b1:33:da:0f:41:dd:c9:66:ff:8b:fa:05:3a:
ed:29:b2:d9:c8:69:a6:7b:80:43:2e:c9:f4:9a:19:
1a:8d:0c:2e:8a:29:03:07:20:23:9c:82:f7:b6:e5:
69:f7:c4:93:ad:dc:ba:69:b3:f2:1c:10:a3:48:66:
d4:1e:d9:dc:c8:65:a2:f5:be:6a:72:4d:f8:44:48:
3f:f1:e7:82:b7:eb:d7:88:68:ef:e9:44:db:55:e4:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:FF:14:F2:24:DB:15:AF:67:D0:C0:F3:CE:83:40:0E:1A:F3:C3
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:82:5f:86:b9:4f:3e:34:e9:65:70:25:94:eb:2f:8e:05:
e1:bb:c6:29:b4:3b:d1:9b:38:47:e1:eb:4c:a2:5e:ba:bc:cb:
64:83:2e:18:9c:82:99:3d:b3:d2:b0:ce:71:da:0f:ea:c9:cc:
54:3a:c2:1e:ec:c5:72:3f:44:21:37:f6:97:c1:b1:6e:5b:e3:
b2:fd:92:c0:e2:21:ea:bf:fd:d5:01:e2:30:69:44:d8:18:02:
66:4f:f5:d4:59:ab:0e:d6:00:28:42:1e:be:8a:36:89:4d:1d:
be:83:e8:ed:0d:8f:44:30:77:8d:22:e8:6b:47:26:0d:96:38:
dc:6b:1c:53:32:12:05:9e:e2:d8:a6:2a:02:7d:69:1c:c2:9f:
8f:26:7d:47:42:e5:d0:f6:ec:7d:d8:e1:b7:4c:bc:4a:ba:be:
dc:e9:c3:32:4e:70:e2:d8:03:69:e0:03:ab:84:a1:9f:dc:0c:
07:32:18:6e:72:97:ee:f2:28:25:b7:fe:b0:25:09:82:02:9d:
dd:81:10:b1:93:42:69:ae:72:10:83:d7:99:50:d0:26:07:d3:
f1:66:ed:16:a0:d1:b0:57:06:41:73:36:b3:8e:a1:b2:cc:be:
58:62:3e:33:62:96:3f:a8:e5:40:1a:a8:08:a1:02:a8:82:d3:
e0:5c:a3:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLQJi3RC8Wghw98MLieb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWY0ZjcxNDNiNDA2NzgwNWNiYTlhNDBmNjM5NzMyZWU3
ZDQyZTUwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5Y2RmZmYxNGYyMjRkYjE1YWY2N2QwYzBmM2NlODM0MDBlMWFmM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXewuzcdjQ/YrPMMIzfy8HhUmJyn
i8O6OOq9I4nClB3x7ocSHe11+ssmECDdSkp8GUs6dwOtARogUfKT1F7eUKUc4EKw
b3rFd0Nh2F1+BBRA3qisquIdxGU98nyharN6IdX3M9VMYX3pohNcLL3tUZRsJdPT
pLtQtwB72CGmP8N1G+tdh4CRUJAdN4qnuA9JsnOYBosFXMpaXKYmqr/CeBvFZTxF
prEz2g9B3clm/4v6BTrtKbLZyGmme4BDLsn0mhkajQwuiikDByAjnIL3tuVp98ST
rdy6abPyHBCjSGbUHtncyGWi9b5qck34REg/8eeCt+vXiGjv6UTbVeQKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzf/xTyJNsVr2fQwPPOg0AOGvPDMB8GA1UdIwQY
MBaAFCafT3FDtAZ4BcuppA9jlzLufULlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYt
OTJjNzgwY2EzMjYwLzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYtOTJjNzgwY2EzMjYw
LzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQiCX4a5
Tz406WVwJZTrL44F4bvGKbQ70Zs4R+HrTKJeurzLZIMuGJyCmT2z0rDOcdoP6snM
VDrCHuzFcj9EITf2l8Gxblvjsv2SwOIh6r/91QHiMGlE2BgCZk/11FmrDtYAKEIe
voo2iU0dvoPo7Q2PRDB3jSLoa0cmDZY43GscUzISBZ7i2KYqAn1pHMKfjyZ9R0Ll
0Pbsfdjht0y8Srq+3OnDMk5w4tgDaeADq4Shn9wMBzIYbnKX7vIoJbf+sCUJggKd
3YEQsZNCaa5yEIPXmVDQJgfT8WbtFqDRsFcGQXM2s46hssy+WGI+M2KWP6jlQBqo
CKECqILT4FyjfA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:12 2025 by rpki-client