This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File: JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier: 6qs0bOY1UGonW1DALCmMEbq4+LeKrh9XGPd+8Vgn5Z8=
Subject key identifier: E4:72:89:DB:5E:76:24:78:D3:2C:DF:1C:C0:BD:83:D2:F8:82:5E:ED
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 019AF1645789996884D9580BA2F6489B8153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number: 0D4F
Signing time: Sat 06 Dec 2025 02:01:16 +0000
Manifest this update: Sat 06 Dec 2025 02:01:16 +0000
Manifest next update: Sun 07 Dec 2025 02:01:16 +0000
Files and hashes: 1: C03oYsQeKmNqstjprcrpWU_C_FA.roa (hash: XjHgFgaeV7edOP+rVRUhxH/PoL1vk7vdaF1YjoWE+DE=)
2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: dHs0jFmcUNPHBSERKoC/mTpYfZZU/5faqErtEM+a6T8=)
3: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (hash: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=)
4: iz1oLphOz4C0RKqGaCjwgWp4k-4.roa (hash: Spyiz27gUIj8vniKoNjV++85gF3fncVYgrGF+1dIJog=)
5: j4xQMv8fOD6vNafgvqaj-sinhSA.roa (hash: g/n7i1hhBBo3Q/tKawsn3d1mvtP+3frbkbuj6wZhZkE=)
6: uXwQWRGTbp4iQG2hqxNhBERgVfM.roa (hash: ZMVua8ZiPI5nY6upqsZo7sTjSdm1cARPTecfc5Wvr3E=)
7: zhL3mw3tfGz22FNWwzYf3uLwlM0.roa (hash: zAOff2Kw1dbM05MiGj7aU4wK2pL5mdV5s1R3xN1PATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:57:89:99:68:84:d9:58:0b:a2:f6:48:9b:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Dec 6 02:01:16 2025 GMT
Not After : Dec 7 02:01:16 2025 GMT
Subject: CN=e47289db5e762478d32cdf1cc0bd83d2f8825eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a0:16:63:e9:ee:a9:ec:80:c6:54:b6:00:c0:
03:5d:d6:c7:3c:7f:08:c8:81:89:d2:af:a7:a7:f5:
23:23:33:9b:98:ec:89:43:52:08:86:34:6b:f4:32:
61:eb:c2:03:0f:1c:a2:d4:00:f8:42:aa:5a:a6:bf:
87:9d:f3:b7:f0:14:b8:12:e9:d8:fd:ba:9d:96:a9:
66:8e:53:00:37:68:cf:55:29:5c:55:89:14:cc:a0:
41:b5:37:80:65:a2:89:13:c0:d3:54:9c:5a:e2:9d:
81:7e:50:c7:9c:1e:87:ff:49:1c:16:87:21:55:93:
7f:96:55:df:18:6b:06:77:0f:d8:c8:6a:f4:f6:8a:
7a:cc:3d:31:d8:d3:a6:30:5e:4c:3d:6c:49:0a:7e:
fb:68:a9:3b:33:66:06:36:03:de:aa:4a:71:7c:7b:
79:1f:3b:fd:c1:5f:19:73:6d:5f:8c:d8:f9:43:35:
3d:ab:86:bd:5a:64:c9:eb:ed:da:a9:70:b6:16:38:
15:9c:6c:38:cb:89:d5:ff:ef:73:52:e5:86:3a:ec:
c0:d1:04:73:c9:e1:5a:37:3b:6e:20:37:2f:6a:f4:
be:af:4c:4c:0c:e2:37:49:0f:51:b4:37:a4:70:0d:
82:ea:38:22:04:39:1f:1c:25:53:a2:4d:72:fd:42:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:89:DB:5E:76:24:78:D3:2C:DF:1C:C0:BD:83:D2:F8:82:5E:ED
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:85:7b:ac:7e:bb:db:f0:86:7f:01:f3:cd:fa:24:e6:10:33:
ac:82:40:d0:36:b0:ea:c6:a1:e4:d4:28:fc:27:ce:25:8d:0c:
83:d7:3c:96:9f:38:73:ca:c3:c1:3d:d8:90:1d:bb:a0:99:dd:
96:6c:0b:13:a1:fd:80:cc:cf:5a:65:88:3a:82:c2:d3:57:ca:
a0:39:ed:f8:aa:22:24:fd:4a:8c:2c:8a:e5:a3:00:4e:70:b3:
46:4f:53:2d:c3:f4:91:09:48:58:95:55:e5:6b:62:de:de:46:
20:f4:07:3d:d6:6f:18:a1:be:7c:dd:0b:9d:3f:50:bb:ca:4b:
7e:55:68:d5:17:5c:06:71:dc:cd:29:ba:a3:d7:27:d3:cc:35:
a7:67:86:fd:7c:da:ff:da:7d:38:46:40:05:3d:46:4f:c0:66:
91:49:b8:95:0f:8d:0f:f4:55:f7:45:7b:a7:9f:8c:9c:da:ea:
37:aa:a4:48:3c:8d:a3:2f:25:cd:3a:d5:eb:6b:6b:db:9d:bc:
f7:1e:13:76:7b:0e:ce:a2:06:37:3a:f0:a7:d2:66:13:b6:d3:
5f:e9:08:00:d7:b6:47:14:77:72:a5:95:99:74:d5:ed:5e:2c:
54:5f:fa:12:a1:2a:9d:28:71:42:88:e7:11:2b:c5:44:7a:29:
30:3d:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:50 2025 by rpki-client