This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: r8F3k0BjWuJ3RyscXKVzhJvqWnqubDqVWEdITcbcjW0=
Subject key identifier: 84:32:30:BE:3F:F5:D5:E5:09:3F:C9:6A:42:8C:C6:25:71:40:5C:57
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 019B281BC64107A967CF4C404571AD9C52DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 0911
Signing time: Tue 16 Dec 2025 17:01:07 +0000
Manifest this update: Tue 16 Dec 2025 17:01:07 +0000
Manifest next update: Wed 17 Dec 2025 17:01:07 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: edvjZpcA/jVuuZT/LVWAJXyxbg4TZm35DxH30dJzh9Q=)
2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:28:1b:c6:41:07:a9:67:cf:4c:40:45:71:ad:9c:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Dec 16 17:01:07 2025 GMT
Not After : Dec 17 17:01:07 2025 GMT
Subject: CN=843230be3ff5d5e5093fc96a428cc62571405c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:9a:6a:4a:f4:6e:27:46:a3:0e:7e:7d:99:
ca:b4:74:b4:02:95:2a:bf:07:28:ad:5d:39:6d:b1:
3c:b6:92:8b:62:cb:57:83:e5:69:02:17:8b:da:af:
e5:ff:9b:df:1b:94:07:28:a7:06:0d:09:3d:45:aa:
4c:34:13:2b:5a:ef:1a:40:73:2f:23:65:24:e0:29:
4f:55:a5:cf:87:88:28:a5:e2:d2:47:4a:1d:0f:28:
44:3d:2a:e4:ee:02:17:bb:5a:46:14:c5:3a:34:a6:
07:95:a2:31:9c:99:22:00:34:e9:94:8d:e7:5a:29:
79:40:5d:c9:24:a6:cb:ea:6b:c1:e9:30:74:7d:39:
19:48:71:ac:0c:07:f5:be:cc:ea:73:a5:8c:f2:39:
00:96:df:e7:2c:c5:3f:77:37:a6:e5:4a:f1:c8:3b:
c8:7b:5a:26:f5:22:d4:1e:75:c6:67:5d:c5:3d:17:
3a:14:c3:d2:c8:a2:71:3f:bf:f0:28:10:e4:f1:01:
61:ad:50:ab:25:e9:3d:d3:68:4e:6e:7c:1e:8b:71:
1f:6a:10:ce:6e:b1:18:ae:80:f7:ff:12:df:b7:4a:
93:ac:45:23:90:33:52:4b:4b:80:eb:4e:5f:07:3a:
fa:a4:32:82:fe:3c:71:50:3a:0a:a2:89:a9:c1:71:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:30:BE:3F:F5:D5:E5:09:3F:C9:6A:42:8C:C6:25:71:40:5C:57
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:65:28:7d:06:5e:b5:8b:54:e8:d3:69:8e:2f:5b:7e:7b:
41:de:62:f4:83:99:26:98:c4:6e:3c:d9:8a:b7:86:59:da:3e:
e4:a4:97:25:c9:2f:7c:e6:95:7f:cf:60:82:20:d2:a0:3e:7a:
95:9c:b2:c5:74:ae:a2:0e:78:73:ad:c3:05:12:92:68:3f:a3:
28:a1:a9:41:6c:a4:76:40:e7:78:da:c7:d8:fb:25:7f:57:8c:
85:35:ba:f2:da:a4:e5:26:07:30:ae:d8:9a:8e:b6:13:7b:b3:
2c:82:27:2d:33:91:9c:0a:6e:ce:6d:f5:98:42:08:57:6a:9e:
7a:ac:10:63:eb:72:12:a0:93:d6:e4:9f:0f:27:3d:b8:a9:ee:
26:f3:ed:55:0f:46:18:57:06:3a:b2:e3:e4:27:24:f2:74:cd:
5c:c8:e7:e0:67:a3:1c:92:6c:5c:79:dd:f5:ea:54:94:db:ca:
89:00:3c:a8:33:38:07:66:a7:b3:52:83:d1:bb:9f:7a:6c:02:
37:47:ed:d8:78:92:65:2e:19:f2:69:a4:a5:af:3f:e6:6c:87:
97:d1:13:88:f4:82:fd:74:15:d6:5f:9c:f0:c4:49:b8:18:18:
cb:23:77:a9:37:ea:1a:b4:e7:47:df:88:2e:e3:08:45:7b:1f:
e5:97:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:12:42 2025 by rpki-client