This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: Tjfy6t8tfH2ra+Hv1DAFyzw9dxh8bn6PtrY5BN5mQ3c=
Subject key identifier: 85:89:55:00:E5:CF:94:96:F8:A6:C4:98:75:4B:9B:C7:3C:DE:17:69
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019AF1D239AE05F8CACE59DDCF45CB095F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 04:01:17 +0000
Manifest this update: Sat 06 Dec 2025 04:01:17 +0000
Manifest next update: Sun 07 Dec 2025 04:01:17 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: NX/rmz3I9fV+mdSFnQzUg7o1IaEY1zVYGW9ee3+R4qU=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:39:ae:05:f8:ca:ce:59:dd:cf:45:cb:09:5f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Dec 6 04:01:17 2025 GMT
Not After : Dec 7 04:01:17 2025 GMT
Subject: CN=85895500e5cf9496f8a6c498754b9bc73cde1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:2d:d7:03:3c:b5:c7:9d:ce:06:fd:04:18:
2d:06:d6:94:72:b6:71:78:5a:e3:d4:37:f2:ce:89:
3d:82:2d:80:97:07:e9:d9:4f:38:6c:71:bd:e0:9c:
94:87:1e:46:2a:c2:7c:50:d4:0b:0c:9c:98:d5:c6:
1c:0b:fb:1b:7f:65:2b:06:3e:c6:97:37:b1:96:81:
6a:fb:43:d4:77:2f:e5:47:f5:c0:7a:ae:1d:41:b5:
3a:14:9a:05:55:8a:77:68:43:75:99:00:1d:dc:22:
e4:ca:a2:36:a4:fd:3b:57:e9:88:0d:df:5c:00:b6:
c1:66:34:41:c1:7c:ec:1b:b2:66:8c:65:2f:fe:15:
a5:d1:c1:c4:7d:6b:1e:ec:55:31:4c:9f:e1:4b:a5:
31:59:17:e1:14:f8:10:f5:08:3e:88:a5:44:3d:7a:
62:86:57:79:67:da:d0:52:67:4f:2d:80:54:cf:b3:
3e:95:d1:63:25:0d:ff:01:fe:0b:75:32:1b:69:8d:
b5:9c:9a:cf:ef:1e:15:e1:b3:9e:40:0b:a1:2f:13:
fd:d1:ad:7b:73:09:19:2e:cc:ea:4e:02:e1:17:4f:
7b:77:2e:91:49:85:41:a1:33:d2:97:af:4f:ce:28:
74:88:bd:92:85:88:20:5b:d7:76:03:c9:61:23:b8:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:55:00:E5:CF:94:96:F8:A6:C4:98:75:4B:9B:C7:3C:DE:17:69
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:ea:3c:77:7c:98:2a:d3:44:61:a3:60:3c:55:5f:ff:61:
52:41:87:be:47:cd:ac:88:d7:a4:41:d3:66:f2:1e:e5:9a:be:
70:04:bc:d0:ca:67:42:5a:a8:7f:3f:0a:c3:78:6d:7b:48:44:
9a:f6:15:60:26:cd:74:de:81:4d:84:99:05:d7:eb:b9:61:3f:
21:37:e4:4d:59:d5:4a:83:bd:42:4c:29:77:50:0c:c7:b3:09:
80:b2:ea:d4:3c:fa:a8:b4:c6:66:47:28:fa:21:e1:6f:ba:8a:
57:ae:6d:dd:c5:f0:a9:2e:d7:d8:c3:ee:0a:1a:c8:71:c3:ed:
ba:b3:47:4d:d0:5b:27:bc:1f:08:d8:de:f7:b6:bf:de:93:86:
21:81:07:3e:d3:c6:70:e9:12:ea:c5:69:54:a3:a8:ae:1b:2e:
ca:30:5a:37:a5:cb:3f:c6:23:b2:73:67:a2:fb:96:0b:3a:85:
b1:f8:eb:d0:af:c0:61:dd:23:42:ac:b6:02:a7:8d:92:17:d2:
a9:0f:79:bf:ab:cc:cb:0e:cc:54:5e:e9:c3:46:5c:11:0d:74:
91:6e:de:7b:98:a1:d1:04:39:0a:44:0f:af:52:26:30:c6:07:
36:8b:58:88:60:ae:c8:fd:8e:5c:54:ae:16:2b:b3:bb:bc:67:
06:9d:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:33 2025 by rpki-client