This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: vjjBEExI1tBmI25Z765LxKEWwAnIiWJJxRZSfuDBLEM=
Subject key identifier: 76:C0:5C:60:A6:BA:B0:04:A6:7C:AE:A9:23:A3:12:78:F2:6B:24:0B
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019AF2099AD90B9D7B1128E6B8181EB06B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 0992
Signing time: Sat 06 Dec 2025 05:01:46 +0000
Manifest this update: Sat 06 Dec 2025 05:01:46 +0000
Manifest next update: Sun 07 Dec 2025 05:01:46 +0000
Files and hashes: 1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: y/81QnP+MH2iSy+xEQrh0c7temw8CbSWEK5NXudWsz8=)
2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:9a:d9:0b:9d:7b:11:28:e6:b8:18:1e:b0:6b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Dec 6 05:01:46 2025 GMT
Not After : Dec 7 05:01:46 2025 GMT
Subject: CN=76c05c60a6bab004a67caea923a31278f26b240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:1e:0f:55:cc:ff:39:75:99:7d:aa:91:36:
70:c8:c2:40:e9:53:d3:83:cf:c3:41:69:48:28:11:
dd:38:bf:82:69:2b:94:9d:40:29:d0:70:fd:1e:b6:
f2:3c:c5:b8:48:58:94:49:a2:03:6d:8e:91:12:62:
e2:c2:42:b9:24:06:19:cb:71:c2:1f:65:f8:24:dc:
2c:19:43:b4:8b:1d:5d:e2:86:31:c3:49:f1:01:fd:
0a:ef:a0:3b:15:dd:a6:26:01:5f:20:1a:da:38:a0:
22:0f:09:d5:c7:cd:9b:1d:4f:e7:e7:42:5d:3e:88:
55:52:2c:ce:ff:77:e9:f9:93:5b:01:ec:c1:98:bd:
c0:39:16:33:0d:cd:df:6c:0c:0c:fa:b3:34:a2:c4:
6e:d4:92:14:75:63:bd:7a:89:a8:df:e7:4a:25:53:
cd:f6:2e:06:e2:07:ed:90:4a:3a:66:7a:6f:2b:42:
b8:46:32:77:2d:b4:eb:89:ac:24:ea:a5:e2:c2:eb:
48:22:e7:b4:d0:5f:60:72:f5:0f:8e:8a:8c:b3:be:
23:91:e8:2e:09:9a:7d:dc:30:d3:0f:42:78:25:16:
ef:51:4d:df:12:42:a3:87:f6:33:dd:a8:3a:9a:b5:
e5:a6:01:31:ef:42:cb:72:00:d0:8d:ee:79:62:9b:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:5C:60:A6:BA:B0:04:A6:7C:AE:A9:23:A3:12:78:F2:6B:24:0B
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:78:e5:7e:0d:34:88:5c:24:0c:eb:26:d0:ea:79:03:f8:ce:
a7:b7:ff:fd:84:a6:50:cc:13:12:b9:e7:1c:f4:87:5f:0e:5d:
e1:a9:75:9b:15:cb:e0:3c:fa:41:28:7e:44:87:a8:a0:72:1a:
9a:75:50:b1:d6:3c:e9:1e:f4:d4:cc:40:17:1f:fb:4b:b1:ce:
97:f8:26:18:08:17:5f:d5:88:bd:97:d9:45:bc:60:5b:e6:90:
15:2b:9a:63:b9:66:42:04:c4:b4:8a:be:a7:79:ef:e9:de:46:
24:39:ac:16:3e:06:51:f6:fd:44:5f:39:1f:68:61:70:ec:4c:
89:29:d1:1f:ba:0b:e1:f2:81:54:ef:79:f0:8a:8e:ad:26:9b:
db:0e:52:5f:73:ea:31:13:6c:73:31:90:0d:ef:cc:df:43:b6:
6f:c1:1e:ce:36:92:0a:c3:4a:ba:72:ba:d2:1f:ee:87:6d:bb:
5a:69:5d:a5:10:14:d7:1a:0a:2f:ec:ad:35:1a:87:de:f7:fe:
f0:ba:b2:f6:b9:c5:79:e4:b5:a0:4c:3e:df:5e:f7:a3:b2:c2:
97:1e:84:3e:ec:76:3e:f8:0d:27:b5:c3:ed:94:83:50:30:46:
07:8e:e8:c9:2b:88:bc:c9:13:c0:8b:d5:8d:23:1e:b4:d7:44:
40:31:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:50 2025 by rpki-client