This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: j6RPYUCsWLi860pcsORvxGzJC1tGBzZ590t0q9H4yQ4=
Subject key identifier: 7E:BD:14:4F:EA:E6:20:EB:CF:B7:10:95:FD:73:A7:99:BD:29:3E:E7
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019AF389A99A8BF6B2C8DA4F21519C8521B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 084C
Signing time: Sat 06 Dec 2025 12:01:16 +0000
Manifest this update: Sat 06 Dec 2025 12:01:16 +0000
Manifest next update: Sun 07 Dec 2025 12:01:16 +0000
Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: DwY1A3ld2GOROLvyyOSvo/IQu2GL7x09j9nElNoyYkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:a9:9a:8b:f6:b2:c8:da:4f:21:51:9c:85:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Dec 6 12:01:16 2025 GMT
Not After : Dec 7 12:01:16 2025 GMT
Subject: CN=7ebd144feae620ebcfb71095fd73a799bd293ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:7a:bd:64:66:2a:a9:72:a7:8c:29:d3:84:
f3:05:d7:fe:09:6e:d0:c2:3f:2d:88:2c:41:08:ad:
b9:93:e0:05:9b:3b:7a:d4:e2:4a:fe:dd:a1:50:7c:
ad:79:7c:22:57:a6:72:78:36:5c:a6:fa:b3:b2:29:
7c:35:0c:4c:f4:84:f9:ae:72:6c:63:a6:82:42:e6:
1f:a3:4e:3a:83:c9:e8:e8:d9:83:87:1f:2a:a5:dd:
e1:a7:bc:26:06:8d:95:0b:d9:c0:b5:94:2a:54:76:
a9:e5:ac:00:83:38:a0:43:df:85:7c:02:2e:6b:83:
85:f5:d6:53:78:65:a1:f4:e2:79:a5:f6:e4:b8:f5:
48:d2:65:36:f2:f7:85:ef:de:c9:b5:43:32:b2:cb:
6b:27:9b:54:14:4f:e3:19:b5:70:89:fe:24:13:dd:
80:ea:41:94:c8:43:a7:04:62:cd:32:97:78:cd:d9:
b7:22:ec:d3:50:d5:e3:04:1e:d5:6b:76:19:d4:70:
84:ab:36:c9:85:73:3e:9f:ed:f8:0b:a7:f2:87:9f:
7f:fa:72:4b:97:37:7a:81:4c:da:50:a2:25:cb:f6:
28:f6:ac:7a:c4:80:18:ed:3b:7c:19:93:d6:29:51:
f7:5c:71:35:f4:8c:a8:0d:7a:6d:2f:e6:da:92:47:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:14:4F:EA:E6:20:EB:CF:B7:10:95:FD:73:A7:99:BD:29:3E:E7
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a4:45:8d:43:c5:de:b8:45:76:ae:77:8a:dd:f0:80:0f:9d:
22:f4:40:be:75:bc:e7:7a:aa:85:20:77:d9:e7:1f:42:21:96:
35:95:1e:af:6e:31:10:ae:c6:21:a3:68:60:82:03:34:44:db:
4e:86:eb:d4:90:9b:02:69:c4:68:b4:ad:70:b9:ed:c5:30:bb:
76:70:a3:58:c9:f1:66:13:61:24:b6:fc:bb:29:ef:04:27:38:
c8:45:07:61:36:35:f0:0b:a3:22:b8:1d:19:cc:0b:55:f6:1e:
2f:1e:42:4a:92:df:ef:bf:57:b6:2e:61:6b:b3:ee:3a:8d:53:
ad:c1:e9:e0:cb:79:9b:7b:f2:f1:c4:53:49:7a:c6:58:34:9f:
7e:c9:0e:bd:2c:2a:be:f4:28:30:6b:74:79:69:a3:19:2f:de:
fd:b9:25:32:65:e5:8d:3c:f3:77:cc:2a:b1:a9:7b:60:3a:a0:
9d:91:fc:90:71:b7:48:58:e0:6c:2e:53:e3:e3:77:64:7f:e7:
79:10:0c:5d:05:0e:5f:2d:c3:73:54:d6:92:ea:85:dc:ff:97:
39:5b:ec:97:d2:ca:e6:69:0e:5e:60:3a:73:4c:5b:d4:b5:39:
e4:2d:26:3f:f1:50:75:e1:9c:37:6d:88:00:83:85:32:cb:70:
45:f8:7b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrziamai/ayyNpPIVGchSG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD
Eyg3ZWJkMTQ0ZmVhZTYyMGViY2ZiNzEwOTVmZDczYTc5OWJkMjkzZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfZ6vWRmKqlyp4wp04TzBdf+CW7Q
wj8tiCxBCK25k+AFmzt61OJK/t2hUHyteXwiV6ZyeDZcpvqzsil8NQxM9IT5rnJs
Y6aCQuYfo046g8no6NmDhx8qpd3hp7wmBo2VC9nAtZQqVHap5awAgzigQ9+FfAIu
a4OF9dZTeGWh9OJ5pfbkuPVI0mU28veF797JtUMysstrJ5tUFE/jGbVwif4kE92A
6kGUyEOnBGLNMpd4zdm3IuzTUNXjBB7Va3YZ1HCEqzbJhXM+n+34C6fyh59/+nJL
lzd6gUzaUKIly/Yo9qx6xIAY7Tt8GZPWKVH3XHE19IyoDXptL+bakkcpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH69FE/q5iDrz7cQlf1zp5m9KT7nMB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaRFjUPF
3rhFdq53it3wgA+dIvRAvnW853qqhSB32ecfQiGWNZUer24xEK7GIaNoYIIDNETb
Tobr1JCbAmnEaLStcLntxTC7dnCjWMnxZhNhJLb8uynvBCc4yEUHYTY18AujIrgd
GcwLVfYeLx5CSpLf779Xti5ha7PuOo1TrcHp4Mt5m3vy8cRTSXrGWDSffskOvSwq
vvQoMGt0eWmjGS/e/bklMmXljTzzd8wqsal7YDqgnZH8kHG3SFjgbC5T4+N3ZH/n
eRAMXQUOXy3Dc1TWkuqF3P+XOVvsl9LK5mkOXmA6c0xb1LU55C0mP/FQdeGcN22I
AIOFMstwRfh7CQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:06 2025 by rpki-client