This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File: jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier: 3GfvPql6zG+4D0NcdXpCjdVatRNwigihrXHCIGoWAU4=
Subject key identifier: 4B:F7:4D:95:C5:E7:AD:41:FE:4E:0B:8E:4C:FA:3B:6A:74:69:5D:74
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer: /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial: 019AF31CBC18FE1900ABCDB3C2A87DAD92D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number: 0851
Signing time: Sat 06 Dec 2025 10:02:17 +0000
Manifest this update: Sat 06 Dec 2025 10:02:17 +0000
Manifest next update: Sun 07 Dec 2025 10:02:17 +0000
Files and hashes: 1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: 2r8xOXPDVgJTqlm0HqXXe4WtCWjTgjBIDso60dEZfZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:bc:18:fe:19:00:ab:cd:b3:c2:a8:7d:ad:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Validity
Not Before: Dec 6 10:02:17 2025 GMT
Not After : Dec 7 10:02:17 2025 GMT
Subject: CN=4bf74d95c5e7ad41fe4e0b8e4cfa3b6a74695d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:4f:4b:2f:54:2b:e8:33:8f:75:e3:18:b4:
cf:f4:6a:a4:e3:d1:bf:82:33:74:8b:af:c4:66:98:
67:e0:3f:4b:32:33:80:be:2a:f7:aa:fb:8b:15:ad:
05:53:61:1f:4c:f9:0d:a9:64:ed:cf:99:76:05:0e:
6a:86:a7:12:fe:4b:79:de:6f:89:f8:db:fd:dd:d5:
74:f2:c8:40:61:4f:58:0d:a9:61:e4:8e:14:c9:1f:
22:62:e7:07:1b:b8:a7:a1:da:bd:19:01:fe:21:c7:
18:7d:92:aa:79:c6:24:d1:6f:5d:92:8e:8c:d1:b2:
de:90:39:a5:b1:5e:84:e6:e3:a3:55:f8:1f:25:58:
ba:6b:11:8e:11:c5:5c:9a:66:db:99:70:c5:b8:8d:
9d:95:1b:cc:85:70:a8:32:1b:2a:1f:bd:03:5f:49:
0e:50:98:af:5e:a5:5b:6f:0d:ec:a7:83:ff:21:fd:
45:0d:a2:bf:81:b9:db:9a:96:04:f7:5a:06:2f:73:
c0:f1:d8:86:2b:3a:33:18:5b:8f:fc:cf:44:91:ed:
73:37:15:6c:b3:36:26:9d:07:47:c2:2d:c2:8b:07:
e9:f3:c5:0f:77:1b:fa:f6:52:f4:6c:71:01:37:7f:
d1:9b:a3:b6:56:95:07:34:d1:f6:f5:3d:25:c3:64:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:4D:95:C5:E7:AD:41:FE:4E:0B:8E:4C:FA:3B:6A:74:69:5D:74
X509v3 Authority Key Identifier:
keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:5e:db:0e:43:87:3a:83:bf:b7:58:5c:0e:68:f6:84:fe:
85:78:51:0b:35:68:7f:d7:24:c2:c9:b8:2f:44:83:6d:14:21:
20:44:64:62:9f:45:e3:40:30:0b:fd:4e:52:9d:a2:29:54:3b:
9f:aa:6b:73:d0:68:d2:10:96:7c:5e:b0:13:f6:70:91:c6:43:
8c:02:b8:fb:4d:6b:3a:3d:01:a8:7e:0a:b5:09:06:33:22:5b:
de:01:61:83:52:16:30:be:8a:ad:3d:c7:33:a3:06:bb:b1:ea:
9b:8e:31:de:26:4a:87:c9:5f:96:40:6b:42:7e:03:0f:79:82:
e2:6e:22:bc:8f:d1:07:9c:97:a7:7d:06:90:5b:93:3e:25:17:
06:43:ce:c3:98:83:31:4e:97:62:a7:f2:ec:17:ad:d7:54:0e:
de:4a:be:ab:0c:80:f7:50:ee:45:c2:2c:dc:5a:b9:bd:1a:71:
de:8e:8f:a7:ce:81:f2:0a:37:ca:47:24:11:fe:dc:bb:66:8e:
4b:d8:73:b0:02:51:2d:4d:8c:80:61:33:29:20:d8:86:63:f2:
b3:2e:e2:a4:8b:87:7a:69:de:7d:d2:a8:73:10:dd:95:ef:bd:
98:01:ca:58:d9:40:82:d1:d2:77:86:66:36:0c:81:d4:7e:98:
d9:ee:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:09:00 2025 by rpki-client