This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: qKUwE1NXmqnuZgHw9IRvDkDucoMxzoc9e/PJeqh/hk4=
Subject key identifier: D8:E2:0F:7E:8B:84:0E:BE:5E:AC:7A:65:C7:7D:14:53:61:D6:F3:D2
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019AF1D26BAE5243842E9EBDD3A1F9293F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 0195
Signing time: Sat 06 Dec 2025 04:01:30 +0000
Manifest this update: Sat 06 Dec 2025 04:01:30 +0000
Manifest next update: Sun 07 Dec 2025 04:01:30 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: RqLoLQ8ahy2L0NH4QBvCDluK5C1TbSYsMaugFoI/B3k=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:6b:ae:52:43:84:2e:9e:bd:d3:a1:f9:29:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Dec 6 04:01:30 2025 GMT
Not After : Dec 7 04:01:30 2025 GMT
Subject: CN=d8e20f7e8b840ebe5eac7a65c77d145361d6f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:86:01:8d:92:3d:1a:91:a1:df:e3:cf:8e:
01:1c:e7:c6:fb:78:5e:fb:9f:37:62:75:cd:56:11:
bf:1c:ef:a8:03:14:3b:2e:f8:0c:8d:11:69:3b:33:
bb:9a:fd:dd:00:16:8b:20:a0:29:85:88:bf:43:02:
b7:36:9b:9e:64:24:cf:58:d5:77:15:24:71:b4:da:
40:ac:4f:aa:02:33:fa:86:59:f0:b1:f3:25:f6:05:
0e:ee:fb:eb:9e:e9:42:12:9c:3a:d2:be:e3:5d:2d:
04:df:cb:a5:0e:f0:82:3d:66:ae:20:db:93:75:d9:
e3:cf:fc:aa:3a:e1:ff:81:fa:43:91:5c:f5:23:b5:
ce:9b:8c:1b:bb:70:78:a3:59:1c:ff:07:ed:dd:c8:
87:23:23:cb:5a:81:2d:17:2a:3c:ad:97:b1:81:f5:
14:99:fa:55:55:51:35:cb:b3:ff:37:e1:dc:9d:92:
3e:aa:d3:e8:3f:5f:8c:8a:16:8d:e3:37:df:80:0f:
0d:10:42:b5:27:21:8e:30:0c:0b:85:eb:4c:71:86:
a3:d5:fe:3c:89:ef:57:2d:79:6d:02:dc:bf:1d:0b:
a7:5b:f9:b8:c2:89:0f:8e:5c:b6:f9:be:8a:7f:6d:
de:a8:33:6c:c4:12:5e:02:4b:f9:16:69:f5:fe:68:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:0F:7E:8B:84:0E:BE:5E:AC:7A:65:C7:7D:14:53:61:D6:F3:D2
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:33:3f:14:d3:b3:fd:76:60:44:00:94:9e:25:e7:1a:c5:e9:
d5:f5:57:74:ca:1c:5c:b1:ae:86:ff:48:f8:1d:73:42:4a:35:
e9:83:a3:a0:34:9f:11:e2:f5:02:41:2a:b8:10:16:0a:e8:88:
cf:76:26:5f:03:e4:66:02:72:67:13:1b:8c:93:0c:a5:42:a5:
0f:af:4a:d1:9d:c0:fd:0f:1b:e6:f2:d3:ac:bf:b2:b6:0f:92:
b8:1e:72:51:ac:08:5f:38:4e:2c:bb:06:f5:89:d7:6b:44:42:
bb:d5:1d:21:e8:b5:d1:c3:bc:b6:c0:a0:31:ca:a8:01:58:1f:
55:f9:2e:92:fd:c7:d7:6b:20:33:fa:c0:fd:87:cf:29:7d:a1:
ed:b9:c2:63:6f:a0:84:e4:10:c8:e7:fc:62:77:7e:4f:dc:2e:
e0:c0:3d:fa:b0:9a:53:96:54:08:60:dd:bc:38:a4:b3:5d:e4:
52:56:1a:20:3a:34:a3:3d:6a:ee:49:c1:a6:a8:14:cc:b7:09:
6f:c2:4c:f6:a4:cf:ef:be:c7:4d:8c:a1:6d:c8:4f:eb:35:7b:
33:32:f0:f4:8f:ae:fa:ab:06:45:09:12:2f:d3:e6:b1:61:e2:
e3:76:37:25:26:4a:e3:cd:bd:f1:6a:5d:c6:0c:78:93:3d:f2:
a0:43:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:50:21 2025 by rpki-client