This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: CNo9U+yFXg9FZSUi4zy5tCkxzJ9IKG3Fwn2yBEppUeo=
Subject key identifier: 67:E0:5A:FC:C4:2B:26:51:25:2F:81:B0:00:17:26:9E:B0:2A:CA:4E
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019B454A7F5EC830A7FE9CFD832514323095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 12AE
Signing time: Mon 22 Dec 2025 09:01:08 +0000
Manifest this update: Mon 22 Dec 2025 09:01:08 +0000
Manifest next update: Tue 23 Dec 2025 09:01:08 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: kw9yCPHhKk9avqvMuk1aRdfhFMNHcbxzCO44yNgHne8=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:45:4a:7f:5e:c8:30:a7:fe:9c:fd:83:25:14:32:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Dec 22 09:01:08 2025 GMT
Not After : Dec 23 09:01:08 2025 GMT
Subject: CN=67e05afcc42b2651252f81b00017269eb02aca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:50:59:13:ed:30:88:08:02:50:50:b4:99:
49:2b:fd:7c:fd:bf:11:30:e7:ee:2e:28:8b:dc:90:
99:2b:da:85:6a:74:12:22:a3:4d:75:28:d9:38:2a:
95:76:1a:a1:6a:55:8e:6e:26:73:6b:07:cd:8b:9a:
a6:12:e9:a7:21:4c:c8:6e:ea:a0:c1:e2:a2:97:40:
99:92:7e:23:64:86:d7:22:7f:45:ed:a6:94:22:50:
96:a3:97:d8:24:e5:21:6a:9c:8a:78:c4:aa:78:20:
b6:72:05:a0:f2:22:57:40:59:a3:9f:f9:05:6c:07:
ff:c9:93:1b:6a:a7:ac:f8:22:ab:17:63:82:3b:b6:
fc:f1:15:ba:e7:85:ff:6f:15:ea:f2:01:df:a2:56:
75:d0:8b:ea:87:13:13:0d:ba:1c:b1:a7:83:b9:1e:
80:85:31:5e:05:6d:09:ee:4d:ea:7a:64:e8:e0:14:
cd:00:fc:41:cd:e8:2b:e0:a2:3c:b8:92:e2:39:70:
11:6a:4e:98:eb:6c:38:74:b6:49:e1:bb:33:57:91:
e5:77:b5:ac:cd:f2:d3:8c:f4:5b:42:1e:a3:65:03:
c4:e8:e9:50:ba:72:c1:8e:d7:f3:64:33:e5:33:10:
06:df:5a:af:9b:82:a3:19:7e:ad:82:e6:89:5e:54:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:5A:FC:C4:2B:26:51:25:2F:81:B0:00:17:26:9E:B0:2A:CA:4E
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:2c:06:f0:b8:ec:b9:b6:b8:49:1e:69:f7:85:28:d4:ec:
26:30:ef:4b:01:9e:3e:59:d0:9a:25:32:ad:d7:84:f6:09:66:
60:f8:1a:b4:bf:fe:0b:f6:34:f7:d9:5f:71:10:5d:30:30:cb:
56:4d:57:66:53:21:9e:b9:2a:49:fe:4d:5e:f7:d4:10:cf:a9:
97:5c:79:19:3d:e2:6e:2a:89:17:e5:aa:a8:af:11:4b:94:06:
7b:14:dc:ca:56:f6:43:fc:4d:19:af:57:bf:76:6c:2f:2f:68:
27:c1:d0:1b:ef:8b:3a:04:43:d5:f9:4c:38:36:bd:fc:42:41:
59:6a:2c:1b:f2:c3:6a:0f:d5:3c:99:90:aa:01:e3:a3:e8:85:
bf:3b:bc:84:05:51:7b:8b:2b:6f:59:6f:6f:20:69:ee:fa:b1:
f9:05:d9:70:35:e7:1e:cd:74:f5:0e:1b:c9:92:73:46:d9:d1:
dd:87:66:5a:32:6f:0c:96:70:47:86:ef:a0:6a:7f:8f:bd:2b:
9f:6b:ee:76:b8:18:3a:16:89:f6:30:c7:e3:e1:3f:84:02:7f:
c1:18:fb:8f:bb:c3:d1:74:c7:3f:ca:f4:e2:31:5d:7f:fd:e7:
a1:d0:e9:22:18:33:10:0c:f2:e6:48:6b:96:08:2c:91:28:41:
e8:1a:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 15:40:20 2025 by rpki-client