This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: KA3D6LZA/XyoNiH9d8AHvPyUar6DON7PLS3emrMFf4I=
Subject key identifier: 01:92:CD:73:DC:EE:2C:4D:2C:17:02:5C:4F:8F:1C:4E:A3:89:BB:8B
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019B3A90F66E7B4EC7FF21BDEE22039CDAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0B95
Signing time: Sat 20 Dec 2025 07:02:17 +0000
Manifest this update: Sat 20 Dec 2025 07:02:17 +0000
Manifest next update: Sun 21 Dec 2025 07:02:17 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: Nb6mTDBuNJqtlKiCG1b8826DpbskjbHLvrUtbtcXe78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:90:f6:6e:7b:4e:c7:ff:21:bd:ee:22:03:9c:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Dec 20 07:02:17 2025 GMT
Not After : Dec 21 07:02:17 2025 GMT
Subject: CN=0192cd73dcee2c4d2c17025c4f8f1c4ea389bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:23:94:46:f5:33:64:11:29:d1:bb:7d:3e:
fe:c8:e5:90:41:ee:f9:f4:f3:7a:3b:19:3f:5b:35:
0e:ea:b7:c8:91:02:54:4f:4a:74:34:8b:33:43:5c:
9b:95:64:80:7a:cf:15:75:f5:4b:3c:04:11:bb:59:
82:64:19:5a:bf:66:c3:2a:ec:3a:3a:fb:b0:f6:0b:
fb:a1:c1:ac:df:5f:46:c9:b5:52:f8:17:d4:ec:2c:
44:00:3f:95:6e:80:d9:3f:45:7c:4d:80:47:c2:da:
dd:1c:4f:80:86:89:a4:30:bc:7c:7d:8d:4b:56:71:
30:e7:ff:d5:1b:87:f9:d2:03:d5:8b:49:fa:73:9b:
0c:49:48:21:8b:9e:72:1d:08:36:97:74:b3:ef:e0:
97:2e:a1:fe:8e:74:07:29:ce:c8:e5:af:ba:67:0e:
f3:de:1a:de:94:44:ac:12:a5:d0:c2:a5:8e:1b:9b:
2a:e5:9a:dd:ee:d0:10:36:6a:2b:46:05:64:aa:a9:
e3:f1:cf:d9:eb:7c:e8:77:0b:67:f6:02:74:97:7d:
b5:a9:0f:e8:62:7a:ec:10:5f:ad:d9:a4:33:36:fc:
98:f2:b6:bf:7f:aa:50:78:df:32:33:bb:24:c6:60:
84:79:d4:d1:2e:9a:b1:6e:f0:53:9f:c7:e7:a8:13:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:CD:73:DC:EE:2C:4D:2C:17:02:5C:4F:8F:1C:4E:A3:89:BB:8B
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:0e:83:0d:28:53:f4:3d:f9:7e:94:a2:48:7a:c9:4d:03:
e4:d2:66:9e:33:30:0a:25:02:75:d1:43:37:6f:85:f2:0a:43:
68:d2:48:d2:37:12:07:28:42:fa:95:4e:5c:19:c6:29:af:ab:
e2:aa:a6:ec:c4:c9:b8:d7:fd:24:78:ca:22:e9:63:9d:79:0f:
fb:3f:0f:7f:c1:58:7e:78:2f:08:af:7d:af:a7:74:e1:51:ab:
b9:ea:6b:ba:39:b4:8c:91:1a:e8:0f:4a:51:a6:9a:4b:bb:ba:
56:c8:67:aa:f0:37:56:70:bb:dd:f4:a7:b4:5f:75:fd:1d:a5:
a8:fc:92:1c:f7:3f:7d:d8:6f:25:2d:81:c9:a5:71:59:80:22:
b5:92:48:08:03:47:3f:87:71:16:b4:f6:27:d0:bf:7d:c8:5a:
c3:2e:e5:42:f3:11:12:5d:e4:78:ec:7c:82:3c:84:84:2d:fa:
3e:97:e3:a6:f6:3b:cc:c1:9d:ab:bd:a2:7c:2e:4e:fb:e8:53:
c0:d2:26:c2:29:a7:25:55:76:f6:3d:fc:cb:c6:64:f4:19:20:
3c:22:90:87:bf:e6:2e:96:d0:4a:d9:f2:ae:3f:ae:8b:04:55:
08:2f:91:56:18:8b:67:39:22:7c:5b:35:4c:2d:d6:3a:36:d5:
60:b7:d2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6kPZue07H/yG97iIDnNrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm
NzExNWIwHhcNMjUxMjIwMDcwMjE3WhcNMjUxMjIxMDcwMjE3WjAzMTEwLwYDVQQD
EygwMTkyY2Q3M2RjZWUyYzRkMmMxNzAyNWM0ZjhmMWM0ZWEzODliYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52sjlEb1M2QRKdG7fT7+yOWQQe75
9PN6Oxk/WzUO6rfIkQJUT0p0NIszQ1yblWSAes8VdfVLPAQRu1mCZBlav2bDKuw6
Ovuw9gv7ocGs319GybVS+BfU7CxEAD+VboDZP0V8TYBHwtrdHE+AhomkMLx8fY1L
VnEw5//VG4f50gPVi0n6c5sMSUghi55yHQg2l3Sz7+CXLqH+jnQHKc7I5a+6Zw7z
3hrelESsEqXQwqWOG5sq5Zrd7tAQNmorRgVkqqnj8c/Z63zodwtn9gJ0l321qQ/o
YnrsEF+t2aQzNvyY8ra/f6pQeN8yM7skxmCEedTRLpqxbvBTn8fnqBMZqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGSzXPc7ixNLBcCXE+PHE6jibuLMB8GA1UdIwQY
MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt
ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm
LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbMOgw0o
U/Q9+X6Uokh6yU0D5NJmnjMwCiUCddFDN2+F8gpDaNJI0jcSByhC+pVOXBnGKa+r
4qqm7MTJuNf9JHjKIuljnXkP+z8Pf8FYfngvCK99r6d04VGrueprujm0jJEa6A9K
UaaaS7u6VshnqvA3VnC73fSntF91/R2lqPySHPc/fdhvJS2ByaVxWYAitZJICANH
P4dxFrT2J9C/fchawy7lQvMREl3keOx8gjyEhC36PpfjpvY7zMGdq72ifC5O++hT
wNImwimnJVV29j38y8Zk9BkgPCKQh7/mLpbQStnyrj+uiwRVCC+RVhiLZzkifFs1
TC3WOjbVYLfSjQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:02:28 2025 by rpki-client