This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File: JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier: cezcoviA+zC7PT5z/yaXbEc7MwNJ2QqfLXnmBBl5WuA=
Subject key identifier: AA:56:5F:39:19:20:9C:D7:2E:7E:0E:C2:4F:A3:1F:44:FD:31:AD:79
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 019B3A904F86FD927ED0C562AAC19057A894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number: 143D
Signing time: Sat 20 Dec 2025 07:01:34 +0000
Manifest this update: Sat 20 Dec 2025 07:01:34 +0000
Manifest next update: Sun 21 Dec 2025 07:01:34 +0000
Files and hashes: 1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: EEpzuwMytI6hSy5Uowxx03S84W+yBNSKIuNm+IhYhOw=)
3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:90:4f:86:fd:92:7e:d0:c5:62:aa:c1:90:57:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Dec 20 07:01:34 2025 GMT
Not After : Dec 21 07:01:34 2025 GMT
Subject: CN=aa565f3919209cd72e7e0ec24fa31f44fd31ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:8b:f2:07:ef:41:a2:c3:3a:3e:0e:da:bc:
59:2b:d1:e1:75:3a:b3:4b:b0:d4:b4:e0:2a:87:2c:
83:e3:bf:51:2c:75:8c:3a:df:d2:84:7a:6e:47:c1:
15:42:27:5f:31:da:9c:91:f7:96:df:80:c7:1c:5d:
97:45:59:11:91:25:0a:da:89:7d:5b:c2:19:ac:b7:
30:56:06:a5:0e:ad:63:16:b6:ec:dc:68:62:89:ea:
eb:9b:30:e6:88:40:ee:44:78:16:e2:7d:5d:30:81:
4b:57:bb:eb:8c:c5:f6:51:2f:41:c6:67:3f:4d:fb:
06:38:47:46:93:a6:76:04:ae:9f:17:0f:e5:e3:48:
69:67:e4:ce:c1:3e:ef:48:53:b4:0b:f8:99:34:49:
1d:b6:3d:f7:66:b5:33:49:b3:b9:bc:e0:38:89:4f:
dd:8a:59:ef:07:95:ba:53:66:b6:b6:29:f0:13:22:
e4:6a:30:22:5e:0c:b6:68:7a:27:fc:b7:18:6c:80:
7e:dd:33:a7:de:7d:09:3b:60:8d:6b:32:34:a3:cd:
d2:78:ea:05:13:c5:48:e7:55:56:83:33:cb:99:02:
43:15:b5:46:87:d0:56:f3:3a:40:89:da:59:db:e3:
20:a1:5f:61:c3:66:5e:06:e4:da:da:eb:d2:4e:83:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:5F:39:19:20:9C:D7:2E:7E:0E:C2:4F:A3:1F:44:FD:31:AD:79
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:ae:11:e6:a1:7c:33:fa:22:7a:15:bc:83:b8:0d:70:40:
d9:17:62:c4:6f:3b:66:8f:2f:2a:b5:22:41:3c:b0:fc:03:15:
75:c6:b9:2b:01:2d:01:85:42:51:c7:db:69:00:55:65:70:ea:
8f:84:1e:1e:50:03:3d:29:fb:f1:69:4c:7b:2b:01:40:c1:69:
5d:36:07:5e:e6:f8:c5:69:d9:f2:1b:2a:d3:e1:43:1f:76:48:
71:be:d9:0a:1c:c0:28:41:fc:73:c7:5f:7a:91:46:eb:84:dd:
6f:63:5d:4f:d0:34:03:98:a3:63:2d:9c:68:4b:87:74:23:ca:
78:40:9c:4e:df:ba:df:57:d6:ba:af:9b:6a:e1:d7:c1:91:1a:
a0:ab:1f:72:2a:75:b4:ab:1d:6e:50:72:06:96:e3:bd:83:df:
54:da:b7:b4:f8:29:da:00:c2:d7:61:98:24:5c:ae:6a:ec:ae:
53:d3:ce:5c:f9:ca:b0:ff:ea:b6:ca:b5:83:af:40:1a:04:76:
bb:34:b2:cb:2f:3a:fe:fb:32:25:01:88:7a:56:89:79:ab:f2:
32:f8:1c:94:25:d2:12:dd:59:60:ef:d7:97:c3:c2:77:17:57:
39:1c:a4:24:97:a9:e4:01:f6:be:83:97:13:76:3b:cb:d4:17:
f4:93:09:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6kE+G/ZJ+0MViqsGQV6iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTU1Mzc5NDIyM2U2YjRjNjMyNzc5YjUxMzcxZGM0ZTdk
NzA3MDUwHhcNMjUxMjIwMDcwMTM0WhcNMjUxMjIxMDcwMTM0WjAzMTEwLwYDVQQD
EyhhYTU2NWYzOTE5MjA5Y2Q3MmU3ZTBlYzI0ZmEzMWY0NGZkMzFhZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pOL8gfvQaLDOj4O2rxZK9HhdTqz
S7DUtOAqhyyD479RLHWMOt/ShHpuR8EVQidfMdqckfeW34DHHF2XRVkRkSUK2ol9
W8IZrLcwVgalDq1jFrbs3GhiierrmzDmiEDuRHgW4n1dMIFLV7vrjMX2US9Bxmc/
TfsGOEdGk6Z2BK6fFw/l40hpZ+TOwT7vSFO0C/iZNEkdtj33ZrUzSbO5vOA4iU/d
ilnvB5W6U2a2tinwEyLkajAiXgy2aHon/LcYbIB+3TOn3n0JO2CNazI0o83SeOoF
E8VI51VWgzPLmQJDFbVGh9BW8zpAidpZ2+MgoV9hw2ZeBuTa2uvSToN87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpWXzkZIJzXLn4Owk+jH0T9Ma15MB8GA1UdIwQY
MBaAFCWlU3lCI+a0xjJ3m1E3HcTn1wcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYt
MzBlOTI5ZWQxMDYzLzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYtMzBlOTI5ZWQxMDYz
LzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6uEeah
fDP6InoVvIO4DXBA2RdixG87Zo8vKrUiQTyw/AMVdca5KwEtAYVCUcfbaQBVZXDq
j4QeHlADPSn78WlMeysBQMFpXTYHXub4xWnZ8hsq0+FDH3ZIcb7ZChzAKEH8c8df
epFG64Tdb2NdT9A0A5ijYy2caEuHdCPKeECcTt+631fWuq+bauHXwZEaoKsfcip1
tKsdblByBpbjvYPfVNq3tPgp2gDC12GYJFyuauyuU9POXPnKsP/qtsq1g69AGgR2
uzSyyy86/vsyJQGIelaJeavyMvgclCXSEt1ZYO/Xl8PCdxdXORykJJep5AH2voOX
E3Y7y9QX9JMJaA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:02:11 2025 by rpki-client