This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier: auRZzkG9k4e1I7ULYbPbDU8Tm4m5wiHkeMITbc9k/us=
Subject key identifier: A1:A8:2C:25:C9:99:FF:68:DB:5E:A2:31:BB:FD:B6:7B:B7:3B:72:66
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 019B3F7F54A9E56F9B062E1ED93A6F6A6499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number: 1790
Signing time: Sun 21 Dec 2025 06:01:07 +0000
Manifest this update: Sun 21 Dec 2025 06:01:07 +0000
Manifest next update: Mon 22 Dec 2025 06:01:07 +0000
Files and hashes: 1: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (hash: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=)
2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: hEBEFa1HRkEHZWtjEyD/MW0FayTiBBMM/zJFBJkPNVM=)
3: Jf85FwwWGAMm_y1gyBMRf8ZylY8.roa (hash: hqLNtg3bR55HcspgRfJxtmFSYZlPqsuiPGUD5+xKsFs=)
4: P8SdjgL8ZDRD9dCtV019i5iHb24.roa (hash: CoeDwI0txm8Gy2K05IA/CNWDcRLrTXgP9de+lbPwdzQ=)
5: xBLcc2AhQCKdlLPVE7OecNCDHAk.roa (hash: KULQbNfVs2hH3SWd6cCFH6Kq1uuNhfPkvbV/MNFA8As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:7f:54:a9:e5:6f:9b:06:2e:1e:d9:3a:6f:6a:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Dec 21 06:01:07 2025 GMT
Not After : Dec 22 06:01:07 2025 GMT
Subject: CN=a1a82c25c999ff68db5ea231bbfdb67bb73b7266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:33:39:93:ec:1e:cc:4a:2a:4b:89:8f:9c:
b3:97:3a:e1:77:72:2c:55:84:88:f0:22:b4:b8:10:
94:ac:96:1b:f2:1d:88:80:d7:41:a0:29:94:7d:fd:
36:fa:e9:6d:42:5c:cc:a2:fd:fa:dd:17:d8:28:af:
66:ac:5d:53:5f:7f:d0:49:45:c1:a0:ef:47:9c:ee:
33:f3:34:a6:89:db:3a:d3:fb:0c:ac:73:5d:8c:d7:
0a:1a:61:42:21:53:e2:94:78:fa:e2:37:48:41:b4:
ad:f6:5e:e4:13:c5:c2:b6:c3:25:93:c0:08:a3:72:
95:d6:4a:2d:58:0c:bf:21:ee:e4:c2:03:9d:41:a2:
0b:91:e9:64:0f:60:b4:46:d7:4e:32:84:dc:1d:af:
ed:f5:6a:87:f7:35:7a:f2:98:81:5a:5b:09:88:f9:
2a:e8:64:33:01:81:bb:0a:b9:38:c7:08:d4:cb:db:
ce:af:61:0b:b9:c1:bd:7b:70:97:df:76:a2:f8:4b:
78:3b:e9:c7:f6:e5:56:3f:50:ac:1b:13:f4:ae:4d:
81:91:92:d9:18:10:8a:1b:3d:2f:6e:78:6b:f6:cc:
cb:26:4e:3a:3a:86:41:cb:cd:43:5a:fb:d9:6b:aa:
c0:03:e0:35:d8:3e:4b:76:09:63:96:dc:23:e6:27:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:2C:25:C9:99:FF:68:DB:5E:A2:31:BB:FD:B6:7B:B7:3B:72:66
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:38:37:5f:13:7e:cc:d8:fc:6f:78:7e:3d:b4:ce:51:23:71:
46:0f:c4:46:36:e1:60:1a:af:c1:bd:49:dd:2e:7d:eb:68:1a:
30:16:f5:0e:2c:86:12:42:5e:26:89:95:d0:db:2e:ad:c5:75:
3f:3d:5a:7f:4a:29:57:f7:7b:0b:f3:82:a7:33:22:d5:92:6d:
f5:82:2a:7a:53:1f:09:38:78:8a:fc:aa:aa:bb:a0:e0:d1:79:
db:64:05:57:de:c4:98:6f:0b:92:f2:72:ff:eb:01:55:f7:98:
3a:13:50:1d:96:19:6a:f5:20:5d:4c:1e:5b:dd:47:28:59:e6:
72:55:08:82:95:29:bf:6b:da:85:20:ee:61:3a:5a:b5:fe:5d:
26:d5:7e:81:7e:d2:b7:3d:2e:43:e6:4e:fe:25:db:43:df:23:
9c:3d:75:c3:16:da:53:a1:18:61:2d:3a:e8:70:90:2d:fe:ee:
6c:f3:4b:4e:39:dc:5e:89:cf:7a:ab:d7:d7:4d:2e:f0:fd:53:
19:31:4d:cc:be:9c:fa:6f:02:df:51:cb:f3:2e:d0:ad:7a:f0:
e5:43:29:7d:65:7c:94:70:9c:f0:70:fd:ee:83:5f:0f:48:52:
7c:95:aa:81:08:e3:ad:b7:82:de:6b:07:ad:c8:b2:ae:76:26:
3e:60:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:57:45 2025 by rpki-client