This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier: cok0unAEw3iLLr5AI8c+d7uotFcB0Gnq4pYI25JKj/8=
Subject key identifier: A2:F8:A4:B5:40:59:02:84:C0:C3:F3:08:6E:82:22:BC:A3:F9:6A:CA
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial: 019B3E6E041CD36562ACCDC4D8B0FF5D783B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 01:02:35 +0000
Manifest this update: Sun 21 Dec 2025 01:02:35 +0000
Manifest next update: Mon 22 Dec 2025 01:02:35 +0000
Files and hashes: 1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: gwde8Ks9x+N1JMy0sqpGY6ETgYp29Diga3c4GmatV8k=)
2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6e:04:1c:d3:65:62:ac:cd:c4:d8:b0:ff:5d:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Validity
Not Before: Dec 21 01:02:35 2025 GMT
Not After : Dec 22 01:02:35 2025 GMT
Subject: CN=a2f8a4b540590284c0c3f3086e8222bca3f96aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:e7:bb:0d:bb:2d:11:89:65:1b:66:4c:1b:
e4:94:da:9f:bd:f5:b2:ca:2d:47:30:b0:09:22:76:
98:29:31:1d:45:de:c4:28:ad:e1:97:9c:ad:cf:56:
b6:91:49:d4:60:1a:d6:65:9a:62:ed:d5:0e:bd:ab:
de:08:6f:f3:cc:3e:20:67:e5:fb:35:dc:8e:66:77:
7c:10:ad:b1:75:3a:93:b7:8d:7d:33:7c:a0:74:d3:
e1:67:f0:80:48:eb:bd:c9:1e:7d:4d:cf:c5:65:24:
8e:73:f0:a7:54:8b:c1:1a:c8:96:40:74:bf:46:7e:
18:59:6a:b7:75:3d:3c:3e:5f:fa:74:5c:12:14:d3:
66:6a:4c:c3:a7:7c:f3:9b:0e:e5:98:c0:74:5e:bf:
b1:59:1c:d6:0b:52:e8:d1:35:f2:b2:a9:ef:3e:cb:
98:1a:43:b9:b5:d8:fe:9a:9f:43:be:98:d4:e4:dc:
2d:9b:bc:61:01:10:02:12:5f:2e:15:67:85:76:1a:
29:9b:27:dd:85:d4:01:a0:83:21:41:45:98:eb:2c:
3b:1f:d6:96:61:17:60:6c:3f:54:d8:dc:d0:b3:56:
a2:fc:73:75:59:8d:c2:13:63:18:42:67:da:85:5f:
a1:ef:70:dc:00:94:e2:6d:5b:20:1f:97:d5:43:1a:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:A4:B5:40:59:02:84:C0:C3:F3:08:6E:82:22:BC:A3:F9:6A:CA
X509v3 Authority Key Identifier:
keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:a0:01:90:d5:65:41:97:0e:39:10:85:50:51:85:8d:18:
8c:8c:30:e3:01:eb:6b:80:26:9d:d0:87:45:b6:d0:28:ba:18:
79:5c:15:23:71:5a:24:6b:c3:89:24:10:ef:df:fb:7c:43:50:
7d:af:da:0e:99:52:e8:cd:0f:17:94:38:da:33:d5:53:d1:83:
02:6d:7c:61:54:75:d4:c2:1d:8d:d0:a0:5e:5a:9e:b7:4a:33:
ec:45:83:89:5f:91:d2:c5:76:ae:77:f8:61:24:7e:91:57:1c:
62:58:94:4e:41:88:12:93:aa:74:09:57:6c:27:cf:82:2d:74:
4f:d0:ac:26:a4:17:54:47:8d:ac:80:ea:f3:46:9b:86:0c:e6:
9c:e4:a7:9e:0b:5a:63:b7:d4:dd:d3:42:95:cd:30:29:0c:b4:
12:f6:0a:cf:1c:da:ba:e0:a3:5d:99:f9:1b:63:62:c1:83:67:
53:b7:eb:6a:0d:0f:06:76:5f:10:ea:d9:db:6b:29:c3:13:37:
80:97:55:0a:6e:05:d8:8c:f9:73:2d:d0:ff:6f:a7:35:f3:a8:
cf:08:b6:79:3b:a3:07:61:31:58:21:85:05:68:2a:d6:14:9b:
3e:14:05:64:cc:be:1d:bb:51:f9:9a:e8:ba:08:53:25:3e:30:
54:d8:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:59:35 2025 by rpki-client