This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: G+5zLw0kKC4vs2MaaCH+SaACwC1Sozvhx7s0B++y3Hc=
Subject key identifier: 1F:30:1E:B8:07:0E:9B:86:E2:E0:EF:DF:86:31:E7:FA:C3:11:7E:11
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019B3946C3E0422F278CD21E2A32AC9EA672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1786
Signing time: Sat 20 Dec 2025 01:01:37 +0000
Manifest this update: Sat 20 Dec 2025 01:01:37 +0000
Manifest next update: Sun 21 Dec 2025 01:01:37 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: xa2EQtC3HIEZUusQBBLqkVe7PRFvozoZX6nKxXH+Mvw=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:46:c3:e0:42:2f:27:8c:d2:1e:2a:32:ac:9e:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Dec 20 01:01:37 2025 GMT
Not After : Dec 21 01:01:37 2025 GMT
Subject: CN=1f301eb8070e9b86e2e0efdf8631e7fac3117e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:e2:2a:2c:b0:cc:93:3c:49:93:77:bf:fe:
05:ca:f0:d0:62:bd:66:b6:e9:19:7f:90:62:2a:c0:
82:44:22:dc:24:c2:02:37:84:c6:fe:26:10:be:c0:
1a:c1:b9:08:4c:ce:ae:a8:af:9b:a0:32:6f:ba:db:
7d:4f:85:cf:e7:b7:d4:1f:3a:e7:17:17:e7:fc:c7:
3a:0a:42:73:d4:d8:9f:a1:a1:dd:ea:1f:d0:c2:55:
b7:bf:71:9f:88:33:22:75:b2:49:5d:9e:6f:7a:74:
1f:45:02:19:2c:aa:22:09:04:5d:66:2a:9b:4d:a4:
45:5d:13:ca:b9:4a:23:9b:bf:44:e3:4d:6d:32:3c:
cf:88:d0:95:29:c2:e5:9f:00:3c:30:07:e5:66:8f:
43:89:21:7f:34:f6:44:b3:00:ed:1c:70:d7:e0:bb:
fb:08:b5:96:d7:71:ff:4e:04:1a:93:3d:83:c0:7b:
7c:81:bc:32:32:e0:19:44:e8:94:33:6e:b3:c0:b8:
d6:62:ff:46:18:75:51:26:13:2b:b0:fb:07:2e:24:
9e:4d:16:a8:a0:55:9f:7a:96:38:85:aa:32:36:4a:
80:d1:b7:15:d1:e0:0b:ae:a8:5b:fc:82:be:31:4d:
98:1d:a9:ba:88:f2:fa:06:d1:9a:60:d5:1f:67:8c:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:30:1E:B8:07:0E:9B:86:E2:E0:EF:DF:86:31:E7:FA:C3:11:7E:11
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:2f:8d:21:d1:04:22:4a:f2:e3:8c:bd:e0:23:bf:a4:41:
1f:ee:6e:b7:c2:71:4f:a0:15:54:4b:c3:b0:29:54:cb:68:8d:
00:2c:08:e7:4f:6c:b7:86:03:22:12:c5:3e:ea:e5:64:8d:22:
92:dc:aa:a5:51:43:2f:72:b7:b3:c4:ab:ab:8a:6a:be:6e:b8:
23:0e:2f:09:49:8c:25:ea:db:bc:60:53:63:d3:2e:86:03:b0:
0b:66:b3:be:7b:d3:b7:88:44:6a:12:3e:62:b0:bc:af:a7:d4:
6a:e8:6a:47:53:88:5b:da:47:da:37:a4:3e:31:a4:47:9b:ed:
94:25:a6:8d:d3:6c:b9:13:1c:6c:01:96:9d:02:da:e1:0f:88:
21:a4:d6:39:fd:6a:8c:8e:de:a1:f1:77:c7:26:c0:ef:60:9a:
7f:b2:77:9b:ff:9e:0d:9d:32:66:e1:05:d8:aa:86:1c:e5:27:
e3:47:f5:98:1e:72:b5:8b:6b:6c:84:b0:29:7f:8d:97:af:0a:
c2:0c:b6:66:0a:78:8f:db:af:b8:8e:f1:f3:03:40:c9:13:bf:
e5:53:bd:da:e4:85:b9:d9:76:60:7b:4b:3b:c4:4d:45:2b:66:
95:4d:33:6a:e4:2d:45:01:27:36:ca:5f:e8:da:88:77:1a:4f:
11:f9:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:07:26 2025 by rpki-client