This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: Tci1exdS70inj52gg/fxHbBTB03xNhKQsxn1gKjIF74=
Subject key identifier: A5:AB:EA:21:35:7D:BE:5B:D9:5B:22:C3:97:D7:87:02:9B:49:1E:5F
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019B3EA34666309DE61D1504A65D2F528568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 02:00:46 +0000
Manifest this update: Sun 21 Dec 2025 02:00:46 +0000
Manifest next update: Mon 22 Dec 2025 02:00:46 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: c89SERKWC8AjbdUbUOp+iTH0/gTgGKEbpo0LFOEufHY=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:46:66:30:9d:e6:1d:15:04:a6:5d:2f:52:85:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Dec 21 02:00:46 2025 GMT
Not After : Dec 22 02:00:46 2025 GMT
Subject: CN=a5abea21357dbe5bd95b22c397d787029b491e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:49:b6:0c:f0:97:1e:48:78:d5:64:f4:fb:
8b:28:0d:49:76:7d:75:78:88:47:9d:f3:e2:5a:3c:
94:ef:27:39:93:74:5c:68:1a:57:03:52:43:c5:3f:
f9:f2:af:36:c3:74:be:28:f4:29:b2:bf:46:08:a4:
4b:ee:93:ec:fe:6f:d2:5c:02:2e:99:65:88:22:e4:
5f:bc:f3:bc:95:a2:25:71:21:e1:7a:13:16:7f:2e:
a1:cc:37:8e:78:6d:e3:5b:39:7e:ce:5f:02:0f:d6:
e8:f9:69:e5:0e:6e:9c:1b:c6:21:8f:8d:e1:fa:22:
32:5c:ce:c9:58:44:0d:4d:c4:3f:41:4e:b7:7f:49:
47:93:ff:11:7b:21:97:e4:00:70:43:0b:74:a0:92:
18:25:5a:a2:c4:1f:26:cd:f3:ae:69:25:8c:af:a1:
1b:6f:de:cf:01:c1:42:4f:f4:5d:13:f3:55:0a:3f:
a0:32:cd:ce:11:0c:b4:83:39:60:be:84:4e:41:ec:
c6:c5:b9:6f:79:60:2c:63:05:a4:06:af:f2:4e:9c:
28:0f:e1:8c:c5:0a:67:cb:de:b3:52:02:73:e9:d0:
24:63:4a:44:cb:d3:54:85:99:69:7a:46:91:f5:0c:
3d:ce:08:24:33:f5:1c:28:de:2d:32:9d:41:48:da:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:EA:21:35:7D:BE:5B:D9:5B:22:C3:97:D7:87:02:9B:49:1E:5F
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:cc:62:9f:43:00:58:72:4c:c2:16:9d:31:6f:89:40:e0:
46:2d:58:bf:7c:9f:d5:0b:ef:c6:59:0d:f1:c3:51:51:4a:ca:
63:a1:7c:74:55:2c:a1:2c:be:a4:da:f1:27:ba:9b:75:87:9b:
e6:95:fe:43:36:ec:d6:52:68:d6:12:b1:25:05:3f:49:07:71:
12:47:79:55:f1:e5:72:6a:9c:9a:d1:f8:fb:4e:8e:69:f5:f3:
c4:8a:ea:e7:fb:99:2f:56:98:47:ff:7e:3e:64:5a:b9:ed:b5:
c0:1c:42:3b:7a:29:8f:59:bb:86:d9:a9:a8:5b:c4:35:b0:97:
0d:b6:a3:fe:14:91:f2:59:b8:fe:d3:76:ef:59:a7:d8:36:85:
1a:41:3a:2c:26:56:28:bd:1e:f2:64:61:d9:72:75:94:ea:4c:
bb:f1:ab:c7:d5:7a:a0:0e:c2:c5:77:e5:ac:27:d3:83:3f:cc:
0b:eb:50:39:43:a2:56:7d:b8:79:f3:49:5f:e9:39:97:63:03:
f1:2b:cd:f8:93:2a:36:fd:fa:13:0d:74:31:29:71:f2:eb:cc:
fe:66:3f:7f:bd:5b:f1:eb:b0:96:07:db:bc:a4:82:b6:50:ef:
8a:ae:14:fe:1a:0e:85:ee:be:b4:b8:fd:6a:67:42:58:1c:1f:
6b:1c:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:59:40 2025 by rpki-client