This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier: wcFzoxHdwmLMXXn4vVzacW3mI0aQRH/gx8B4qNPWaYE=
Subject key identifier: 3F:42:4F:CA:31:AC:A4:3B:46:79:7D:EF:2D:75:08:DD:AF:E9:85:47
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 019B3A90A5AF325B3F61B7D85E5741B4D5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number: 1787
Signing time: Sat 20 Dec 2025 07:01:56 +0000
Manifest this update: Sat 20 Dec 2025 07:01:56 +0000
Manifest next update: Sun 21 Dec 2025 07:01:56 +0000
Files and hashes: 1: 1-nkq1gI9c-xmhnINJKTO0eY1F-c.roa (hash: esI7VyyO9I62Rhxi2p/PfcbKRFK2dputujGVLb2DIKs=)
2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: 8fksKhZCiefnBCaTnKOJiV9wNkB8zSJlvpogg8IEwQ8=)
3: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (hash: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=)
4: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (hash: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:90:a5:af:32:5b:3f:61:b7:d8:5e:57:41:b4:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Dec 20 07:01:56 2025 GMT
Not After : Dec 21 07:01:56 2025 GMT
Subject: CN=3f424fca31aca43b46797def2d7508ddafe98547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:bf:c8:81:5b:a3:df:52:fb:8a:f8:02:8d:
91:fc:fd:c7:3d:c1:af:7f:61:ad:5e:72:8a:6e:0d:
4a:8f:12:1e:69:89:37:55:7b:85:14:46:0c:47:25:
81:b3:fa:fb:d6:e6:eb:18:37:af:74:df:73:a6:44:
00:e0:6c:f6:bf:12:e5:13:16:b6:c9:12:8c:f7:01:
ab:d1:50:62:ef:d1:2f:c7:4a:79:86:c5:05:22:64:
92:25:0a:f2:05:a0:11:2c:22:16:9c:d1:90:c5:3a:
53:a4:ff:4d:a7:7b:49:4d:5d:c2:b9:57:ae:c4:0d:
e3:7f:b9:7a:c1:e3:51:8b:c3:0d:3f:0b:2c:98:9c:
60:e6:6e:b3:8d:4c:b5:e4:90:50:e5:13:18:a0:d2:
40:3a:81:49:e3:5d:e6:57:62:4a:1e:96:e7:c6:ec:
13:2e:70:e6:19:6e:88:1d:d2:29:50:e6:bb:f8:c7:
92:a3:9b:a7:15:d9:7b:c1:21:f3:77:a3:da:fb:80:
ad:e1:2c:03:72:56:c7:0e:26:c2:ca:00:08:1c:d9:
32:68:8d:87:b2:68:db:26:97:fd:53:78:24:dd:11:
71:94:91:c3:41:91:5b:d8:48:c6:98:a4:e9:be:d9:
d7:c8:b2:a8:5b:11:e5:fe:aa:fd:1f:d7:67:31:c3:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:4F:CA:31:AC:A4:3B:46:79:7D:EF:2D:75:08:DD:AF:E9:85:47
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:f7:5c:30:51:18:87:bd:6f:f4:47:3f:f9:fe:7d:99:f0:
2e:a6:61:00:4e:e9:f0:42:fd:1b:a7:d0:3a:40:6e:60:ab:ef:
eb:65:b3:13:56:d4:de:01:ff:c2:fd:c7:04:5f:e5:5f:b0:0c:
d8:36:ca:05:8c:fd:0a:12:cf:b6:ad:30:c6:fb:01:8d:4b:d2:
f2:e0:89:e4:f7:47:f2:cd:c8:c1:11:22:1a:db:79:be:89:08:
36:21:b0:41:ff:eb:cc:18:f0:a1:58:e5:dd:22:31:d9:b5:7f:
46:a6:d8:88:09:ff:ff:bc:60:fc:f5:25:e2:d5:bb:ba:21:35:
62:f5:db:15:e7:66:df:4d:c1:e6:fc:d2:d2:bf:06:c0:dd:af:
94:ef:6d:51:b4:70:7c:b8:8d:23:42:8b:07:4c:e8:c5:46:14:
c6:8f:8f:c0:74:bc:a2:95:0f:9c:87:50:f0:aa:38:da:d8:09:
27:a2:15:cd:4f:ac:c6:b8:d9:11:75:00:95:ca:96:4b:b5:1b:
29:54:5f:80:90:e7:0d:dc:8d:93:ee:02:ba:81:49:aa:88:4b:
77:55:a2:ee:0e:7b:23:01:ed:1c:32:dc:51:48:16:15:f1:21:
63:0b:6b:8a:2f:58:46:b1:c6:f3:ac:90:2e:f2:9f:2f:d3:40:
9a:0a:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:30:51 2025 by rpki-client