This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: x9ugj/VJEgSCFsEPUv1rEJBwvgvUCpNSc4STdOaYf8s=
Subject key identifier: 88:33:01:44:9B:64:D3:6D:F9:FE:84:C2:49:B9:C4:69:27:9D:13:D6
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019B39B41D2CA5969FF7EA7967B56D3C0DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0AA1
Signing time: Sat 20 Dec 2025 03:01:03 +0000
Manifest this update: Sat 20 Dec 2025 03:01:03 +0000
Manifest next update: Sun 21 Dec 2025 03:01:03 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: 4FDAUTivpClX+tn/mZEDIj3TL6r2jIwZQlsbluKmiC4=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:b4:1d:2c:a5:96:9f:f7:ea:79:67:b5:6d:3c:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Dec 20 03:01:03 2025 GMT
Not After : Dec 21 03:01:03 2025 GMT
Subject: CN=883301449b64d36df9fe84c249b9c469279d13d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:f5:14:a3:7f:50:33:a9:c0:cc:1f:de:cf:
bc:01:24:02:27:7d:06:10:85:48:cd:e0:22:cf:05:
c4:ff:21:27:64:dc:69:66:3e:75:97:3d:cd:9d:14:
30:b3:8f:4f:da:5f:d2:d2:d2:cb:c2:3f:8e:31:d4:
ee:96:90:16:b3:e1:0a:b8:16:00:ec:45:0e:23:94:
07:27:20:d5:a8:ef:55:df:cc:f1:fb:35:43:1b:90:
96:1e:bf:ec:cd:3a:8c:68:18:e4:45:04:47:7f:12:
09:dc:30:73:79:77:73:f4:f9:1e:39:ab:a7:0f:e6:
91:e2:1a:89:1b:b8:87:85:12:93:63:92:c9:3a:63:
e5:9d:bc:83:aa:d8:b5:51:99:8c:15:a6:a6:76:5d:
09:7e:49:e1:f5:d3:23:db:db:ca:93:03:30:4d:96:
08:d4:ef:38:fc:84:82:06:08:f6:6d:fa:64:db:9a:
33:99:48:da:3e:47:e5:ae:0a:ab:f1:cd:48:e9:ce:
72:23:51:b1:24:a4:f0:4e:d2:bb:12:19:c5:c0:b8:
52:a7:44:48:7e:ff:38:f5:c4:9b:aa:6f:15:16:67:
9b:35:88:66:da:2a:f3:88:41:f5:9e:f9:3a:9b:58:
66:89:3f:5e:7a:d4:e2:04:88:29:ae:22:d2:6e:17:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:01:44:9B:64:D3:6D:F9:FE:84:C2:49:B9:C4:69:27:9D:13:D6
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:da:c3:af:4c:dc:58:9b:34:40:e2:0b:8f:27:1f:a2:88:
a7:4e:00:1c:9e:3f:b5:ae:ff:56:95:4f:ec:31:a8:00:18:85:
d8:cb:00:c7:60:52:fd:2b:60:4e:6a:e2:a1:20:05:77:bf:e4:
a3:c4:df:74:58:ee:a6:c5:78:4d:32:85:4f:7d:11:a7:76:1f:
f5:14:d8:21:6e:f6:88:33:d8:b0:4e:c5:be:e5:3f:7a:33:54:
6e:41:3a:8f:88:3c:fe:21:a5:38:31:fa:ba:c7:8f:45:c3:04:
52:ff:70:be:47:34:87:ee:27:fa:02:e5:9b:91:96:ab:7d:32:
10:31:62:13:b8:e9:ab:74:c4:73:7c:93:f9:05:85:e8:15:e4:
75:6d:c0:a6:6a:29:5a:b5:d7:60:30:00:c9:f6:14:0b:e9:6e:
be:52:8c:58:3c:6b:5d:17:61:74:f8:70:a7:95:9d:3b:e1:51:
9d:be:76:12:5a:b3:22:29:e5:97:b2:6d:ef:3f:32:4e:47:8a:
39:ac:71:dc:0c:29:d8:be:fa:4c:22:58:06:ad:7a:b0:ff:21:
aa:de:8a:f3:a1:de:6d:3d:3e:3e:26:d3:55:cf:dd:d2:46:72:
c3:78:99:20:87:73:ac:59:82:af:9c:45:a9:24:29:55:7a:85:
dd:84:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:03:30 2025 by rpki-client