This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: UOLFWgynZu6zduRB4uK95nb9uH/gwsTnYT3FQLKOaKI=
Subject key identifier: 76:49:0B:CA:6B:D0:41:A8:44:D7:1C:31:81:5F:9E:ED:50:FB:42:1A
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019B65B171AEC61C2803A04936AAEE3D7C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 17A0
Signing time: Sun 28 Dec 2025 16:01:26 +0000
Manifest this update: Sun 28 Dec 2025 16:01:26 +0000
Manifest next update: Mon 29 Dec 2025 16:01:26 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: 5xlGCGgtF/c7di2/lqTQlWzmO6MgRIfOtOAun/QTYRs=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:65:b1:71:ae:c6:1c:28:03:a0:49:36:aa:ee:3d:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Dec 28 16:01:26 2025 GMT
Not After : Dec 29 16:01:26 2025 GMT
Subject: CN=76490bca6bd041a844d71c31815f9eed50fb421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:21:7b:1a:dd:98:ba:71:0f:d9:22:11:55:
a9:8f:da:ba:40:82:b2:23:95:83:ec:1f:52:83:d0:
71:d9:79:2e:ed:cf:bf:5a:86:8a:e3:98:d4:f8:1a:
5b:58:14:23:d1:62:94:26:d4:75:a3:b5:19:9b:95:
d6:36:b2:73:5b:00:b0:6b:b9:05:01:9d:a6:66:e1:
4e:75:a3:b6:0b:b4:9e:f1:fc:ad:f9:46:20:08:cc:
8b:42:1f:fd:d5:a4:dd:ee:2b:5c:9a:0d:c1:70:6a:
33:36:71:db:83:1e:b3:f2:20:ee:82:3a:59:61:5a:
42:05:93:56:39:da:f4:4e:e6:d4:5c:0e:cf:04:01:
36:34:f0:73:87:e3:b2:ee:9b:9f:03:3c:04:58:f3:
05:b8:5d:ec:8d:e1:f7:1e:c0:9e:15:a1:b6:37:e2:
46:5b:48:a1:a9:15:18:56:fc:f4:4b:45:8e:d3:6a:
9c:a8:e0:e3:c1:e9:f8:b3:0e:ff:6b:82:fd:4e:3f:
c6:f9:1f:19:02:5e:4f:47:7b:57:52:55:ec:bb:3e:
b8:74:56:27:60:a0:0f:d9:b9:fb:6e:a3:69:33:53:
55:2e:7d:82:16:41:d8:13:01:f5:05:ef:e9:03:c9:
7b:cc:18:9b:f9:21:a9:fb:71:5e:95:c2:a6:53:ca:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:0B:CA:6B:D0:41:A8:44:D7:1C:31:81:5F:9E:ED:50:FB:42:1A
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:64:48:f3:f1:d1:db:6c:ca:e9:bb:1b:26:c7:ee:63:2d:
78:e8:64:74:93:e0:0e:2f:3c:86:5d:cc:b4:cd:2e:5b:e8:13:
c8:bc:7f:d4:07:8d:b6:fd:ec:96:34:eb:fe:d5:0b:4f:d0:dc:
c8:43:a4:98:ba:e2:94:af:1d:03:c2:56:24:80:2c:ba:10:f2:
ba:0e:8e:22:04:4c:6b:56:a0:6a:16:98:d3:04:f6:a0:fe:79:
d6:87:2a:48:e3:77:74:d3:48:ef:9c:06:08:34:fc:dc:85:71:
62:29:f8:30:a3:ee:7c:4a:5b:1a:90:cb:9d:d6:56:7b:2c:ec:
18:b1:06:51:8a:12:5b:ac:99:1f:58:3d:75:63:04:cc:07:99:
76:db:31:2d:e4:41:fa:37:b1:c4:c7:cc:b0:86:dd:df:71:d9:
bf:f1:17:3d:cd:28:de:cb:ad:48:62:8b:97:a9:9c:b5:f2:b7:
81:40:c2:7d:3e:68:89:3e:30:bf:bc:03:31:3f:28:2a:b1:fa:
1d:1a:e7:f5:b6:95:43:49:51:9c:ff:7a:ac:9a:9c:68:74:3f:
5b:07:38:9d:fc:e0:61:c7:5a:ca:1c:b9:08:25:32:f4:aa:da:
9b:6e:4a:e6:af:a9:8a:52:6f:86:f1:c6:ba:12:e8:26:ba:41:
de:e0:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:27:49 2025 by rpki-client