This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: g0etPcYnBVrGdzHtOlfYv00NEl6x6zwK4AQHIx87QL8=
Subject key identifier: AD:C8:7C:95:3D:3C:E7:61:BD:15:25:35:FB:13:1B:47:4D:14:96:B7
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019B047D906C6DE6A279AF52D8300896B95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 13E3
Signing time: Tue 09 Dec 2025 19:01:36 +0000
Manifest this update: Tue 09 Dec 2025 19:01:36 +0000
Manifest next update: Wed 10 Dec 2025 19:01:36 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: KMxh1mIeE8Ww7hYw4TZRhravIaVnqx4UyporpviHVNA=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 16:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:04:7d:90:6c:6d:e6:a2:79:af:52:d8:30:08:96:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Dec 9 19:01:36 2025 GMT
Not After : Dec 10 19:01:36 2025 GMT
Subject: CN=adc87c953d3ce761bd152535fb131b474d1496b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:72:53:ef:aa:6e:91:10:23:4d:86:c6:59:
f8:d4:89:0c:61:b4:21:7f:b7:a2:db:41:b9:e9:5e:
e6:46:73:2d:55:96:44:97:08:c9:90:93:01:10:d9:
0f:95:37:73:63:ca:9e:f5:39:50:45:8e:01:90:c0:
d3:79:98:c2:9e:0e:a8:59:5b:11:3f:1e:42:02:0a:
43:39:90:b9:d2:b4:d0:82:6d:ef:79:31:88:30:b3:
19:6b:c3:1d:5c:85:f2:94:2b:df:22:d5:53:88:d2:
4c:ed:00:08:35:96:84:ed:f9:18:5c:4b:eb:8e:e2:
d4:8b:62:1f:39:29:98:02:ea:c9:2f:2f:4b:0c:bb:
e9:a0:9a:c6:5c:8b:0e:5a:de:c6:fc:30:b6:8e:90:
f2:fc:6b:58:8b:cc:54:5f:b8:a3:2e:42:db:90:46:
a0:c7:95:03:d8:4c:2e:5b:c7:6e:5e:31:6b:fd:74:
7e:32:2e:af:e8:75:83:60:c4:95:fc:f7:6e:6d:ee:
98:51:d3:26:93:20:ef:ef:e7:cf:20:b0:8d:bf:51:
a4:1b:83:c2:eb:1b:ff:42:b7:bf:b1:20:af:0e:ff:
09:c2:88:af:4c:65:cf:5c:e0:3d:2d:40:28:1b:b0:
e6:ca:a9:94:fa:0b:ed:61:c7:27:85:23:61:cd:51:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:7C:95:3D:3C:E7:61:BD:15:25:35:FB:13:1B:47:4D:14:96:B7
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:4d:af:1f:f1:05:c0:3a:3b:8b:e5:df:2e:d4:0d:54:9e:
8d:94:08:5f:89:07:60:96:da:1e:c3:dc:5c:b4:c2:30:da:9a:
b3:d9:96:2f:42:8e:c5:06:79:ae:fa:52:32:6c:97:78:f7:31:
13:a6:96:dc:a5:6c:4f:4c:37:96:1b:ea:00:92:6a:eb:32:cc:
4c:47:b9:86:f7:5f:13:a2:a2:99:cb:88:eb:b6:2f:d8:ee:35:
45:d3:8b:c5:79:89:48:2d:e5:c5:d7:6f:39:5b:09:b6:95:9b:
6d:06:de:73:b5:03:2b:8c:ad:a0:18:5b:a6:6d:a1:19:3a:13:
4d:72:5f:4b:3f:62:42:80:c0:f4:72:11:09:d6:1f:34:c4:04:
ea:aa:87:31:e1:62:d3:b2:ad:21:71:5d:5f:59:6a:90:88:aa:
80:a4:cb:0d:d2:d1:04:d2:c1:47:11:17:a3:c0:f2:ca:c1:81:
6d:73:42:51:b9:5e:ac:49:b6:32:7a:da:82:e5:0f:11:13:ae:
a9:f6:3b:bc:e3:c4:ac:22:c3:c7:1f:67:db:de:5d:a2:85:d2:
62:7f:e8:83:13:44:c8:32:a9:1b:9a:af:ca:55:b3:6b:48:99:
28:54:fb:23:14:a3:87:f7:ef:a1:bc:1b:da:5e:2a:c3:c5:e1:
86:88:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 02:35:31 2025 by rpki-client