This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File: jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier: fmGkvgoQwMxAME+UpYt4TfNY3dOeFLbNN7ejAlrRpDs=
Subject key identifier: BE:AD:C2:A7:67:91:6C:DD:DD:5C:6C:B5:B9:3C:E8:F9:AD:1B:64:ED
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 019B1B3C0C20B49EF65B87132E999EF24D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number: 0852
Signing time: Sun 14 Dec 2025 05:01:18 +0000
Manifest this update: Sun 14 Dec 2025 05:01:18 +0000
Manifest next update: Mon 15 Dec 2025 05:01:18 +0000
Files and hashes: 1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=)
2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: XTK1W4a3Bd4x7wd4kvb00s7ZMILjJTHWy7lw/5d/324=)
4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:3c:0c:20:b4:9e:f6:5b:87:13:2e:99:9e:f2:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Dec 14 05:01:18 2025 GMT
Not After : Dec 15 05:01:18 2025 GMT
Subject: CN=beadc2a767916cdddd5c6cb5b93ce8f9ad1b64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:36:32:e7:40:61:c2:22:38:01:b5:69:c6:
45:b5:7b:46:50:03:42:2f:d2:fd:70:23:b9:e2:5d:
e7:b1:c4:05:7c:92:42:0f:2a:64:b9:09:54:d4:6b:
0b:ae:ae:87:fa:54:97:e8:30:52:f8:a4:ff:20:fe:
99:a8:b7:a8:a6:9a:97:29:8f:8c:97:2d:b7:4d:b0:
28:0f:4f:99:3d:e4:f2:c2:0c:cd:27:05:f6:c3:3c:
4f:40:aa:4b:1e:61:71:c8:e6:d8:54:98:db:c9:ef:
d9:8c:60:d3:e9:a6:f7:de:5f:af:f9:f7:44:89:53:
9d:b0:ac:52:f7:54:3c:e1:94:41:30:88:32:2d:62:
55:41:89:9a:8a:41:bc:0e:18:09:96:ae:fc:d0:9f:
50:1a:8c:27:27:7c:45:c2:5d:11:75:ca:62:2e:71:
18:4d:8b:93:c1:cb:71:3c:db:c8:cc:04:e1:f9:09:
ee:f2:45:6d:3f:b1:d7:5d:3c:ac:3b:fe:7a:90:94:
fd:75:7d:d1:8c:bb:08:4f:ab:30:12:90:c1:af:04:
40:78:90:bb:34:1c:ea:14:c6:97:cf:70:45:09:fc:
9b:69:ae:6f:19:f7:4a:1e:3c:02:e4:c2:8c:c3:dd:
98:9f:17:2f:2e:94:ed:43:1a:9c:8c:2e:fa:6c:f2:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:C2:A7:67:91:6C:DD:DD:5C:6C:B5:B9:3C:E8:F9:AD:1B:64:ED
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e0:4f:2c:2e:72:1b:a4:20:24:a0:87:7d:c3:04:93:a2:e0:
5c:c6:5e:ab:58:ff:83:e2:30:d3:01:0a:d3:d7:cd:83:af:45:
e7:69:83:e4:e9:4f:c7:5b:d5:b6:41:01:fa:e6:b2:57:16:82:
d7:63:3f:c9:6d:9c:f5:44:13:6c:76:63:c8:c0:da:07:80:92:
60:85:db:3e:71:8d:32:5e:a4:de:b1:83:f6:a2:70:a9:01:e8:
63:45:c0:59:6d:47:7f:ce:00:66:da:4a:a9:74:65:46:34:04:
bc:cf:82:80:ae:83:ff:e6:54:da:93:2d:fb:d0:08:d2:f0:d8:
04:de:d9:fc:44:76:8c:d4:25:05:99:25:c1:bc:fe:41:eb:a5:
b6:2d:1f:69:df:f2:61:f6:95:78:bd:df:63:17:7a:93:03:16:
f2:25:95:ef:c4:e7:5b:ea:9d:84:01:c0:05:bd:01:6f:ad:ac:
df:f9:29:5a:da:7d:b0:73:a7:f9:b3:05:60:de:55:3c:ac:09:
bb:ae:45:68:96:98:6e:76:90:be:60:2d:c3:21:cb:99:92:36:
71:6e:19:fc:9d:be:6e:4f:8d:0f:4f:18:08:13:4b:4f:02:cb:
0b:57:50:3b:45:21:ba:6a:12:72:c6:31:fe:b0:f0:63:96:b8:
16:9d:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:11:59 2025 by rpki-client