This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier: NA6CF6Kc1q4LuLAqkS17J2tkGdEc4Ye+ncChrUnf4qA=
Subject key identifier: C9:B4:AC:13:AE:50:67:59:53:03:B6:28:A5:52:88:B8:A5:F7:7B:07
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019AEE9A36741F2168F98AC0509E7BDF22F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number: 16FF
Signing time: Fri 05 Dec 2025 13:01:15 +0000
Manifest this update: Fri 05 Dec 2025 13:01:15 +0000
Manifest next update: Sat 06 Dec 2025 13:01:15 +0000
Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=)
2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=)
3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=)
4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=)
5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=)
6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=)
7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=)
8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=)
9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=)
10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=)
11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=)
12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=)
13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=)
14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: cyEK1DpRSJL6nukVocSozTztcr1cDHBTKhpIQAkF3vU=)
15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=)
16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=)
17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ee:9a:36:74:1f:21:68:f9:8a:c0:50:9e:7b:df:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Dec 5 13:01:15 2025 GMT
Not After : Dec 6 13:01:15 2025 GMT
Subject: CN=c9b4ac13ae5067595303b628a55288b8a5f77b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:22:b6:e3:77:d2:49:dd:24:4d:34:bb:d5:
81:88:2e:c3:6a:51:19:78:41:a3:45:98:8e:6f:53:
0a:7e:39:40:72:29:17:5a:47:d4:0e:fb:d4:b6:8f:
f4:25:5f:60:41:9d:f7:de:09:a3:4e:93:76:8c:4a:
d2:6f:c1:30:ff:7c:57:ae:1c:2c:db:39:85:fe:a4:
6e:14:b0:81:11:45:bb:7e:c2:58:b3:f2:c3:bd:66:
fd:ae:3e:04:8c:1a:cf:2d:ff:83:19:a1:c4:36:51:
5e:c7:1e:1a:37:94:9b:f2:5a:32:36:40:27:fe:d5:
93:95:02:d1:eb:bf:80:07:4d:20:a2:d8:0c:48:98:
92:bd:96:90:79:47:e7:19:95:93:98:e0:bc:07:69:
05:d0:59:31:7d:8b:3d:98:1a:b0:34:f4:ba:69:25:
dc:41:17:88:92:53:4f:c6:73:7e:64:11:14:02:14:
e6:e9:ce:c5:30:80:5d:76:54:90:48:1d:12:28:62:
9a:0c:fe:fd:80:cc:8a:ad:79:46:a3:6d:bc:c3:62:
2b:13:46:19:fb:08:8e:97:11:29:ab:9e:c3:8b:44:
a6:40:98:3b:f6:60:b7:ca:6c:31:e9:52:35:71:3a:
1e:b3:bf:7b:1c:1a:27:9a:05:2c:85:69:54:2b:a3:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:AC:13:AE:50:67:59:53:03:B6:28:A5:52:88:B8:A5:F7:7B:07
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:9b:c0:87:06:0b:a2:05:63:46:31:fa:71:7f:6c:73:fa:
51:d5:4d:63:44:f5:01:9f:c2:e5:1b:76:3b:81:54:a4:1e:92:
9d:e7:13:26:72:60:af:15:2f:b3:60:ca:db:29:91:4e:81:98:
27:76:6d:6b:bd:1e:db:01:c1:79:d3:a1:3d:9d:bd:6b:25:57:
84:04:6b:5b:dc:bd:18:6d:6c:3d:38:79:68:27:02:c0:6d:55:
f3:56:a0:e4:84:ab:38:00:91:23:78:fd:b5:60:98:82:f8:1e:
96:9b:38:26:56:00:f5:2e:d3:b7:eb:48:31:c8:13:b2:f2:38:
99:c7:73:2f:5c:65:19:b7:c2:31:41:b0:ed:5f:57:c4:1b:a1:
c4:a4:f3:38:bf:dc:a7:aa:02:63:11:3d:1a:14:0b:1e:6c:e5:
49:bd:21:83:80:98:3c:b7:ac:ad:ee:b7:32:4b:ca:64:2f:64:
ca:2e:dd:87:f0:0f:7c:94:fa:f2:ea:ce:b1:f9:26:e0:90:39:
78:c3:3f:33:66:e3:b4:a9:6e:15:5d:c3:dd:f9:03:76:4e:85:
ff:12:f6:d9:0e:57:ca:b5:cb:af:11:e3:48:91:57:87:a6:21:
19:0b:72:0f:17:f0:c3:1c:09:7e:8f:43:c0:a9:3c:7e:de:4d:
20:ec:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:46:17 2025 by rpki-client