This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier: j6KbXys3XwG8QjARxlkvIkILf0fxkOvqIyfn/EGFZQo=
Subject key identifier: 2A:70:12:05:E9:AB:54:61:3C:05:89:42:F2:AE:B3:C7:8B:2A:DB:93
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019B194D407D21A5E7807DCEE1AC4F489C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number: 04D9
Signing time: Sat 13 Dec 2025 20:00:51 +0000
Manifest this update: Sat 13 Dec 2025 20:00:51 +0000
Manifest next update: Sun 14 Dec 2025 20:00:51 +0000
Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: Iy6RJtq5dfhqq4kBgX8QbRqBD3Hpd6SLK6lO0ivDF6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:19:4d:40:7d:21:a5:e7:80:7d:ce:e1:ac:4f:48:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Dec 13 20:00:51 2025 GMT
Not After : Dec 14 20:00:51 2025 GMT
Subject: CN=2a701205e9ab54613c058942f2aeb3c78b2adb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:75:5f:8f:79:0b:e5:cb:7e:d3:1f:9c:87:
6c:63:52:14:40:ff:95:5a:8c:4b:5c:f6:17:de:0c:
7d:ca:1d:c3:d6:35:02:34:ff:39:b6:94:4f:ae:8c:
d1:f1:3b:62:a3:b0:77:34:e1:a8:18:a0:ef:18:f0:
22:1d:1e:b0:81:02:e8:02:54:19:dd:98:bb:81:bd:
5f:8c:bc:fb:a1:24:69:5e:1f:31:f9:58:c1:fd:7c:
78:0c:e7:cb:ba:a2:54:c7:15:2b:38:47:c1:39:e7:
82:4a:5c:86:8b:ea:04:c6:36:8a:7e:0e:af:af:00:
44:bd:9e:6b:67:0e:1a:5b:fb:cf:32:e7:79:15:38:
83:7b:e4:f8:5b:c1:14:30:11:84:87:fc:9c:ad:33:
1a:34:65:31:24:ed:a0:da:61:d6:53:13:f7:b6:e2:
22:af:73:54:f7:51:63:f7:36:e8:0a:39:c5:cc:d7:
05:60:42:3b:72:82:04:1a:3f:19:47:33:51:3b:01:
8a:11:f1:96:5d:c0:81:70:2b:3d:93:63:e6:60:04:
7a:b7:13:5d:c7:55:7c:3c:bf:a8:6e:52:33:89:bb:
c6:62:ed:62:07:0d:bf:24:08:f8:30:04:1a:3a:a5:
30:c1:7c:b7:1d:bc:f9:4e:00:fb:02:d5:ec:e5:87:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:12:05:E9:AB:54:61:3C:05:89:42:F2:AE:B3:C7:8B:2A:DB:93
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:dc:58:4f:2d:91:26:71:4f:1f:3c:55:a5:5a:17:35:f9:bb:
8e:14:1d:0c:3c:b1:a6:f6:22:56:02:2a:64:fb:24:1b:05:a4:
0d:88:36:d1:bd:9c:02:eb:cc:45:c1:f9:a8:98:24:2b:69:a6:
96:8b:e0:dc:f6:83:4d:b4:58:76:e6:95:6a:8d:d7:b2:30:18:
6a:2f:b2:ae:0b:68:24:e9:b3:44:30:d5:03:e2:29:78:9f:32:
67:56:01:f4:00:37:cc:72:1e:d7:c8:89:b8:56:42:c8:85:ef:
a2:ad:40:a4:3a:b5:97:6d:78:c3:18:0a:ea:df:32:d9:ba:38:
f0:32:02:ec:b7:a8:68:f7:2c:76:58:6b:03:dc:5e:96:52:66:
b5:a0:8d:a0:35:5d:38:0a:89:a0:bb:9c:c3:45:65:02:41:f5:
c3:03:b9:79:d6:d6:d2:78:e8:7b:7c:c9:2f:72:c4:90:62:a6:
66:6c:de:0b:13:a9:ee:9f:6c:f8:b7:6b:4f:ce:f9:5c:72:96:
b7:f4:49:a4:b8:f3:2a:c1:43:df:25:0b:71:2e:89:be:07:07:
93:f9:59:84:ab:d8:63:84:28:6a:f1:4c:5d:5b:7a:86:df:e4:
9a:0d:44:16:e3:58:46:74:f2:df:4f:0c:cd:41:16:06:41:ec:
ae:7d:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:04:16 2025 by rpki-client