This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier: HROOHYeTo6+XixjmyAjKmTkymO4rNdmUnGefwB9m528=
Subject key identifier: 4E:F0:D4:03:17:09:D4:4E:90:B5:D0:95:40:C3:4A:BE:B4:6D:24:74
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019B1CBC04D69693A0ABD4B37A696ECE5842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number: 142E
Signing time: Sun 14 Dec 2025 12:00:42 +0000
Manifest this update: Sun 14 Dec 2025 12:00:42 +0000
Manifest next update: Mon 15 Dec 2025 12:00:42 +0000
Files and hashes: 1: 3AQkVEHFaMYSacwuB_BxozwNGjQ.roa (hash: jeS6MVFt6boj/NgjPcW0szXMbQo13HV5/k7qMzzrnUk=)
2: 8yaYj48CMeDTrtxfRpEdN6HgFIQ.roa (hash: 4avp+UIZj25/RQWft/nWjrgeixj3LhpnKvccOgiHbbs=)
3: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=)
4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: asSXZiclXDEqi6oD7rNm8/H5Jq2qT/jvPAq4Ftkhl5E=)
5: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=)
6: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=)
7: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=)
8: gcc-FdNN6vti97PWBSoHsMNsu34.roa (hash: CtKuHOA67XtrsqR+tr65cCG6nxTHyUOq4FA3/7KVSO4=)
9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=)
10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1c:bc:04:d6:96:93:a0:ab:d4:b3:7a:69:6e:ce:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Dec 14 12:00:42 2025 GMT
Not After : Dec 15 12:00:42 2025 GMT
Subject: CN=4ef0d4031709d44e90b5d09540c34abeb46d2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:dc:c0:53:18:4b:c8:3b:dd:74:2b:6d:31:
7d:b3:db:5b:1e:f4:a9:d0:ad:db:fb:7c:53:e0:9c:
93:5a:ea:0c:f7:03:cd:47:b4:92:19:17:d1:34:64:
be:8e:d4:33:f5:42:82:3d:7f:95:b9:d9:55:7d:f2:
8a:65:88:d3:64:5d:f2:55:d5:28:86:7a:f2:f2:03:
b4:49:a7:fb:ee:03:d4:7c:86:e7:0c:68:98:f4:f3:
b7:2b:b8:d9:f6:d0:dd:a0:70:d2:20:4b:83:72:f2:
ff:37:f1:bf:e5:ce:12:ec:c0:9c:87:07:a8:c1:6d:
5d:cf:c4:8f:c4:a3:e1:38:bf:0f:64:6e:4f:8f:a8:
54:37:2a:5c:2e:10:f0:95:c8:cd:89:f9:89:e5:7f:
21:b0:a6:14:14:d3:e9:8b:6c:b3:b7:bf:33:c1:e4:
e0:12:03:67:ce:97:52:8f:be:a4:17:42:9c:99:17:
08:b1:96:c3:fc:a0:35:a3:ad:8b:85:e4:43:af:a3:
f1:c4:85:9b:6f:4d:9d:1c:0a:49:72:5c:41:4f:d2:
87:fb:12:8c:c9:e6:28:a2:68:33:77:fa:15:23:6b:
ea:e3:be:78:5c:7e:f1:66:70:62:c7:e8:b9:40:ea:
18:77:e2:9b:ea:5f:9f:ff:f8:d7:5b:b7:1e:60:b2:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:D4:03:17:09:D4:4E:90:B5:D0:95:40:C3:4A:BE:B4:6D:24:74
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4a:55:09:90:0b:28:f5:d3:36:14:f4:67:05:ff:fe:fc:cb:
00:c0:f4:db:b9:a3:bd:58:e6:f8:be:1e:d0:52:7f:a7:91:5a:
3f:61:28:3e:2f:cc:4f:94:b4:a6:0a:8f:88:a8:eb:0b:1c:1b:
a9:5c:03:44:d2:f0:d8:53:69:8f:be:70:f0:23:ce:e2:f2:ae:
f4:62:b2:f6:5b:72:bf:bb:55:86:3f:f2:78:76:03:cb:58:49:
09:91:45:08:09:25:85:3d:7c:d4:73:4b:48:14:d2:8b:35:2c:
8e:d8:59:68:e8:dc:c5:46:c6:09:47:6b:92:b0:22:a4:34:e8:
3f:ee:9a:49:fe:83:9f:ee:e2:bb:f7:5b:b0:a2:79:a9:da:f7:
c4:cc:4f:4f:a5:34:1a:cc:1f:fd:70:90:80:2b:7d:5d:f8:66:
5f:e2:24:a5:b9:e4:ce:3a:1a:ad:6c:8c:01:39:68:2b:ab:e4:
85:64:7c:13:1d:60:24:fa:32:6a:68:06:73:1b:f8:b8:4c:ba:
0d:bf:70:b0:6b:e6:b8:9f:a3:be:67:42:50:e1:58:56:69:70:
0c:a0:67:ae:02:87:3c:61:be:99:f7:d3:75:26:6c:ee:d1:b9:
f0:57:9f:fc:b6:f5:87:eb:3f:66:cb:69:08:ae:b5:88:0b:b1:
13:40:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:15:39 2025 by rpki-client