This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: UJ+nXSVAu6N6LPvucMtAgHR1JQiBzyTH3O7yMGeRv2s=
Subject key identifier: 42:08:CD:E9:8F:67:FF:BD:8B:AE:E0:CD:ED:79:28:55:9C:FD:A0:F1
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 019B0F373F219DF6EEC498062F69446E4736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 0ED5
Signing time: Thu 11 Dec 2025 21:00:37 +0000
Manifest this update: Thu 11 Dec 2025 21:00:37 +0000
Manifest next update: Fri 12 Dec 2025 21:00:37 +0000
Files and hashes: 1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: Cj17nlNYAdwsn8KOplTMcU8OKFzoY8zJdEmwWQUIF94=)
3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:37:3f:21:9d:f6:ee:c4:98:06:2f:69:44:6e:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Dec 11 21:00:37 2025 GMT
Not After : Dec 12 21:00:37 2025 GMT
Subject: CN=4208cde98f67ffbd8baee0cded7928559cfda0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:02:cc:b9:ca:09:98:cb:98:03:36:66:94:
8f:06:5e:de:7e:c3:ba:b4:eb:3a:11:c2:d3:87:0a:
6d:41:3b:46:37:fe:f5:4f:b8:b5:de:a0:37:8f:73:
9f:6a:a8:4d:72:06:7e:d3:0f:85:a0:14:7b:e2:16:
80:f1:f4:cc:b8:91:d8:be:1a:32:e9:ed:db:27:fe:
35:0c:54:8d:19:b5:9a:46:7d:f3:2b:93:dd:d7:a9:
cc:b1:53:ce:16:df:2f:35:c0:cc:89:be:88:6a:9b:
db:ad:08:1f:15:d2:0d:43:4c:06:5c:c7:57:4e:92:
98:d0:28:76:90:86:87:42:93:b0:e1:e6:ac:b5:2d:
3d:60:d1:2a:e6:17:3b:99:b2:00:6a:cb:c8:77:7b:
38:9e:c2:43:55:fa:ce:af:08:46:96:8a:53:40:c5:
90:2d:11:e3:68:a8:82:67:b8:33:a9:ee:c0:ab:98:
8e:69:cc:a5:d7:74:97:78:0e:8b:44:a8:57:80:1c:
c5:69:14:4f:3b:df:2f:cf:e5:bb:0b:b2:e8:9c:e1:
11:57:eb:04:46:a9:b1:7f:50:d0:5f:c0:78:c1:e7:
7e:4f:59:68:ad:3b:22:49:c6:82:ea:43:d0:de:ee:
a9:30:be:49:86:80:77:5a:6a:96:c6:af:9d:41:c4:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:CD:E9:8F:67:FF:BD:8B:AE:E0:CD:ED:79:28:55:9C:FD:A0:F1
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ec:56:07:1a:72:44:8b:ba:30:9a:00:a8:94:f5:ba:5a:59:
5f:b5:d9:80:15:6b:e7:95:7a:db:b6:c7:3a:60:47:5c:5a:17:
6c:0e:25:36:c3:36:d6:81:87:34:4f:81:14:33:24:74:e9:ff:
74:e6:4f:46:21:56:1a:7b:3f:1b:4b:ea:93:92:3b:fe:b6:fe:
98:7a:73:31:44:6a:59:e8:98:45:1f:e2:e7:a3:28:13:51:16:
9b:ed:f3:1d:dd:67:3f:82:96:34:df:e2:cf:72:80:82:5c:cd:
0a:86:ec:32:57:6c:b7:4f:d6:c0:45:02:a5:c0:a2:4e:be:4a:
75:40:76:57:16:cf:bb:72:49:c7:f6:de:c1:fe:a9:42:91:a0:
ea:f7:71:47:09:95:8f:3b:41:af:67:e5:cb:a3:32:2d:0b:89:
c3:28:8d:f3:d8:66:72:38:58:44:fa:ac:95:63:51:ff:15:04:
68:57:58:ff:e9:3a:2f:86:15:b4:76:fa:72:70:84:08:3b:52:
00:76:5a:c6:63:54:14:51:c5:a8:40:f6:bd:be:0a:8b:d0:86:
eb:98:74:f1:15:b4:e7:a5:7d:a0:1e:5f:e4:eb:bf:55:88:30:
51:44:0c:e4:d1:45:e0:76:e4:fa:67:81:1d:6b:6f:8c:cf:7b:
45:3d:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:34:33 2025 by rpki-client