This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: nAgVeCVT+g8Mhm5RQjUNEmbtVd7ZFYID2IpQg0pun3s=
Subject key identifier: 22:A0:EF:E5:EE:B5:BD:F3:18:81:BB:9B:30:93:ED:C7:37:DF:4D:49
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019B58D196D647FF4682BE8A1D3CDC745E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 12BE
Signing time: Fri 26 Dec 2025 04:01:29 +0000
Manifest this update: Fri 26 Dec 2025 04:01:29 +0000
Manifest next update: Sat 27 Dec 2025 04:01:29 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: Ec+l5uLFP29njhP8BaOGhwFiiFvvUIZ2AtMofH19eiE=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:58:d1:96:d6:47:ff:46:82:be:8a:1d:3c:dc:74:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Dec 26 04:01:29 2025 GMT
Not After : Dec 27 04:01:29 2025 GMT
Subject: CN=22a0efe5eeb5bdf31881bb9b3093edc737df4d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:4c:1e:e8:58:51:95:89:91:76:14:96:bd:
fe:bb:65:2d:17:ae:7c:fc:fc:32:4d:23:bd:8a:df:
0c:e6:42:8d:59:33:d5:36:e6:5a:97:e4:7d:0c:89:
27:41:58:2b:0e:05:28:a5:eb:f0:e7:1f:05:93:8d:
5a:9b:dd:43:91:4d:da:8b:36:24:0c:1a:d3:25:55:
8a:27:81:2f:1d:5f:6b:a0:4a:7e:30:3b:78:70:72:
7d:9c:f9:bf:91:7e:ae:a5:55:a8:20:41:72:20:41:
fa:09:50:de:c7:b0:7e:96:0b:5c:50:0c:69:7b:3f:
3a:cb:1c:a6:ab:9b:97:5f:c6:b6:32:95:66:82:04:
18:68:9b:a2:61:30:ca:c0:05:74:dc:de:0c:b6:5f:
a0:21:3d:16:ec:48:c7:aa:05:75:4c:fa:1d:16:4c:
c1:25:ed:97:5d:8d:74:59:93:93:f1:21:fa:58:1b:
a9:9b:3d:c0:e6:39:a6:76:e3:0a:b7:cb:72:cb:73:
12:09:2f:3d:18:41:cb:f9:59:d1:79:24:4f:95:a2:
7b:96:78:80:d8:34:05:b2:37:e4:aa:e7:c8:bc:50:
01:16:fd:74:c0:c4:28:19:a4:78:42:08:ab:eb:ce:
1f:19:4c:2b:78:7b:3c:04:95:a2:ec:64:be:03:20:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:EF:E5:EE:B5:BD:F3:18:81:BB:9B:30:93:ED:C7:37:DF:4D:49
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e9:13:8a:fd:bf:80:dd:af:39:76:43:6b:7f:bf:96:5e:66:
26:9f:dd:a0:fc:20:83:bc:d2:fc:77:1c:f4:36:c0:3d:4b:9f:
55:a3:6c:b0:66:ac:4d:88:9a:59:8d:78:bb:b6:f2:ae:27:63:
4b:31:4c:da:49:ca:7a:1e:a6:21:78:6b:3c:c9:b9:11:7f:a4:
f3:ad:c6:8b:20:fc:92:45:c5:4a:ad:f2:ea:46:0c:67:01:1d:
8c:0d:23:5a:42:a8:8f:ea:39:12:5e:f9:18:2c:f6:f4:93:ac:
8a:82:24:5e:5b:fc:f1:3f:0d:0a:e0:12:61:62:f4:75:3d:02:
f3:8b:f8:f2:79:cf:86:0d:e4:a0:c6:5b:c5:e9:43:a6:5c:fa:
68:1d:87:1b:00:71:54:8e:79:60:31:1f:cf:3c:19:15:ac:c9:
5a:6d:5d:cd:6d:8e:b8:a7:aa:2a:31:88:fb:44:26:a5:b4:12:
8b:36:c9:f4:c6:cb:77:b0:b9:7f:87:16:67:48:f9:49:3a:76:
80:f4:86:57:1c:6e:be:43:c6:d4:ee:5b:e8:ea:e9:32:24:3b:
b9:23:e3:fd:aa:6b:07:5b:9f:16:66:05:20:16:f7:f3:1b:db:
50:04:af:c8:8d:12:ea:1b:09:0c:31:c2:e4:51:e3:b4:b9:a4:
67:ec:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:02 2025 by rpki-client