This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: aW+bMZcXHlB0sdQmYfrRo457W0CXg/5j0R5KtWMX14c=
Subject key identifier: 7E:1E:08:5E:11:FB:88:9D:0D:BC:36:66:EB:C5:D3:47:F4:7A:51:B8
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 019B1014B9119C2AB5EF85F174C4F0A9EF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 124B
Signing time: Fri 12 Dec 2025 01:02:32 +0000
Manifest this update: Fri 12 Dec 2025 01:02:32 +0000
Manifest next update: Sat 13 Dec 2025 01:02:32 +0000
Files and hashes: 1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: pzpvI0TC3SlgzlX/Co3Lw1KnNPfNpapnikOlRn1b3mE=)
4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:14:b9:11:9c:2a:b5:ef:85:f1:74:c4:f0:a9:ef:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Dec 12 01:02:32 2025 GMT
Not After : Dec 13 01:02:32 2025 GMT
Subject: CN=7e1e085e11fb889d0dbc3666ebc5d347f47a51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:19:cd:92:18:af:52:12:d0:14:05:94:46:
a3:cc:eb:46:51:bc:6b:6f:e0:87:25:57:15:01:80:
f5:4a:9a:d9:d7:02:d7:79:22:57:60:97:23:99:9f:
1b:4d:98:b6:0f:aa:b7:9e:7a:79:bd:b0:62:cc:1d:
96:83:0b:8b:2a:2e:41:25:5f:13:4d:ff:89:4e:76:
f1:ed:e6:d0:1e:c0:43:49:83:43:87:50:43:7c:79:
c3:af:26:97:82:40:3f:95:30:fb:55:93:13:54:5f:
e3:5f:7a:09:ad:29:9e:0f:a5:ec:29:dc:b5:10:b8:
62:45:ec:60:f3:bf:a0:a0:67:49:b0:6e:f7:08:cb:
0a:34:eb:94:17:2d:87:e3:b2:0a:cb:91:b6:5f:11:
6e:c0:be:68:08:e6:61:c5:ba:c7:af:b0:4c:24:6f:
c3:10:c0:53:c9:5f:c4:ce:31:59:63:fa:7d:d2:3e:
ad:32:fd:a1:99:b6:55:0a:40:6a:3a:af:91:68:0f:
26:b1:93:b1:13:fb:1e:a7:2d:3f:43:d4:1c:91:a8:
b8:6e:37:2d:cf:34:cd:ae:38:16:17:03:a9:db:7a:
74:67:34:12:9a:9a:12:69:5f:f2:f5:f4:80:b4:85:
45:bf:5f:ef:73:ac:09:dd:37:94:7a:ce:72:b9:b8:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:08:5E:11:FB:88:9D:0D:BC:36:66:EB:C5:D3:47:F4:7A:51:B8
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f2:4e:99:50:06:79:98:da:0c:b7:ab:84:df:34:bf:ad:e9:
3e:3c:24:37:b5:07:aa:65:88:ff:9d:10:a4:16:f1:84:c2:21:
91:a9:f4:ce:c3:ae:4f:15:bd:2d:da:84:d5:4f:c8:8a:24:2d:
d0:de:cb:f8:3b:23:f5:fe:7f:c2:0f:95:3e:05:26:23:5c:50:
62:3a:5a:0b:e1:7b:cc:8b:72:c9:a6:9f:c0:40:8a:1e:ac:5e:
f7:30:f7:dd:e7:f4:6f:e7:b7:b9:51:4d:43:0e:56:91:63:bc:
7e:0d:28:cc:13:3b:ef:52:0b:7d:96:28:ef:c9:2e:a0:f7:60:
02:c2:3c:04:6d:e1:40:58:4e:9f:81:15:4c:15:ba:33:63:32:
fd:4c:1d:b3:fc:49:49:7d:2d:fc:65:1e:7a:8c:89:e9:5f:70:
8b:ac:04:7b:d6:5f:ca:d4:37:13:2d:3f:6b:84:67:33:c9:3e:
fe:d2:c4:0b:2d:c0:d1:b4:02:ac:13:ea:9f:8f:7e:c3:1c:fd:
d1:30:77:6f:20:6f:87:a6:25:d0:83:82:46:d0:0d:b2:51:ef:
40:3e:9e:79:20:5e:da:79:ab:9b:cb:56:e5:e6:97:69:53:1f:
6b:a4:e2:4e:77:e8:54:21:48:9c:6c:48:84:1e:0c:01:17:ca:
a2:c7:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:39:26 2025 by rpki-client