This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier: IllAC2YbUHtg1qIm1wS60mPDwMle3VH+VWdgyJc+K/Q=
Subject key identifier: FE:59:40:EE:66:03:F2:FC:BE:FE:95:64:EF:7D:A6:70:89:8B:EF:43
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019B1916DBB11E65AD324E36C28FE3830183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number: 1170
Signing time: Sat 13 Dec 2025 19:01:26 +0000
Manifest this update: Sat 13 Dec 2025 19:01:26 +0000
Manifest next update: Sun 14 Dec 2025 19:01:26 +0000
Files and hashes: 1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=)
2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: ak82veBSkDMSwG8/vORCCS5RB4VVw5Gf2mst6SmQsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:19:16:db:b1:1e:65:ad:32:4e:36:c2:8f:e3:83:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Dec 13 19:01:26 2025 GMT
Not After : Dec 14 19:01:26 2025 GMT
Subject: CN=fe5940ee6603f2fcbefe9564ef7da670898bef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:6e:1d:47:95:f6:56:e5:17:2b:9a:8d:bb:
a3:e3:c8:58:f5:fd:23:7c:a6:cd:63:21:19:57:84:
83:d8:c5:c1:dd:01:49:8c:a0:9d:65:6c:24:02:86:
5d:b3:e1:41:86:03:c4:34:9a:cd:fa:6e:f3:df:49:
a3:10:f5:50:54:b6:af:18:24:90:9a:60:5a:6c:42:
42:80:8b:6d:05:4e:28:a7:44:1e:03:ac:68:a8:e7:
9a:3f:57:b7:86:30:3a:97:56:64:68:25:52:73:1f:
e5:e0:64:f3:e5:fb:f2:07:68:a8:c0:74:5b:a8:2a:
18:64:18:76:8c:c9:99:0c:73:45:d8:48:6b:b1:46:
59:61:c6:63:bd:69:15:9f:5a:f0:e5:bc:30:40:b8:
3d:59:91:0a:b9:38:73:a9:f4:0a:12:f6:27:c2:f0:
1e:0c:b9:8b:59:05:34:2a:9d:b7:8b:a4:36:00:ec:
8f:ab:e9:93:74:e6:54:86:6f:a6:55:ec:79:af:f6:
24:c1:38:0f:91:3e:c0:ae:d8:53:78:3b:d4:e7:f8:
c2:3f:60:bf:69:77:65:d9:bb:b3:8f:e7:be:16:18:
a8:b7:f0:b7:e4:63:c8:39:82:6d:e9:84:cd:a0:3b:
bd:fd:b2:94:50:65:61:3b:f4:62:6a:f8:ba:09:9f:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:40:EE:66:03:F2:FC:BE:FE:95:64:EF:7D:A6:70:89:8B:EF:43
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:31:de:9f:db:3e:8a:0f:6d:ce:45:ad:38:77:98:f5:0a:e0:
d2:62:29:79:c2:cd:18:9a:6e:fb:9f:dc:7a:8e:89:5f:71:59:
ab:e1:ee:21:cf:de:c9:65:80:7c:34:9a:6e:44:57:21:02:6a:
b1:94:63:e9:a6:cb:59:75:72:72:bd:67:06:00:e2:26:71:84:
98:c7:ea:db:e3:5b:cf:16:90:9f:75:6e:65:ce:79:6e:4a:49:
5d:ce:35:78:54:a6:93:cd:2f:58:34:7a:81:06:81:d4:e2:b2:
4e:8f:e8:52:46:a8:c9:35:7d:21:5e:78:87:a1:6a:31:78:0f:
89:7e:52:ba:a6:78:dd:f7:a1:0b:e9:74:e6:4a:f5:a4:3e:8e:
71:92:4f:b6:3d:13:ec:8d:1d:79:36:73:ca:b5:83:d3:0b:78:
02:38:49:1c:4e:17:a4:f3:2d:ee:c7:7f:16:6a:e3:09:56:a8:
ca:92:55:02:e0:95:90:74:72:61:69:c8:f5:51:c9:c0:8f:a0:
7a:bb:c0:3f:c3:5e:e9:dc:5b:77:bf:72:51:ae:cf:1d:00:8f:
b9:ae:d6:d3:09:17:f9:49:fe:4f:c5:67:6b:f3:fa:7b:79:3c:
d6:00:a7:3b:81:b1:92:76:83:01:84:b2:93:ca:95:a1:82:01:
67:72:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:28:55 2025 by rpki-client