This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
File: jWMLidCyLy69noTeg1EclOOHTws.mft (raw, json)
Hash identifier: nzduuxlkAaGAzzskt0T3ZHWhTjpgYRv6n4wGis2nAvU=
Subject key identifier: 15:F3:3C:07:8C:A4:2F:F4:A8:47:3F:FC:21:7C:A7:72:1E:C2:22:07
Authority key identifier: 8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
Certificate issuer: /CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Certificate serial: 019B1F862160E7A4DBE565D0F8750A9E8367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
Manifest number: 022E
Signing time: Mon 15 Dec 2025 01:00:42 +0000
Manifest this update: Mon 15 Dec 2025 01:00:42 +0000
Manifest next update: Tue 16 Dec 2025 01:00:42 +0000
Files and hashes: 1: PRnE6qJLXu--qHqmEaaawZPaMRw.roa (hash: JZBMrYwyQ5gAIyYxMGZPjRANfDCXB1r4XoWIqBWtSzs=)
2: jWMLidCyLy69noTeg1EclOOHTws.crl (hash: MEIsJMjJu+j3eX3hjci7WMIlVPiVd24w7tXlSJAOs4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1f:86:21:60:e7:a4:db:e5:65:d0:f8:75:0a:9e:83:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Validity
Not Before: Dec 15 01:00:42 2025 GMT
Not After : Dec 16 01:00:42 2025 GMT
Subject: CN=15f33c078ca42ff4a8473ffc217ca7721ec22207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:85:75:ac:8b:60:cd:a6:cd:28:26:41:0c:
16:4a:2e:71:6b:25:70:1e:e8:4d:dd:1a:ef:50:01:
57:04:19:79:56:53:48:2a:b9:08:d6:5f:b6:f2:d7:
b2:82:94:53:82:36:03:0d:95:62:15:7a:e7:9b:29:
ec:fc:b8:53:c9:fd:84:3b:49:83:bc:24:09:8e:c1:
3e:cc:b0:2b:13:75:17:2c:42:ef:61:24:65:9a:8a:
cf:7d:6c:a4:32:ca:73:ae:fb:e9:88:5b:d6:92:fc:
c0:7f:77:a8:61:1d:6d:d1:5d:9b:3e:68:49:a1:33:
0c:c9:03:81:17:01:16:dc:56:01:fe:d8:e8:2e:87:
8f:18:fe:c7:2c:d8:a6:b1:79:fe:9f:e5:8d:88:b3:
03:1a:59:2d:e1:90:3c:45:04:05:1e:3d:c0:9e:4a:
cc:b3:e8:83:13:1b:ef:5c:b8:58:49:ae:9f:09:27:
dd:1a:2c:ab:da:86:5d:93:9b:b6:23:1a:72:2a:8d:
f4:b7:01:e6:39:fa:ea:f0:80:67:31:4d:c5:0d:8e:
fc:cb:c6:1a:f9:91:79:0c:e7:87:27:74:f2:68:8e:
41:89:b9:b0:1c:91:7a:dc:0c:32:57:20:5f:ea:96:
70:42:98:87:b8:92:58:fa:07:36:0e:31:e9:0e:ac:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:3C:07:8C:A4:2F:F4:A8:47:3F:FC:21:7C:A7:72:1E:C2:22:07
X509v3 Authority Key Identifier:
keyid:8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:d7:1e:16:57:33:6e:09:54:eb:ca:92:e4:9a:07:6c:92:
3e:5f:56:7e:58:b4:1f:b4:57:4d:6e:31:43:ef:ba:e4:c2:ed:
23:a6:c8:47:fc:79:f2:85:39:d1:07:bc:d0:70:a6:e3:53:41:
7b:a8:7c:5a:c2:7a:cc:55:3a:e3:b4:5f:c6:5f:9c:91:11:d5:
20:cc:6d:3d:06:a3:63:cb:3a:4b:29:4b:12:5d:0d:44:d1:ca:
1e:49:fa:f9:2f:36:a5:08:e2:a7:98:65:d5:ce:ab:64:07:de:
b9:33:bd:e9:6d:e0:c8:39:b0:f1:d5:e7:fc:f6:7f:50:77:3d:
8a:8e:9b:48:6e:a3:01:a2:4c:8a:32:68:57:8c:50:e5:58:a1:
d5:a2:f9:24:90:4a:74:23:3c:49:85:64:79:c3:75:74:74:60:
af:f7:ed:d1:9c:ce:68:0e:7e:95:5b:ca:56:e2:95:0d:fe:69:
64:10:aa:00:f7:4a:c6:52:30:59:e9:c3:90:1d:fb:1d:27:82:
cf:35:90:f0:90:64:b9:73:8f:19:b0:8b:2a:f5:5d:89:3f:98:
30:35:5b:86:8d:2b:78:8d:a5:83:46:7d:73:4a:cd:88:f0:5c:
24:0b:86:3a:d4:70:af:ec:55:14:87:e7:af:0e:f3:db:fd:b3:
3d:ef:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 05:00:12 2025 by rpki-client