This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier: WonP/ViOkPr8J9/g9OWUh+pnyld7ckaNKX3VCrPjZZE=
Subject key identifier: 8A:1C:3D:98:21:83:BC:68:C4:A2:B2:55:19:80:6E:67:10:6C:79:FC
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019B3833233334CC0C751BAE4DD870198256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number: 14D2
Signing time: Fri 19 Dec 2025 20:00:33 +0000
Manifest this update: Fri 19 Dec 2025 20:00:33 +0000
Manifest next update: Sat 20 Dec 2025 20:00:33 +0000
Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=)
2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=)
3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: 87yckoAOuYHW1hCxB3VecMOflOpYCclfTumhLHltBJI=)
4: Lf6vcZM6E_1tP6o7doX949DnBIU.roa (hash: vbI3En+9WdVKNiswwjg34zuVUz/MYD/WjfUCcdABxHk=)
5: PP1_JMN7o3eQJTAVw4rJH9gu14o.roa (hash: G1K8GTtfUKhA972s1dfffX97stR9/k7Xacyj/AIs1tw=)
6: Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa (hash: phaHK5TmaT8HFSOfZpT3D2+yYeLJ3Irl7+kbC/pKRPc=)
7: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=)
8: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=)
9: enhLIeFFNjBBa_s5O_0YkpdyYhw.roa (hash: QCVHyVf9CKwmcfPHoXbT0EWpP5O5Sd2HzcxdrqVaxxg=)
10: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=)
11: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=)
12: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:33:23:33:34:cc:0c:75:1b:ae:4d:d8:70:19:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Dec 19 20:00:33 2025 GMT
Not After : Dec 20 20:00:33 2025 GMT
Subject: CN=8a1c3d982183bc68c4a2b25519806e67106c79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:08:ef:28:ac:d4:95:2e:da:55:ff:ec:27:
d3:8d:8e:26:6b:f7:53:ac:46:d4:0f:04:e1:99:70:
4c:57:78:57:21:93:bf:4d:70:58:0b:f8:18:ef:e4:
87:d3:a2:91:55:fc:08:f5:fb:91:35:77:e7:e3:1b:
b0:22:41:30:da:ad:3e:92:08:14:01:a5:de:51:a5:
91:87:aa:9f:3f:5a:05:99:6f:68:61:ad:6c:ec:60:
c5:97:b7:14:f9:af:62:60:e1:02:c8:73:e4:e4:e0:
44:a1:70:ce:97:ef:d4:c6:bc:60:36:df:6f:72:4d:
a3:29:61:85:bc:9e:d1:ea:58:c5:23:6c:df:86:e8:
e0:2e:89:43:38:49:e7:6d:1b:cd:76:f0:7f:37:f9:
3f:b0:44:23:13:de:a9:b0:5e:46:21:85:ba:4f:11:
39:f8:2c:78:54:6d:11:81:2b:14:42:ca:1b:d9:89:
b3:f1:31:de:68:46:b7:36:ca:27:f9:81:1d:42:17:
b2:44:94:0e:2b:94:b8:b8:a5:a6:97:29:4e:73:a3:
0c:fa:3b:f2:ce:ad:e0:bb:30:a6:b9:a6:37:ce:1e:
79:02:e7:13:aa:6a:cb:86:17:7b:86:79:d5:60:13:
d2:4f:f2:a3:51:9a:89:34:4f:21:2d:50:8b:25:aa:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:3D:98:21:83:BC:68:C4:A2:B2:55:19:80:6E:67:10:6C:79:FC
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:80:c4:1d:7f:f5:bf:48:8e:a9:bf:54:69:49:00:f5:45:
cb:48:8f:23:f7:42:90:0c:bd:cd:63:5c:74:25:51:08:0f:d8:
cc:78:bf:99:ea:04:a9:7d:55:65:7c:4e:aa:44:f3:79:1b:22:
5d:21:04:3c:43:f1:5c:9e:2c:7d:b1:14:dd:86:ae:01:fb:fa:
2a:68:5f:be:4f:1a:78:78:02:39:8d:77:bc:f5:8c:f4:1a:9c:
b5:05:85:71:14:b3:4d:3a:cf:07:b9:9b:a9:fa:5a:1b:dc:be:
ec:c9:35:0b:07:c0:a5:04:ad:ca:73:f5:fb:c1:7b:65:37:6a:
15:86:b6:83:7a:c5:e6:b6:4a:5d:97:ec:2d:54:f6:46:fd:b8:
2b:85:37:81:c3:88:4e:fc:e5:45:0a:be:05:31:23:84:60:3a:
b5:05:07:b0:22:54:df:0c:8e:40:0f:d2:cb:1a:28:a8:84:ab:
03:0f:37:4e:0f:68:a9:03:06:9e:03:da:e1:7e:82:41:6d:c1:
71:27:29:7d:2b:4b:49:33:46:aa:b9:4b:32:93:32:cf:52:f2:
c8:ae:f4:56:fa:0a:1b:36:23:8b:2b:ff:74:26:ae:f7:4b:ec:
10:46:bd:4a:10:47:4e:1b:7d:09:ac:30:d7:49:99:88:23:0f:
77:c1:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:34 2025 by rpki-client