This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier: 2hYM8ZcO3/tBDtZf7TjJmZj8ygDM550cYjKVFevsm3k=
Subject key identifier: 1D:07:58:1C:99:69:A2:D8:8F:D2:BF:B8:F5:EA:DA:AB:EE:99:57:50
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019B3456C1EC974C0EA92311EEC4347A9426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number: 14D0
Signing time: Fri 19 Dec 2025 02:00:59 +0000
Manifest this update: Fri 19 Dec 2025 02:00:59 +0000
Manifest next update: Sat 20 Dec 2025 02:00:59 +0000
Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=)
2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=)
3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: GgGE8HPQnqOyCv6m3EjiYQ4tOTECgE/HcfgSt6f7TX4=)
4: Lf6vcZM6E_1tP6o7doX949DnBIU.roa (hash: vbI3En+9WdVKNiswwjg34zuVUz/MYD/WjfUCcdABxHk=)
5: PP1_JMN7o3eQJTAVw4rJH9gu14o.roa (hash: G1K8GTtfUKhA972s1dfffX97stR9/k7Xacyj/AIs1tw=)
6: Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa (hash: phaHK5TmaT8HFSOfZpT3D2+yYeLJ3Irl7+kbC/pKRPc=)
7: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=)
8: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=)
9: enhLIeFFNjBBa_s5O_0YkpdyYhw.roa (hash: QCVHyVf9CKwmcfPHoXbT0EWpP5O5Sd2HzcxdrqVaxxg=)
10: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=)
11: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=)
12: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:56:c1:ec:97:4c:0e:a9:23:11:ee:c4:34:7a:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Dec 19 02:00:59 2025 GMT
Not After : Dec 20 02:00:59 2025 GMT
Subject: CN=1d07581c9969a2d88fd2bfb8f5eadaabee995750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:8a:56:5b:75:87:db:2b:39:81:6c:91:e3:
bf:12:7c:7e:fa:8e:d5:35:9c:fe:ae:ca:d7:5b:da:
3b:5f:10:9f:19:0b:73:41:19:27:e3:36:01:50:42:
d5:97:6c:67:00:22:ac:74:18:80:49:1b:3a:c2:3f:
b7:48:e2:59:d1:a5:1f:1e:17:8c:22:a5:ff:e6:a6:
ab:a7:58:32:21:6c:0a:62:e4:d2:e0:03:fc:ab:ed:
9c:1d:2b:da:93:65:e4:65:89:df:87:ed:98:91:7f:
35:4a:ba:52:c6:e1:a6:6d:ca:6d:69:b4:d3:24:7c:
5d:d8:4d:4b:e9:ef:fb:96:a9:50:62:64:9f:7b:a5:
45:f2:fd:02:ef:8e:65:9a:ec:db:1a:c4:94:4f:f9:
c6:e8:b8:a9:2b:3b:cc:bd:e0:6f:32:75:6c:16:b2:
d4:63:d4:bc:fe:71:10:3b:bb:cc:6b:d2:10:bc:76:
77:d6:88:38:3b:2f:5d:16:e7:7f:7c:52:87:ed:e3:
90:c4:3d:22:92:45:1a:08:a8:71:eb:42:87:5b:de:
fc:4c:f7:8d:28:2c:fa:7a:1c:00:84:80:e0:fa:af:
a2:10:ed:e8:52:1f:4e:6d:1c:60:4a:31:c6:03:26:
1e:35:90:34:2e:63:d6:be:a4:76:16:84:23:e9:8d:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:58:1C:99:69:A2:D8:8F:D2:BF:B8:F5:EA:DA:AB:EE:99:57:50
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:26:44:f2:ff:0f:b0:17:94:a2:45:12:e7:82:af:fb:3d:
71:65:54:88:7a:43:7c:c9:98:72:91:3f:d2:72:2f:1b:53:a2:
82:b5:d0:f6:3b:4e:bc:94:14:79:1f:ac:7a:ec:70:d9:d1:38:
8b:60:0c:db:60:1b:12:5e:c9:f7:30:bb:ef:6b:a7:10:3f:00:
72:1f:bd:c1:26:5d:ed:b3:e4:6f:19:05:89:26:e1:71:a3:e5:
76:99:06:47:92:c2:19:0f:b7:ad:60:fb:5b:6c:70:8e:5a:a6:
f2:29:d6:14:69:e6:09:d9:3d:e9:f0:ea:da:51:a5:fd:86:f1:
a5:0e:10:3e:83:b6:fa:5d:f3:d0:67:de:23:2a:76:5b:30:e7:
65:48:fd:45:dc:38:6f:dd:9b:e5:7d:0a:b4:ed:df:90:2e:5f:
ae:78:e7:e8:26:57:81:b5:30:77:78:8a:00:a0:8c:e1:87:86:
f0:0a:6a:8e:ef:80:44:99:75:c6:6c:72:7c:35:a8:fd:c8:0f:
5b:d6:33:3d:8f:2c:8c:c6:df:92:7b:60:15:52:7e:14:f3:bb:
ef:df:46:2d:14:a4:f3:87:cf:a0:f3:27:8a:c2:f6:c3:82:20:
06:31:8a:be:af:9e:31:46:09:d1:eb:8d:32:a3:74:ad:2a:9e:
97:15:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:49:32 2025 by rpki-client