This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json) Hash identifier: v/Yo233N8nGatx07GmXbUNMHPsfbUU7wJeeOpGtpyOU= Subject key identifier: A4:1E:DC:74:84:B8:84:EF:B5:53:E2:12:F7:B8:71:6C:D5:54:A4:39 Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Certificate serial: 019AF3F794ED77707E4E872814A5A96F8531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft Manifest number: 07C5 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=) 2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: gOIjIkJCD0bT50HS9LnZCycYEdTaoHh8x81ZZXxDtqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:94:ed:77:70:7e:4e:87:28:14:a5:a9:6f:85:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=a41edc7484b884efb553e212f7b8716cd554a439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:bb:ed:47:8c:fa:de:2b:29:8e:5d:32:29: 8e:ae:23:fb:3e:d2:ae:99:c4:82:3f:d0:55:3e:1a: cb:c3:fd:01:e9:ad:e2:de:6c:34:86:c6:c3:68:2d: e8:12:cc:6e:4d:c3:0c:31:6f:80:62:66:c6:74:09: 8f:e4:66:9e:87:e0:55:ae:07:74:2d:a7:57:b1:db: 49:e8:44:35:a5:6b:d5:cc:96:13:3e:06:1f:74:ff: be:3c:d7:27:74:43:13:96:fa:1a:4c:0f:38:76:78: 38:b5:1c:09:93:18:1f:c9:ce:f3:03:1b:22:9b:9f: cf:48:27:88:d7:52:c7:f2:fa:de:8c:75:2e:90:c8: 73:26:2d:1d:e1:94:5a:2d:55:fc:23:8a:a8:b3:80: cf:86:df:61:94:49:27:b6:12:d2:c8:78:ad:77:7e: e2:7c:95:17:1d:5d:53:e7:1d:70:df:f6:82:3b:2d: cd:6e:f9:2f:98:67:4f:c3:6a:c5:7b:a4:99:51:bc: e3:57:99:fc:01:79:55:a0:40:5a:de:7d:60:c3:7c: 1b:f1:d7:df:0b:ea:26:56:02:61:8a:77:cf:d2:e0: 7a:dc:c9:06:0d:59:8a:1e:10:cd:91:af:71:18:17: ce:e1:50:27:62:9e:60:d0:83:7e:1e:db:45:b2:05: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:DC:74:84:B8:84:EF:B5:53:E2:12:F7:B8:71:6C:D5:54:A4:39 X509v3 Authority Key Identifier: keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:72:51:c8:89:2f:a8:87:7b:09:e5:8a:85:33:33:2c:49:a9: e4:60:10:73:84:1e:b4:32:db:3e:d8:78:13:be:c4:48:40:73: 55:7d:53:0c:5f:de:ce:30:30:a6:95:ae:84:3c:23:89:f9:44: 2c:a3:61:36:03:cf:83:8a:96:4d:7a:f2:91:9a:58:3b:3f:63: 96:71:e7:98:06:56:cb:7b:6a:e3:f9:cd:ea:6f:3c:14:0b:dd: d0:b1:ff:ed:d1:c0:5c:d8:40:6d:1a:79:1a:ea:4d:14:98:54: 77:af:e7:7d:29:80:86:29:6a:92:d9:82:6d:c1:93:50:bc:9e: 01:c0:4c:11:0b:43:55:a6:96:c5:b9:a4:0f:fe:e2:6f:00:ab: dc:02:9a:94:06:56:5f:94:4c:29:46:40:97:fc:5b:cc:6d:a0: 67:2d:33:f9:a6:7e:64:aa:5c:c2:87:9e:9c:cc:76:94:30:4f: 09:b4:e4:e7:53:de:a6:09:d7:16:87:2b:56:c4:58:5e:e1:36: 4d:30:0d:e2:f3:71:fd:97:fc:8e:9a:ba:e2:7c:ca:d0:7b:ad: 00:d7:d2:cf:a5:5a:d0:d1:f3:7f:ea:57:3d:4f:f4:43:7b:49: 06:fb:a7:06:be:d1:90:0d:1b:bb:31:a4:ca:85:ac:56:9b:68: 40:26:75:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95Ttd3B+TocoFKWpb4UxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1 Mjk0NTMwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhhNDFlZGM3NDg0Yjg4NGVmYjU1M2UyMTJmN2I4NzE2Y2Q1NTRhNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus677UeM+t4rKY5dMimOriP7PtKu mcSCP9BVPhrLw/0B6a3i3mw0hsbDaC3oEsxuTcMMMW+AYmbGdAmP5Gaeh+BVrgd0 LadXsdtJ6EQ1pWvVzJYTPgYfdP++PNcndEMTlvoaTA84dng4tRwJkxgfyc7zAxsi m5/PSCeI11LH8vrejHUukMhzJi0d4ZRaLVX8I4qos4DPht9hlEknthLSyHitd37i fJUXHV1T5x1w3/aCOy3NbvkvmGdPw2rFe6SZUbzjV5n8AXlVoEBa3n1gw3wb8dff C+omVgJhinfP0uB63MkGDVmKHhDNka9xGBfO4VAnYp5g0IN+HttFsgWZ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQe3HSEuITvtVPiEve4cWzVVKQ5MB8GA1UdIwQY MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHJRyIkv qId7CeWKhTMzLEmp5GAQc4QetDLbPth4E77ESEBzVX1TDF/ezjAwppWuhDwjiflE LKNhNgPPg4qWTXrykZpYOz9jlnHnmAZWy3tq4/nN6m88FAvd0LH/7dHAXNhAbRp5 GupNFJhUd6/nfSmAhilqktmCbcGTULyeAcBMEQtDVaaWxbmkD/7ibwCr3AKalAZW X5RMKUZAl/xbzG2gZy0z+aZ+ZKpcwoeenMx2lDBPCbTk51PepgnXFocrVsRYXuE2 TTAN4vNx/Zf8jpq64nzK0HutANfSz6Va0NHzf+pXPU/0Q3tJBvunBr7RkA0buzGk yoWsVptoQCZ1hA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:03 2025 by rpki-client