This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json) Hash identifier: LO/3DTVd1PWmgiE02CIR63EF320Ra+A6Xn07PmB1kYY= Subject key identifier: 79:D5:42:1B:B3:83:56:43:35:34:35:9E:68:78:F3:21:27:64:32:18 Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab Certificate serial: 019AF0BEF1E7AE036FFD0E4065B8CF15CED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft Manifest number: 0706 Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: X15SisMuRhA79QwQ82oVkv9W9hPL730thD5RYyBTltk=) 2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f1:e7:ae:03:6f:fd:0e:40:65:b8:cf:15:ce:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=79d5421bb38356433534359e6878f32127643218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:3f:51:b9:09:95:e2:14:1f:54:32:b9:42: 3a:a4:82:95:54:8d:71:8e:a3:21:56:c4:e9:77:c2: 99:9f:f5:92:06:ad:e1:fb:53:18:b7:b0:46:0f:9d: 08:17:89:f9:86:26:82:f6:48:2b:aa:2f:91:af:52: a5:fc:a7:37:16:6b:e0:96:4f:18:df:7c:bc:34:64: ed:82:c5:71:91:30:de:d9:51:30:d0:34:b5:e1:09: ea:be:70:0d:be:9b:5a:6a:42:7b:f3:21:e9:b3:47: a9:fa:cc:7b:49:38:2e:f3:ee:25:18:13:69:08:55: 10:8f:e5:a8:c1:84:23:88:e5:54:14:14:bd:3b:97: 22:a6:5d:e1:a1:a3:7a:a8:2c:7b:d4:20:96:ea:1a: 34:53:4c:5e:4c:97:f0:e0:10:f5:dd:c8:ea:f0:29: 78:56:a0:f2:84:33:2b:61:f1:4b:8a:be:12:92:07: 72:ba:82:d7:67:dc:d3:73:a7:6d:c8:a2:40:3b:5c: 4a:1b:2e:3c:14:b9:ec:5e:66:98:31:6e:38:97:31: e9:8e:e6:b2:ca:1f:57:e6:99:15:b4:fb:e5:4b:2e: 11:a9:7b:0f:38:64:33:9c:bd:27:bd:48:ec:a1:14: d8:6c:9d:f1:3e:ee:00:46:48:79:f9:b0:19:32:d1: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:42:1B:B3:83:56:43:35:34:35:9E:68:78:F3:21:27:64:32:18 X509v3 Authority Key Identifier: keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:92:a5:4d:94:9e:6e:3d:70:0a:cf:4c:2b:84:38:aa:30:f3: 72:a4:d7:24:39:6c:c6:67:18:12:d8:37:d7:a0:4f:14:67:3b: cd:d8:1d:27:7e:27:8a:d1:40:54:94:df:bc:21:e8:18:05:52: 06:0d:9d:66:af:7d:69:3c:bd:df:be:f7:bc:b9:d4:6b:39:16: f2:6c:ad:78:9e:ad:78:a6:2a:dd:c1:7d:4a:22:51:4e:6c:f4: 77:07:7f:bd:d1:5a:13:98:c9:57:8b:92:9d:e0:8c:e4:39:d0: 60:fa:49:32:0e:ce:21:76:9d:e6:57:7a:f2:66:65:d8:f7:e7: 2c:88:af:51:c5:02:e3:88:12:74:0a:46:9f:7e:af:fd:c0:f6: cc:dd:12:19:21:76:fd:05:5e:90:4d:e4:4b:76:aa:43:71:ce: 3f:b2:a6:6f:9b:19:1b:d4:01:ea:3e:c2:95:b6:cd:ab:25:21: e0:5f:f4:d6:66:1d:28:f5:a6:03:9a:e6:70:97:f9:de:ba:87: fe:93:eb:8c:86:fd:70:79:8d:df:e6:bd:e9:be:a6:bc:b8:32: f7:58:18:ac:cb:4b:2a:39:c1:17:ed:3d:85:60:37:41:70:29: 76:af:4e:d3:21:c3:14:7a:21:14:c8:ea:b6:bd:dd:36:e6:e5: 79:80:51:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvHnrgNv/Q5AZbjPFc7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy NzEwYWIwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD Eyg3OWQ1NDIxYmIzODM1NjQzMzUzNDM1OWU2ODc4ZjMyMTI3NjQzMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApak/UbkJleIUH1QyuUI6pIKVVI1x jqMhVsTpd8KZn/WSBq3h+1MYt7BGD50IF4n5hiaC9kgrqi+Rr1Kl/Kc3Fmvglk8Y 33y8NGTtgsVxkTDe2VEw0DS14QnqvnANvptaakJ78yHps0ep+sx7STgu8+4lGBNp CFUQj+WowYQjiOVUFBS9O5cipl3hoaN6qCx71CCW6ho0U0xeTJfw4BD13cjq8Cl4 VqDyhDMrYfFLir4SkgdyuoLXZ9zTc6dtyKJAO1xKGy48FLnsXmaYMW44lzHpjuay yh9X5pkVtPvlSy4RqXsPOGQznL0nvUjsoRTYbJ3xPu4ARkh5+bAZMtG85wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnVQhuzg1ZDNTQ1nmh48yEnZDIYMB8GA1UdIwQY MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5KlTZSe bj1wCs9MK4Q4qjDzcqTXJDlsxmcYEtg316BPFGc7zdgdJ34nitFAVJTfvCHoGAVS Bg2dZq99aTy93773vLnUazkW8myteJ6teKYq3cF9SiJRTmz0dwd/vdFaE5jJV4uS neCM5DnQYPpJMg7OIXad5ld68mZl2PfnLIivUcUC44gSdApGn36v/cD2zN0SGSF2 /QVekE3kS3aqQ3HOP7Kmb5sZG9QB6j7ClbbNqyUh4F/01mYdKPWmA5rmcJf53rqH /pPrjIb9cHmN3+a96b6mvLgy91gYrMtLKjnBF+09hWA3QXApdq9O0yHDFHohFMjq tr3dNubleYBRlg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:51 2025 by rpki-client