This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json) Hash identifier: Q7AvjE51uM0LHdiUxUKtuI1AsMjOnNEU8HdHo9G/9aY= Subject key identifier: 76:29:95:CB:3D:8B:3B:70:25:87:38:4E:84:85:F9:5A:7D:FF:41:13 Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab Certificate serial: 019B3079FD002662D7BF5F268D49F55F41DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft Manifest number: 0727 Signing time: Thu 18 Dec 2025 08:00:59 +0000 Manifest this update: Thu 18 Dec 2025 08:00:59 +0000 Manifest next update: Fri 19 Dec 2025 08:00:59 +0000 Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: S1kmkzXn/n1KxZxJPjIcNxGQWAgSd4gxeINXAXYeZkQ=) 2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:fd:00:26:62:d7:bf:5f:26:8d:49:f5:5f:41:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab Validity Not Before: Dec 18 08:00:59 2025 GMT Not After : Dec 19 08:00:59 2025 GMT Subject: CN=762995cb3d8b3b702587384e8485f95a7dff4113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:cc:49:7e:5a:10:40:3d:52:aa:60:11:fc: 1b:a5:30:b5:ea:aa:47:07:c4:51:d2:58:09:51:d8: ad:95:1c:cb:fa:df:37:64:5f:dd:28:a9:de:14:da: b1:21:ff:f0:9b:c1:7b:f1:80:ce:c8:cb:3b:6e:e7: 06:84:38:9c:d2:43:3e:2b:76:e9:7a:dc:73:6d:7a: b5:a7:f4:ca:f1:db:55:fd:ad:3f:27:cd:82:9e:a9: b9:a0:a9:20:a0:49:5f:f8:b4:4d:a0:86:d2:b0:c3: 26:1f:ac:e5:d2:9d:05:bd:1f:6c:f7:07:9e:a5:fd: de:3c:8c:35:53:4c:20:c9:5c:ba:30:c4:ca:56:08: ee:bf:ea:b7:5f:1b:94:92:af:69:93:21:c0:b0:08: 7a:b2:bf:81:de:1e:f3:09:6f:6a:5b:4f:10:97:d0: 0a:c5:fd:25:35:b1:c5:51:a6:95:23:08:8e:96:f7: 02:19:90:ac:c7:c0:ea:a4:95:73:f9:4e:98:ab:b5: 1c:35:b9:c4:00:8b:e4:cb:8c:61:a9:5d:ac:12:e1: 31:ac:32:55:65:7a:13:a7:82:c4:88:91:f3:4f:96: 7c:98:57:b4:4a:6b:d4:1e:2e:fe:11:fb:b0:07:e4: 9c:39:4f:a9:8b:a8:3b:e9:5b:95:25:6e:e1:95:ff: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:95:CB:3D:8B:3B:70:25:87:38:4E:84:85:F9:5A:7D:FF:41:13 X509v3 Authority Key Identifier: keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:aa:f7:8c:e3:16:5e:08:36:ab:a9:6a:dc:21:d4:f6:76: 7a:49:9c:3d:51:1e:16:f7:4c:14:42:d6:48:12:12:d5:63:57: 6b:0e:9c:63:85:b5:55:b7:48:10:01:dc:fb:d9:d4:3a:80:6e: ab:a3:b2:21:25:d3:ff:d2:42:a9:68:b2:58:99:03:09:e9:8f: 97:d2:13:b8:2a:1c:5c:79:7b:81:44:06:59:56:00:0d:fc:cb: 56:1a:ff:fc:7a:16:91:c9:c8:8b:dc:4b:8d:df:2f:9c:02:50: b4:76:64:98:aa:e5:8f:64:de:7b:1d:18:e8:42:49:6e:78:84: 1f:a5:d0:b2:0a:62:25:84:38:ab:41:26:3c:ea:27:0f:48:c1: ab:d3:e3:fc:43:b8:36:c0:f8:c9:aa:f8:a2:0e:66:5d:2f:d0: 35:85:f6:8e:a1:4d:0e:da:c5:10:fe:90:ee:02:59:f6:af:cd: 52:65:0d:8f:e8:d0:cd:96:77:d9:db:81:fe:5f:ac:ff:12:ec: ae:17:61:0c:a7:29:1b:7f:1f:ef:eb:36:88:d3:0c:9e:95:b0: a6:e4:a8:d0:f9:17:9a:e4:80:f1:e0:e8:be:e6:e8:2a:93:d9: 64:d8:69:b4:12:6e:15:02:85:f7:1b:2e:fe:4c:04:9b:63:61: 7e:d6:72:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswef0AJmLXv18mjUn1X0HfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy NzEwYWIwHhcNMjUxMjE4MDgwMDU5WhcNMjUxMjE5MDgwMDU5WjAzMTEwLwYDVQQD Eyg3NjI5OTVjYjNkOGIzYjcwMjU4NzM4NGU4NDg1Zjk1YTdkZmY0MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQPMSX5aEEA9UqpgEfwbpTC16qpH B8RR0lgJUditlRzL+t83ZF/dKKneFNqxIf/wm8F78YDOyMs7bucGhDic0kM+K3bp etxzbXq1p/TK8dtV/a0/J82Cnqm5oKkgoElf+LRNoIbSsMMmH6zl0p0FvR9s9wee pf3ePIw1U0wgyVy6MMTKVgjuv+q3XxuUkq9pkyHAsAh6sr+B3h7zCW9qW08Ql9AK xf0lNbHFUaaVIwiOlvcCGZCsx8DqpJVz+U6Yq7UcNbnEAIvky4xhqV2sEuExrDJV ZXoTp4LEiJHzT5Z8mFe0SmvUHi7+EfuwB+ScOU+pi6g76VuVJW7hlf+5/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYplcs9iztwJYc4ToSF+Vp9/0ETMB8GA1UdIwQY MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcOq94zj Fl4INqupatwh1PZ2ekmcPVEeFvdMFELWSBIS1WNXaw6cY4W1VbdIEAHc+9nUOoBu q6OyISXT/9JCqWiyWJkDCemPl9ITuCocXHl7gUQGWVYADfzLVhr//HoWkcnIi9xL jd8vnAJQtHZkmKrlj2Teex0Y6EJJbniEH6XQsgpiJYQ4q0EmPOonD0jBq9Pj/EO4 NsD4yar4og5mXS/QNYX2jqFNDtrFEP6Q7gJZ9q/NUmUNj+jQzZZ32duB/l+s/xLs rhdhDKcpG38f7+s2iNMMnpWwpuSo0PkXmuSA8eDovuboKpPZZNhptBJuFQKF9xsu /kwEm2NhftZyeA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:32 2025 by rpki-client