This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json) Hash identifier: 9vD3FWY/lrr5ntY0g8K0qQNSU8YPDRrNzFAxEyo75KQ= Subject key identifier: E1:FC:21:7B:45:B8:C1:BD:22:0C:18:9C:60:61:2C:82:6A:8B:D0:4E Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541 Certificate serial: 019AF12D0DF2DCB04D28D312A6DEF1D884FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft Manifest number: 0D45 Signing time: Sat 06 Dec 2025 01:00:52 +0000 Manifest this update: Sat 06 Dec 2025 01:00:52 +0000 Manifest next update: Sun 07 Dec 2025 01:00:52 +0000 Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=) 2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 7XMLj+spL2vHTFI30pDP0q04Rfs5f6Qf/8UTohBypLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0d:f2:dc:b0:4d:28:d3:12:a6:de:f1:d8:84:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541 Validity Not Before: Dec 6 01:00:52 2025 GMT Not After : Dec 7 01:00:52 2025 GMT Subject: CN=e1fc217b45b8c1bd220c189c60612c826a8bd04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:04:6b:fb:12:79:24:a7:e7:09:ba:f9:4a: fe:f7:5e:98:66:76:e1:e9:6a:a7:84:ea:cf:3a:c9: 6b:24:0f:92:2c:d6:d7:de:9a:9b:c1:53:0d:ec:49: 07:89:fc:80:c0:4a:a0:32:0b:d4:4d:6d:0f:6a:cf: e0:e6:00:56:e2:d7:81:06:b1:c4:6d:48:9c:50:41: 6e:b8:2a:0b:71:67:fb:29:8f:d1:2c:0a:7f:87:8c: 3e:54:8e:f9:0c:97:62:5f:ec:b5:08:0e:47:27:12: 38:1d:e2:36:37:ed:b7:da:1c:a8:77:5f:ec:84:bc: 94:b4:7f:89:31:d8:0d:64:c2:40:0d:92:62:0d:00: ca:13:d8:c7:88:39:88:91:94:78:16:9f:dd:db:81: 1e:f0:c8:8c:53:5e:69:79:53:63:b5:86:3a:4f:bd: 4f:c8:1a:55:19:8c:30:58:d8:07:66:a7:b0:cb:e6: 7b:71:a0:68:2a:75:b2:49:8c:b4:32:41:c3:d3:9e: 6d:80:45:e3:ed:51:11:27:05:59:55:af:81:1b:0b: 77:a7:28:9c:f2:35:24:0e:2c:bd:1a:ec:e0:dd:b4: 23:03:58:67:51:2f:3a:c5:08:b7:4c:7f:42:79:0b: 48:f5:66:ae:eb:81:62:2a:dc:71:59:2b:36:78:86: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FC:21:7B:45:B8:C1:BD:22:0C:18:9C:60:61:2C:82:6A:8B:D0:4E X509v3 Authority Key Identifier: keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:d0:f4:38:ba:30:e7:e3:6c:34:cb:6e:63:15:e6:1a:cd: e5:f6:44:b2:39:10:ff:97:5e:ae:a4:cb:a6:f5:dc:e3:2e:c7: 96:be:e0:83:5b:fb:ab:18:23:35:69:65:c8:df:00:eb:4e:67: 54:33:49:53:9b:c0:d9:14:3b:42:8f:87:3f:97:3a:99:63:6b: cd:61:91:b7:86:f0:76:af:21:3d:79:c9:fa:2f:3a:c0:6c:cc: 04:e7:25:7c:74:8f:78:4c:53:32:d8:4d:f5:a8:37:0c:d6:88: 0f:ec:d9:ae:64:60:65:6f:1b:c1:fd:05:3e:03:5f:1f:a8:dc: 20:3d:9c:84:5f:83:bb:91:52:1d:6a:f4:bd:4a:3f:a4:58:b7: 58:78:33:19:d0:82:52:c0:34:33:6b:56:93:84:a1:7b:b7:58: 67:54:f4:28:de:bc:67:d2:6c:16:4b:78:fb:27:bd:f4:30:e4: ff:14:6b:e6:67:a8:8a:f7:58:08:51:ce:48:bf:d8:34:90:70: 50:d1:68:09:fe:4b:8e:30:5d:bf:67:ae:87:7b:6a:e1:bb:41: 47:b3:41:93:60:55:5f:53:f2:9b:8e:f2:e2:77:48:cb:83:fb: c4:fc:62:7e:45:bc:7d:46:d4:de:79:b0:b2:e4:42:74:9b:5d: a7:13:33:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ3y3LBNKNMSpt7x2IT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy MzM1NDEwHhcNMjUxMjA2MDEwMDUyWhcNMjUxMjA3MDEwMDUyWjAzMTEwLwYDVQQD EyhlMWZjMjE3YjQ1YjhjMWJkMjIwYzE4OWM2MDYxMmM4MjZhOGJkMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0cEa/sSeSSn5wm6+Ur+916YZnbh 6WqnhOrPOslrJA+SLNbX3pqbwVMN7EkHifyAwEqgMgvUTW0Pas/g5gBW4teBBrHE bUicUEFuuCoLcWf7KY/RLAp/h4w+VI75DJdiX+y1CA5HJxI4HeI2N+232hyod1/s hLyUtH+JMdgNZMJADZJiDQDKE9jHiDmIkZR4Fp/d24Ee8MiMU15peVNjtYY6T71P yBpVGYwwWNgHZqewy+Z7caBoKnWySYy0MkHD055tgEXj7VERJwVZVa+BGwt3pyic 8jUkDiy9Guzg3bQjA1hnUS86xQi3TH9CeQtI9Wau64FiKtxxWSs2eIb+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOH8IXtFuMG9IgwYnGBhLIJqi9BOMB8GA1UdIwQY MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It MzUyMDNkNmIwZDU3LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3 LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRrQ9Di6 MOfjbDTLbmMV5hrN5fZEsjkQ/5derqTLpvXc4y7Hlr7gg1v7qxgjNWllyN8A605n VDNJU5vA2RQ7Qo+HP5c6mWNrzWGRt4bwdq8hPXnJ+i86wGzMBOclfHSPeExTMthN 9ag3DNaID+zZrmRgZW8bwf0FPgNfH6jcID2chF+Du5FSHWr0vUo/pFi3WHgzGdCC UsA0M2tWk4She7dYZ1T0KN68Z9JsFkt4+ye99DDk/xRr5meoivdYCFHOSL/YNJBw UNFoCf5LjjBdv2euh3tq4btBR7NBk2BVX1Pym47y4ndIy4P7xPxifkW8fUbU3nmw suRCdJtdpxMz/w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:12 2025 by rpki-client