This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft File: JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json) Hash identifier: sL5FGpK0jAv5EhnuXUMpPF9Sl1oJq8zNXM8lms+py1k= Subject key identifier: F4:14:E9:57:D5:AD:50:D6:39:19:89:ED:19:C1:08:56:49:1E:23:CB Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Certificate serial: 019AF12DE191A0C04190A6E30E8ED3BC22D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft Manifest number: 13 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: Gu_fhg3mQGnsmp84Oa5OuiW-MeE.roa (hash: FC9xrWGxGyKPiigpNRPhEq2JFaMmbZsuawbqyf2372M=) 2: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: thplXUY8hMxKyQmAfyutHs2NdFEePYn9V6CmctFd098=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e1:91:a0:c0:41:90:a6:e3:0e:8e:d3:bc:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=f414e957d5ad50d6391989ed19c10856491e23cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:c1:7c:62:96:ce:54:31:8f:35:30:ad:87: 68:cc:f3:b5:8a:0c:45:8c:59:1c:0f:93:49:09:c2: 64:60:ac:56:1d:f0:48:c0:be:d2:2d:6e:20:39:dc: 2a:98:e9:dc:ec:30:f7:1e:87:1b:1e:f8:67:45:25: a7:9c:d8:09:ce:d1:7f:1b:fe:9d:e8:ef:75:b6:b0: a6:5d:32:21:35:83:c1:80:00:84:64:c5:6f:ff:cb: ff:19:75:ff:e4:2b:12:73:64:28:35:5c:3e:69:8c: 5f:d6:6a:fc:62:8b:a4:e0:e8:fe:df:02:0a:98:d6: a2:2a:85:0c:af:b5:6d:a2:94:1a:c2:ba:27:b9:92: 93:12:f8:45:16:72:5e:15:48:c3:95:ee:78:dd:b2: 50:8a:55:34:62:21:79:67:24:4d:c2:ba:a4:dc:e2: 0d:52:03:be:46:5b:49:ab:7e:63:89:24:b8:b2:8c: c2:1e:98:0c:48:dd:b0:eb:ea:7c:bd:58:a0:74:79: 11:23:10:f1:90:51:dc:c3:2f:e9:3f:a7:cc:53:a0: 54:31:f7:70:65:b2:cf:29:26:74:1b:4b:24:74:57: af:d0:77:d7:b5:c4:69:2b:2b:3d:b5:42:fe:cd:dd: 55:9b:6e:65:f4:12:1c:00:48:4b:60:31:ab:68:cc: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:E9:57:D5:AD:50:D6:39:19:89:ED:19:C1:08:56:49:1E:23:CB X509v3 Authority Key Identifier: keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7f:8a:b5:40:e2:33:fc:ef:b9:d5:39:61:54:0b:e3:c5:3c: fd:64:fa:d8:92:71:e5:6a:f6:a0:96:a0:e1:19:c6:ea:fe:ca: 18:a2:37:24:c1:13:9d:ac:8f:7f:53:ee:f0:03:11:4a:f1:ea: 2f:f2:fa:d6:f2:b7:0a:67:d5:7a:d8:4d:5d:71:b2:35:51:4c: e5:d6:b9:13:6e:6f:8e:5e:a9:3e:e9:8e:db:5c:c3:f0:9e:55: 8b:a6:8f:a7:30:90:4e:35:7c:d1:5f:5e:b9:4c:d3:63:a1:c0: 89:30:18:47:f8:5c:9a:f3:54:62:d9:09:88:61:55:68:51:54: f0:03:eb:f9:4f:1a:87:23:de:37:36:1b:fb:02:ef:7b:e3:02: 59:a3:ea:57:5c:a9:f7:25:6c:41:21:7a:6a:0a:89:f7:ed:ae: 41:57:4e:db:ca:61:26:a8:7a:9a:ac:71:7c:40:a7:99:37:54: 92:ce:46:65:e5:1f:47:98:6f:0c:4d:e6:ff:79:f0:42:0c:99: 14:d6:d7:a2:3f:5c:b6:b5:dd:ea:ce:bf:3c:72:33:b1:89:65: 37:e6:f3:af:b1:63:16:50:72:e6:8a:0a:02:47:98:84:90:b8: 8d:98:f0:87:87:af:3c:31:e4:f3:9a:c0:26:bc:32:7a:4f:e9: 3a:c1:2a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeGRoMBBkKbjDo7TvCLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTA3ZjkwZDlmOWQ5MDJmY2YwNGJkMGI0NjE1MmMzODI3 YTdkNTAwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhmNDE0ZTk1N2Q1YWQ1MGQ2MzkxOTg5ZWQxOWMxMDg1NjQ5MWUyM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm/BfGKWzlQxjzUwrYdozPO1igxF jFkcD5NJCcJkYKxWHfBIwL7SLW4gOdwqmOnc7DD3HocbHvhnRSWnnNgJztF/G/6d 6O91trCmXTIhNYPBgACEZMVv/8v/GXX/5CsSc2QoNVw+aYxf1mr8Youk4Oj+3wIK mNaiKoUMr7VtopQawronuZKTEvhFFnJeFUjDle543bJQilU0YiF5ZyRNwrqk3OIN UgO+RltJq35jiSS4sozCHpgMSN2w6+p8vVigdHkRIxDxkFHcwy/pP6fMU6BUMfdw ZbLPKSZ0G0skdFev0HfXtcRpKys9tUL+zd1Vm25l9BIcAEhLYDGraMwn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQU6VfVrVDWORmJ7RnBCFZJHiPLMB8GA1UdIwQY MBaAFCWQf5DZ+dkC/PBL0LRhUsOCen1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2Mt MDg5Yzg5ZWY2M2M4LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2MtMDg5Yzg5ZWY2M2M4 LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArX+KtUDi M/zvudU5YVQL48U8/WT62JJx5Wr2oJag4RnG6v7KGKI3JMETnayPf1Pu8AMRSvHq L/L61vK3CmfVethNXXGyNVFM5da5E25vjl6pPumO21zD8J5Vi6aPpzCQTjV80V9e uUzTY6HAiTAYR/hcmvNUYtkJiGFVaFFU8APr+U8ahyPeNzYb+wLve+MCWaPqV1yp 9yVsQSF6agqJ9+2uQVdO28phJqh6mqxxfECnmTdUks5GZeUfR5hvDE3m/3nwQgyZ FNbXoj9ctrXd6s6/PHIzsYllN+bzr7FjFlBy5ooKAkeYhJC4jZjwh4evPDHk85rA Jrwyek/pOsEqnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:46 2025 by rpki-client