This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json) Hash identifier: 2guSU+qXXpK6uAuEylQk9qkayoXTpgYkzQYmkQlta2A= Subject key identifier: 91:39:F9:6A:9A:A2:24:72:75:62:F9:0D:0F:B6:B1:70:36:00:20:B1 Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Certificate serial: 019AF23F669BDCBB0EA7E73F90560F27F126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft Manifest number: 0214 Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: Odu_8Z8wYQ4rAwGBZ2rfmaKWPvY.roa (hash: G+0rnOlwTF853BxAQkBgLndsmH7cjPaqnqIy5TqAej8=) 2: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: ch5JAzX5I9JQtmBCsO2+t8Xtuy3LQnRPjUSjm++uQtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:66:9b:dc:bb:0e:a7:e7:3f:90:56:0f:27:f1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=9139f96a9aa224727562f90d0fb6b170360020b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:83:17:93:13:dd:cf:4e:9d:5b:f0:11:77: f2:57:e3:a2:de:3d:a0:8c:1c:97:80:b3:b4:d6:8f: b5:d8:01:f4:4a:c8:98:1c:8a:6b:ea:93:9c:bf:69: 26:30:ba:40:17:ce:6a:2c:24:59:66:36:be:e2:d1: 3e:44:96:8d:ea:6c:2e:84:ea:a0:08:b8:69:4b:46: cb:57:6e:76:9d:44:9e:b7:09:96:73:93:f4:50:55: ee:38:a8:15:3b:97:c2:de:f3:93:c2:fd:40:42:39: 16:ba:5d:fe:e7:f7:30:55:95:cc:65:80:a2:17:97: 47:40:6e:03:b4:52:aa:12:56:19:2e:97:a9:2a:35: ee:57:d6:40:be:7a:8b:14:66:bd:fc:42:d5:b8:f6: cf:eb:59:96:55:c0:4d:87:40:7b:c5:80:79:c4:10: f3:d2:ca:26:c1:5b:c3:fd:d2:63:96:11:75:f6:ba: 32:02:d1:e6:d7:aa:4d:02:e0:6a:68:74:82:76:db: 52:8c:ff:e4:d8:58:29:ef:f7:a7:a0:7c:25:c0:28: 85:70:70:42:cc:fd:fb:38:25:e3:36:79:d4:00:3d: 46:04:2f:a6:72:07:ab:eb:84:9a:7f:a9:3f:08:76: ee:42:16:db:18:6d:74:e6:eb:93:3b:0f:75:a8:c6: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:F9:6A:9A:A2:24:72:75:62:F9:0D:0F:B6:B1:70:36:00:20:B1 X509v3 Authority Key Identifier: keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:45:ca:13:f4:2b:e6:12:9b:27:ae:97:8b:c8:fa:be:7e:de: 5c:b9:02:a5:0e:fa:ad:dc:62:e1:58:e4:24:bb:55:1f:20:69: c8:25:f6:80:8b:d6:9b:c5:df:95:2c:7b:10:ce:6f:7e:5c:4f: 74:aa:6f:64:31:5f:84:4a:fc:9e:4b:7c:ef:79:d6:64:a0:ac: 4c:27:c1:0b:b0:ef:3a:dc:6f:28:96:94:90:0a:b1:f4:b7:c8: 69:94:29:41:89:ad:c1:0e:c4:84:47:75:a1:1d:64:51:a4:46: eb:6b:3c:88:ce:cf:26:53:83:36:cd:d6:e5:b4:c8:7d:c4:ce: b4:6e:e0:cb:6d:66:8b:d8:77:b5:49:08:3c:55:c7:e0:db:95: 65:d3:d9:73:03:3a:00:4b:bc:27:3c:1e:79:c1:3f:87:fd:2d: b9:73:31:42:18:0a:eb:ad:77:6b:58:dc:cc:96:dd:e6:cd:6b: 72:07:26:8f:e6:f4:fe:6b:d9:88:18:d8:a2:26:fd:0a:80:b8: 6f:eb:00:da:f4:ea:c2:1c:79:47:09:68:f5:7c:7b:1f:c2:d2: 2a:a2:34:ca:57:17:dc:a6:83:d4:a7:8b:a5:69:32:bb:98:d1: 54:e9:18:a0:30:37:9b:c0:10:c4:8d:b9:f5:35:93:9f:11:b7: 47:e5:c8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2ab3LsOp+c/kFYPJ/EmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm MDkxOTYwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD Eyg5MTM5Zjk2YTlhYTIyNDcyNzU2MmY5MGQwZmI2YjE3MDM2MDAyMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC+DF5MT3c9OnVvwEXfyV+Oi3j2g jByXgLO01o+12AH0SsiYHIpr6pOcv2kmMLpAF85qLCRZZja+4tE+RJaN6mwuhOqg CLhpS0bLV252nUSetwmWc5P0UFXuOKgVO5fC3vOTwv1AQjkWul3+5/cwVZXMZYCi F5dHQG4DtFKqElYZLpepKjXuV9ZAvnqLFGa9/ELVuPbP61mWVcBNh0B7xYB5xBDz 0somwVvD/dJjlhF19royAtHm16pNAuBqaHSCdttSjP/k2Fgp7/enoHwlwCiFcHBC zP37OCXjNnnUAD1GBC+mcger64Saf6k/CHbuQhbbGG105uuTOw91qMYF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE5+WqaoiRydWL5DQ+2sXA2ACCxMB8GA1UdIwQY MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUXKE/Qr 5hKbJ66Xi8j6vn7eXLkCpQ76rdxi4VjkJLtVHyBpyCX2gIvWm8XflSx7EM5vflxP dKpvZDFfhEr8nkt873nWZKCsTCfBC7DvOtxvKJaUkAqx9LfIaZQpQYmtwQ7EhEd1 oR1kUaRG62s8iM7PJlODNs3W5bTIfcTOtG7gy21mi9h3tUkIPFXH4NuVZdPZcwM6 AEu8JzweecE/h/0tuXMxQhgK6613a1jczJbd5s1rcgcmj+b0/mvZiBjYoib9CoC4 b+sA2vTqwhx5Rwlo9Xx7H8LSKqI0ylcX3KaD1KeLpWkyu5jRVOkYoDA3m8AQxI25 9TWTnxG3R+XIjg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:30 2025 by rpki-client