This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json) Hash identifier: /6p3zrhCYDMJQdRL11XPZ1osxbZisOeUBv4xXYeTvME= Subject key identifier: B3:37:36:CF:36:63:50:E2:30:45:7D:90:00:A0:F6:32:AE:BE:37:8B Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Certificate serial: 019AF464F333BAB99F2A99FAA97EA221878F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft Manifest number: 13A7 Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=) 2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: HeOR0UyQ5lCjh1O5LWBXt6e98YMFWXfdBeOoGKXis9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f3:33:ba:b9:9f:2a:99:fa:a9:7e:a2:21:87:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=b33736cf366350e230457d9000a0f632aebe378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:6e:8f:07:19:62:93:c6:ee:1a:17:85:38: 08:d4:dc:dc:e9:15:ac:86:9f:ca:a0:84:64:76:2c: 2b:58:5d:53:1e:81:fe:a5:ea:69:83:6d:f6:8e:ee: b2:b4:4b:5f:82:6a:3a:10:26:15:16:da:82:38:d1: 8c:b0:c5:4a:b6:1c:05:88:11:72:9d:ef:15:29:00: e8:f8:e1:f4:8b:4e:a1:cb:7b:fc:3a:de:8a:94:f1: b2:1a:83:ac:8c:23:e6:06:e2:e4:bc:9d:4e:e4:d9: ec:5d:94:f5:29:08:76:1e:d6:6c:a9:93:1b:1b:cb: 68:52:9d:db:17:5d:e3:43:f1:c9:60:9f:6d:b6:77: 14:62:3c:bb:fd:df:49:3a:70:e7:54:ad:af:3c:19: f8:e2:6d:5e:6d:b1:09:46:1a:a1:e8:85:14:35:e3: 3c:e6:87:ec:1d:e5:6a:86:d0:d5:b4:bf:d9:e7:e7: 78:22:c1:7d:8d:85:c4:a1:a3:2d:89:54:0f:b3:af: c8:44:eb:ad:7f:26:89:95:42:e8:ca:ad:6f:4d:12: 75:fb:47:44:85:85:e8:f0:32:61:fc:e6:76:7a:0f: 85:1f:e8:bc:e3:66:c8:5c:7d:cf:aa:0d:23:6b:7f: 63:92:2c:f1:f5:bb:cb:41:0d:78:18:50:08:1d:3a: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:36:CF:36:63:50:E2:30:45:7D:90:00:A0:F6:32:AE:BE:37:8B X509v3 Authority Key Identifier: keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:09:b0:e2:5b:46:47:c8:6b:cc:da:a4:d6:9d:03:dc:ab: 4f:24:bb:5a:5b:7f:43:f8:6c:c6:77:91:b0:a7:da:28:cf:e4: 5b:9b:25:89:e8:4b:ca:ee:20:74:30:96:22:c0:7d:29:d0:9f: 85:18:db:2d:0d:12:43:b3:38:69:37:f3:91:c0:fd:7f:1c:7c: 33:4f:42:55:60:b1:04:e1:70:39:36:b6:59:c9:af:21:b0:13: 5a:44:81:b5:b9:16:b8:82:b2:81:70:f1:f6:11:f3:ed:f7:3b: 32:77:b2:f6:c7:8d:af:7e:70:17:40:7e:ae:30:3e:c7:2b:be: 7c:b4:e6:2e:74:54:0c:b9:b1:4a:a4:1c:6b:6c:47:fd:6b:97: 50:65:54:9f:7a:71:ba:72:54:8f:4a:33:b3:80:25:da:8d:69: 47:59:0d:04:27:60:16:13:d7:a6:d1:d8:c5:77:2d:bd:33:c1: 73:11:9f:b9:ab:84:d8:15:96:12:f9:43:c3:c1:58:77:c7:00: b7:87:02:da:02:78:8c:71:8c:96:6b:56:8b:78:90:bb:23:24: 7b:b1:6b:8d:d9:55:d1:a4:ac:9d:51:6c:9d:bc:e2:94:b2:3f: 06:03:5a:ef:c3:c6:9d:e6:01:38:19:76:21:54:c3:9a:a9:52: c5:fc:57:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPMzurmfKpn6qX6iIYePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk MmQyN2EwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD EyhiMzM3MzZjZjM2NjM1MGUyMzA0NTdkOTAwMGEwZjYzMmFlYmUzNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFBujwcZYpPG7hoXhTgI1Nzc6RWs hp/KoIRkdiwrWF1THoH+peppg232ju6ytEtfgmo6ECYVFtqCONGMsMVKthwFiBFy ne8VKQDo+OH0i06hy3v8Ot6KlPGyGoOsjCPmBuLkvJ1O5NnsXZT1KQh2HtZsqZMb G8toUp3bF13jQ/HJYJ9ttncUYjy7/d9JOnDnVK2vPBn44m1ebbEJRhqh6IUUNeM8 5ofsHeVqhtDVtL/Z5+d4IsF9jYXEoaMtiVQPs6/IROutfyaJlULoyq1vTRJ1+0dE hYXo8DJh/OZ2eg+FH+i842bIXH3Pqg0ja39jkizx9bvLQQ14GFAIHTp3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM3Ns82Y1DiMEV9kACg9jKuvjeLMB8GA1UdIwQY MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt ZGU5N2U5MTQxZmVkLzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCEJsOJb RkfIa8zapNadA9yrTyS7Wlt/Q/hsxneRsKfaKM/kW5sliehLyu4gdDCWIsB9KdCf hRjbLQ0SQ7M4aTfzkcD9fxx8M09CVWCxBOFwOTa2WcmvIbATWkSBtbkWuIKygXDx 9hHz7fc7Mney9seNr35wF0B+rjA+xyu+fLTmLnRUDLmxSqQca2xH/WuXUGVUn3px unJUj0ozs4Al2o1pR1kNBCdgFhPXptHYxXctvTPBcxGfuauE2BWWEvlDw8FYd8cA t4cC2gJ4jHGMlmtWi3iQuyMke7FrjdlV0aSsnVFsnbzilLI/BgNa78PGneYBOBl2 IVTDmqlSxfxXWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:42 2025 by rpki-client