This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json) Hash identifier: SV7RH346YpbKNi8xPJkpqNzsYkM9Y2ZHpS2GWWXQSD8= Subject key identifier: E2:C2:4C:DD:6F:F0:F7:D1:B0:8B:A3:7C:AC:4E:C8:7B:51:76:D4:61 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019AF19ACB7F1D89BAA3480898441141BC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft Manifest number: 0F92 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=) 2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=) 3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: ckXHqurYZI74p8NlBgej4WK2obR7MN6ZQu+xozT3Jiw=) 4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=) 5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=) 6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=) 7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=) 8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=) 9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cb:7f:1d:89:ba:a3:48:08:98:44:11:41:bc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=e2c24cdd6ff0f7d1b08ba37cac4ec87b5176d461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:96:5c:de:c9:91:d2:84:e4:8b:57:66:a6: 31:87:08:08:d8:82:b4:75:6a:6f:ae:10:73:74:6b: 9f:51:69:f8:16:72:67:c9:0a:00:84:39:c6:66:7d: f3:de:e0:09:db:82:1c:80:69:49:99:6d:42:e4:b1: 11:d2:7b:10:02:24:21:5c:5a:0c:0b:12:31:d4:3a: 72:c9:79:5b:be:5d:98:a5:88:28:6c:b5:c2:12:da: b4:2d:9a:0a:f7:3a:66:e9:bf:8b:db:6d:7a:90:5a: f2:a0:65:0e:c0:c4:a0:64:4c:fd:01:ab:79:19:3f: 35:f9:10:e1:e4:8e:ba:18:a9:f3:72:b9:f5:72:29: 40:ee:74:36:4b:23:3a:26:8d:d5:67:67:79:72:f8: ac:9a:f2:ea:ff:95:e8:27:8d:1e:7f:02:2e:38:7d: 05:72:4e:ec:08:69:6b:d4:5c:f8:76:cc:f2:3c:8a: 5c:31:e2:ff:b2:a2:4a:70:33:81:73:cc:58:5a:4b: 6d:cb:01:ed:96:ff:9b:37:ec:ed:55:45:f2:24:6a: 23:51:5c:3f:ef:96:19:51:f6:d5:85:35:2a:ff:8b: 8d:22:60:3b:20:7b:4a:3e:d8:a5:3d:a1:7d:63:e1: 00:48:44:a8:48:4f:1f:ac:25:b0:b4:79:49:db:cc: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C2:4C:DD:6F:F0:F7:D1:B0:8B:A3:7C:AC:4E:C8:7B:51:76:D4:61 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f6:dc:aa:e3:2f:5b:0d:0d:1b:58:f8:a7:5b:df:74:da:b8: 85:9c:cc:71:60:1f:b2:b5:b0:4d:13:ba:17:2f:ae:7e:8a:9b: a0:8c:37:75:1a:02:99:cf:79:22:8d:5a:82:07:e0:e4:e4:40: 61:78:9d:5c:01:d2:71:3d:03:4d:b6:81:47:79:ef:02:c7:a7: 13:07:7e:90:13:3b:bf:65:4e:65:8b:f2:8b:e2:21:26:b7:9e: 2c:74:86:0d:f2:37:b5:67:bc:fc:34:57:53:ea:02:1b:6e:6c: c9:28:09:71:00:3e:45:d6:23:05:0d:48:1e:24:eb:f2:e4:84: e0:7c:ad:d5:51:99:28:72:aa:90:b6:80:53:89:89:0b:ad:2d: 77:91:c4:50:c4:32:e0:2e:f7:46:17:b7:3e:99:bc:28:9d:39: 41:a4:b0:fb:8f:48:59:ac:fc:40:56:de:77:df:2c:33:16:61: 5c:1d:fb:60:90:eb:00:82:66:4e:a7:25:b8:c6:cf:a3:21:8f: 80:80:f4:96:2f:28:5f:de:99:fa:38:5e:4b:f6:07:6a:1b:83: e7:ee:99:84:80:4a:86:a4:88:2a:22:27:15:6f:a7:52:c2:82: 95:0a:d6:18:37:31:a8:50:f0:8d:95:2e:35:b1:e9:a1:bc:5a: 1b:5a:36:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmst/HYm6o0gImEQRQbxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EyhlMmMyNGNkZDZmZjBmN2QxYjA4YmEzN2NhYzRlYzg3YjUxNzZkNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA2WXN7JkdKE5ItXZqYxhwgI2IK0 dWpvrhBzdGufUWn4FnJnyQoAhDnGZn3z3uAJ24IcgGlJmW1C5LER0nsQAiQhXFoM CxIx1DpyyXlbvl2YpYgobLXCEtq0LZoK9zpm6b+L2216kFryoGUOwMSgZEz9Aat5 GT81+RDh5I66GKnzcrn1cilA7nQ2SyM6Jo3VZ2d5cvismvLq/5XoJ40efwIuOH0F ck7sCGlr1Fz4dszyPIpcMeL/sqJKcDOBc8xYWkttywHtlv+bN+ztVUXyJGojUVw/ 75YZUfbVhTUq/4uNImA7IHtKPtilPaF9Y+EASESoSE8frCWwtHlJ28wtHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLCTN1v8PfRsIujfKxOyHtRdtRhMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfbcquMv Ww0NG1j4p1vfdNq4hZzMcWAfsrWwTRO6Fy+ufoqboIw3dRoCmc95Io1aggfg5ORA YXidXAHScT0DTbaBR3nvAsenEwd+kBM7v2VOZYvyi+IhJreeLHSGDfI3tWe8/DRX U+oCG25sySgJcQA+RdYjBQ1IHiTr8uSE4Hyt1VGZKHKqkLaAU4mJC60td5HEUMQy 4C73Rhe3Ppm8KJ05QaSw+49IWaz8QFbed98sMxZhXB37YJDrAIJmTqcluMbPoyGP gID0li8oX96Z+jheS/YHahuD5+6ZhIBKhqSIKiInFW+nUsKClQrWGDcxqFDwjZUu NbHpobxaG1o2oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:11 2025 by rpki-client