This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json) Hash identifier: d/vosA/5XYwOYG3Dt7uUUxQbU4Mk3KagelZMEiXmd4Y= Subject key identifier: B8:F7:90:48:39:2D:9E:9F:D7:47:E6:41:C9:67:1D:B6:59:91:AF:13 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019AF5AEF1A8F86B3BFDBC1059D90C4811B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft Manifest number: 1582 Signing time: Sat 06 Dec 2025 22:01:14 +0000 Manifest this update: Sat 06 Dec 2025 22:01:14 +0000 Manifest next update: Sun 07 Dec 2025 22:01:14 +0000 Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=) 2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: 3t5+N6Dv0Wrb6h3bhEOOrtFzckSAqyEuLWnyA0JXm7U=) 3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=) 4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f1:a8:f8:6b:3b:fd:bc:10:59:d9:0c:48:11:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Dec 6 22:01:14 2025 GMT Not After : Dec 7 22:01:14 2025 GMT Subject: CN=b8f79048392d9e9fd747e641c9671db65991af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:b5:5c:97:c6:28:3a:ea:4a:fd:80:4d:b4: 34:ee:25:f0:51:ff:38:0e:5a:4d:ed:74:8e:6f:ae: 54:f3:31:2c:87:94:ca:11:cb:70:85:54:f4:f7:0d: a3:69:cf:21:ee:7a:79:65:9e:1a:2f:6e:0f:b4:4f: 99:5f:93:6c:0a:09:c5:c6:6f:42:2d:7d:31:02:a3: ee:18:26:c5:1c:12:35:9f:31:b5:54:70:6f:c4:af: 80:8c:79:d8:35:97:a6:46:a4:a6:01:76:7c:46:c7: 61:a4:d1:5e:3e:cd:3a:ca:06:a7:1f:94:fe:6a:13: 3b:6f:c6:fc:93:f2:07:a7:15:28:a0:6e:b6:b6:a8: d9:f8:b0:ee:d2:12:9f:ff:87:de:e4:d6:58:b5:55: 26:bf:6f:a7:57:67:9a:53:b4:f5:39:17:3a:af:f1: 13:a4:03:f2:98:66:7a:ff:ab:2e:80:b6:8a:1f:43: 9f:a4:93:19:57:d4:12:98:c4:6b:57:32:10:53:fc: 3e:82:6c:e3:b5:67:17:26:5c:26:11:57:7c:9d:92: 7d:05:40:6d:b0:66:a2:d0:01:7a:1b:67:a3:7f:0f: 04:8d:86:f8:4f:f0:94:c4:7d:15:72:3f:93:90:53: d2:ae:98:20:88:40:a1:7f:87:55:0b:37:bc:25:d9: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F7:90:48:39:2D:9E:9F:D7:47:E6:41:C9:67:1D:B6:59:91:AF:13 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c5:56:9b:e6:29:f6:4a:84:c9:54:e2:5e:5e:36:7d:d7:c8: 0e:6a:38:3b:51:17:04:69:27:c9:3f:79:b9:25:19:42:11:8d: 07:b2:7d:f3:7a:03:71:a1:ee:11:ef:8a:49:99:00:e3:47:0f: 78:8b:05:9f:5f:9c:1c:a0:36:53:6b:c8:64:6b:93:59:2a:29: 2c:c8:79:b5:41:97:11:3e:67:ea:6e:c3:cf:6e:db:85:a0:ad: a0:76:24:6f:f3:86:f7:96:6a:0e:a3:89:31:f8:05:13:3d:ff: ad:07:bf:87:6e:4d:87:46:fe:fd:83:f9:ba:38:b3:0a:b9:4d: c5:99:09:2f:59:78:6b:be:77:91:94:e1:b6:c8:90:02:a2:60: 75:10:e9:7f:16:dc:9b:cb:54:55:c2:5a:19:44:64:61:0b:c5: b1:15:c3:4f:26:66:f9:63:a5:3b:b7:6b:67:e1:6b:9d:38:25: 89:83:c2:77:ed:09:93:3c:ab:d3:b2:44:cf:7a:8f:35:7b:37: 43:0f:db:55:c5:22:eb:e1:66:6d:13:e2:69:af:2f:02:0b:99: 39:7f:e4:c3:ee:b6:a8:d2:60:28:65:c8:54:ee:21:7b:a2:72: 98:38:ac:2b:b9:ba:5a:0c:0a:11:dc:c8:e9:7f:25:e6:8e:28: 9b:f8:0f:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvGo+Gs7/bwQWdkMSBGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjUxMjA2MjIwMTE0WhcNMjUxMjA3MjIwMTE0WjAzMTEwLwYDVQQD EyhiOGY3OTA0ODM5MmQ5ZTlmZDc0N2U2NDFjOTY3MWRiNjU5OTFhZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWG1XJfGKDrqSv2ATbQ07iXwUf84 DlpN7XSOb65U8zEsh5TKEctwhVT09w2jac8h7np5ZZ4aL24PtE+ZX5NsCgnFxm9C LX0xAqPuGCbFHBI1nzG1VHBvxK+AjHnYNZemRqSmAXZ8RsdhpNFePs06yganH5T+ ahM7b8b8k/IHpxUooG62tqjZ+LDu0hKf/4fe5NZYtVUmv2+nV2eaU7T1ORc6r/ET pAPymGZ6/6sugLaKH0OfpJMZV9QSmMRrVzIQU/w+gmzjtWcXJlwmEVd8nZJ9BUBt sGai0AF6G2ejfw8EjYb4T/CUxH0Vcj+TkFPSrpggiEChf4dVCze8Jdl3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj3kEg5LZ6f10fmQclnHbZZka8TMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcVWm+Yp 9kqEyVTiXl42fdfIDmo4O1EXBGknyT95uSUZQhGNB7J983oDcaHuEe+KSZkA40cP eIsFn1+cHKA2U2vIZGuTWSopLMh5tUGXET5n6m7Dz27bhaCtoHYkb/OG95ZqDqOJ MfgFEz3/rQe/h25Nh0b+/YP5ujizCrlNxZkJL1l4a753kZThtsiQAqJgdRDpfxbc m8tUVcJaGURkYQvFsRXDTyZm+WOlO7drZ+FrnTgliYPCd+0Jkzyr07JEz3qPNXs3 Qw/bVcUi6+FmbRPiaa8vAguZOX/kw+62qNJgKGXIVO4he6JymDisK7m6WgwKEdzI 6X8l5o4om/gPcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:44 2025 by rpki-client