This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json) Hash identifier: BD3Pf5P+otftl2qTCwL5Al9K7wSiQBUCK8Y0TxrjMS8= Subject key identifier: B6:23:6A:EF:1A:67:2D:4E:EA:EA:BC:DB:51:F5:CA:CA:C6:04:CF:E0 Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Certificate serial: 019B3DFE908952FEEE70992C9C2867F480F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft Manifest number: 1551 Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=) 2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: GlQklBlfeEH8Es9WbpKXIro9JFqMxRbAhm/v4HfKutY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:90:89:52:fe:ee:70:99:2c:9c:28:67:f4:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=b6236aef1a672d4eeaeabcdb51f5cacac604cfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:58:6e:87:28:75:5b:b3:5d:24:4e:97:db: 08:02:3e:39:00:24:3b:4d:0b:e1:2f:d1:06:ff:b6: 30:24:0b:e1:1f:c9:d6:6e:3b:bc:2a:93:c4:a3:80: e5:b9:c7:62:c1:a6:b8:3c:24:a4:db:1a:89:d7:53: 0d:74:db:57:9e:44:9e:27:4d:a7:0b:f5:08:b2:ee: 82:2b:af:b9:57:d8:35:f2:07:a0:fd:d4:5b:c3:3b: b3:b4:c7:fb:b5:46:52:ad:3f:c9:c2:4b:ac:d8:58: 14:d4:ec:e0:d2:aa:73:99:bf:0a:8d:c2:0f:d9:2e: e2:ba:10:41:2a:84:6f:2c:94:6c:7e:a2:60:18:71: 42:1b:de:99:98:38:5d:d7:6e:79:ef:b5:98:34:08: 35:43:13:d3:51:7c:9f:39:8e:61:5a:b0:95:3a:a7: 3e:40:2e:99:92:d4:eb:68:0a:da:d7:bc:d9:0d:78: f2:4c:bd:ef:64:d1:ee:cd:12:d3:e1:51:17:17:01: 06:d7:17:f4:ae:eb:58:1a:94:4c:55:70:98:27:7d: 1c:3b:ae:26:70:af:2c:73:a5:1d:7f:ff:bd:08:db: fd:ad:ef:93:89:db:ae:95:f0:06:b8:7c:96:f9:1b: c1:99:8f:3b:3c:b1:c8:aa:29:ab:47:13:ba:5b:9e: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:6A:EF:1A:67:2D:4E:EA:EA:BC:DB:51:F5:CA:CA:C6:04:CF:E0 X509v3 Authority Key Identifier: keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0c:78:bf:b2:ef:23:16:bd:0a:91:46:38:3e:02:b7:16:c4: 57:27:f7:16:a3:d7:1f:ec:0c:8b:ac:de:dd:7b:cf:06:b1:b9: 98:a6:81:10:29:a4:86:fd:7a:70:61:cd:11:dd:a4:33:91:2e: 19:84:6b:6f:71:da:0b:85:16:5e:6b:c9:90:ee:8d:0a:9f:23: 4e:c8:a3:9b:71:3b:5b:fc:b2:f2:82:c6:02:a8:13:ff:20:68: 7a:69:9f:9c:ef:ba:36:e7:32:42:01:bb:f5:36:eb:b7:ce:32: 41:37:6b:89:c2:fc:51:e9:70:7f:d8:11:ee:58:c8:8f:9a:27: 0e:dc:48:9b:5f:45:df:cf:c5:92:e8:b9:01:49:8d:23:5e:33: bc:74:f5:f0:ae:46:38:0d:9c:ef:7f:fc:2c:b1:7d:fe:a9:92: 54:4a:32:75:11:81:7a:d5:07:9e:00:09:27:ce:c9:2d:79:0a: 51:df:79:54:3c:a7:ca:89:a9:ce:24:39:7e:ce:03:46:6e:5d: 9e:27:8a:8c:c8:34:60:1a:44:03:cc:10:6c:c3:aa:0a:fa:05: fa:7c:79:ec:6e:b8:13:21:19:1d:df:b8:c9:29:3a:02:c0:d4: 0b:f6:1a:67:0d:1e:bb:75:be:e9:e6:2b:08:de:1e:79:55:06: df:5b:a1:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pCJUv7ucJksnChn9ID1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5 NDg5M2YwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD EyhiNjIzNmFlZjFhNjcyZDRlZWFlYWJjZGI1MWY1Y2FjYWM2MDRjZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qNYbocodVuzXSROl9sIAj45ACQ7 TQvhL9EG/7YwJAvhH8nWbju8KpPEo4Dlucdiwaa4PCSk2xqJ11MNdNtXnkSeJ02n C/UIsu6CK6+5V9g18geg/dRbwzuztMf7tUZSrT/Jwkus2FgU1Ozg0qpzmb8KjcIP 2S7iuhBBKoRvLJRsfqJgGHFCG96ZmDhd125577WYNAg1QxPTUXyfOY5hWrCVOqc+ QC6ZktTraAra17zZDXjyTL3vZNHuzRLT4VEXFwEG1xf0rutYGpRMVXCYJ30cO64m cK8sc6Udf/+9CNv9re+TiduulfAGuHyW+RvBmY87PLHIqimrRxO6W57x+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYjau8aZy1O6uq821H1ysrGBM/gMB8GA1UdIwQY MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt YmUyYjNlYWI0ZDc0LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0 LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgx4v7Lv Ixa9CpFGOD4CtxbEVyf3FqPXH+wMi6ze3XvPBrG5mKaBECmkhv16cGHNEd2kM5Eu GYRrb3HaC4UWXmvJkO6NCp8jTsijm3E7W/yy8oLGAqgT/yBoemmfnO+6NucyQgG7 9Tbrt84yQTdricL8Uelwf9gR7ljIj5onDtxIm19F38/Fkui5AUmNI14zvHT18K5G OA2c73/8LLF9/qmSVEoydRGBetUHngAJJ87JLXkKUd95VDynyompziQ5fs4DRm5d nieKjMg0YBpEA8wQbMOqCvoF+nx57G64EyEZHd+4ySk6AsDUC/YaZw0eu3W+6eYr CN4eeVUG31uhmw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:53 2025 by rpki-client