This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft File: jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json) Hash identifier: ksn1GNRJyyHANFoQAsf9jpZgMqheTDpFK4k7owZ+jXs= Subject key identifier: F7:DF:0B:E2:47:33:40:B9:9E:1B:D6:BA:17:51:30:50:24:44:40:9C Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Certificate serial: 019AF389FF70A53D24F63B31CAE9F16C6421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=) 2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: w0NeLZJnef+E8RiS2xrWGBquMcZxlwSKDf/Z53frOus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ff:70:a5:3d:24:f6:3b:31:ca:e9:f1:6c:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=f7df0be2473340b99e1bd6ba175130502444409c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:bf:bb:58:ed:c1:2b:eb:69:2c:05:06:a8: 86:0d:5f:1a:f5:15:fa:d0:12:2f:61:90:50:61:4a: 99:43:ac:f5:3e:65:b7:e9:10:37:0e:a5:9d:9c:4e: 2d:3f:fc:05:f2:63:82:5a:c3:7a:eb:d7:e1:19:d4: f9:b6:97:94:20:ed:d3:1f:62:a8:f7:93:11:3b:df: a8:62:a5:44:d6:d0:26:c6:1b:7f:e1:7a:1b:58:b1: 98:c2:b8:3e:44:c3:c3:2f:6b:cf:79:e8:6f:08:ce: 0a:3f:9c:84:dd:5d:19:59:61:3b:84:12:be:6e:a9: a2:27:a7:63:8e:de:ae:d1:f6:76:f3:0b:70:69:53: 10:e4:f1:8c:8c:c6:50:a9:78:51:33:09:4d:dd:2e: bb:ff:93:8c:08:de:21:f8:05:13:ee:0d:58:8c:47: 9f:59:63:8c:49:7d:ca:d1:b6:2b:ff:0b:2d:02:bf: 42:bf:ca:4c:82:78:5e:ab:75:aa:35:79:a2:c8:16: db:92:c0:f9:33:c1:47:17:d5:48:4c:62:2a:57:b3: 9f:84:0a:f6:ca:6c:d0:4d:44:ba:a1:7c:2b:6d:22: 06:d7:12:76:6b:7c:fe:55:61:bf:c0:d9:6f:4b:f9: b6:6e:6d:eb:a7:3f:31:db:75:b2:97:0b:38:ba:ca: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:0B:E2:47:33:40:B9:9E:1B:D6:BA:17:51:30:50:24:44:40:9C X509v3 Authority Key Identifier: keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cb:90:8a:3b:0c:95:9e:3d:8e:6f:be:7e:a2:9d:fb:23:38: 85:43:3a:39:4c:76:16:a2:07:15:d9:bb:4d:5d:42:01:5c:72: 69:57:22:db:0b:22:11:79:b0:75:fd:cc:0c:66:60:89:72:f4: ae:9f:c4:7f:e0:1e:c6:16:ac:f3:b8:4f:8b:7a:c5:d7:64:e3: 24:8f:b2:23:d6:40:9e:42:1e:ae:47:73:78:36:01:4e:64:ea: c5:a5:63:84:85:fd:f0:36:fb:de:16:a1:d1:45:45:cf:78:c4: db:cf:6e:85:ca:cc:02:0a:fd:c1:3f:d4:a0:7b:36:c8:76:d6: 8b:a0:e9:44:ca:a9:4c:6c:d7:51:1d:1c:39:06:fa:4c:a0:25: 4a:ee:93:ff:ff:6f:43:b9:41:db:85:64:58:86:83:e0:c2:8f: d8:97:6e:4d:e8:45:b0:c3:5d:70:48:7c:b7:d0:22:e2:bb:df: 01:a9:8a:5a:4b:e7:e6:50:a0:b0:6c:f3:50:36:82:e4:ef:e8: 66:cf:59:60:d8:00:73:9f:64:11:84:cf:b4:b1:24:5c:de:b0: cc:ba:8b:7f:9b:0d:33:28:8f:b1:fb:b3:3f:f6:91:23:de:d7: 83:5c:66:d9:8f:26:2c:fb:40:5d:9b:3c:f3:6a:63:69:98:42: 01:f7:1e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzif9wpT0k9jsxyunxbGQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGRiNzliZTg3YmQzODY1NWJhYjcwM2E2MGU3NzRjNGQ2 YzIzNTcwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD EyhmN2RmMGJlMjQ3MzM0MGI5OWUxYmQ2YmExNzUxMzA1MDI0NDQ0MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5O/u1jtwSvraSwFBqiGDV8a9RX6 0BIvYZBQYUqZQ6z1PmW36RA3DqWdnE4tP/wF8mOCWsN669fhGdT5tpeUIO3TH2Ko 95MRO9+oYqVE1tAmxht/4XobWLGYwrg+RMPDL2vPeehvCM4KP5yE3V0ZWWE7hBK+ bqmiJ6djjt6u0fZ28wtwaVMQ5PGMjMZQqXhRMwlN3S67/5OMCN4h+AUT7g1YjEef WWOMSX3K0bYr/wstAr9Cv8pMgnheq3WqNXmiyBbbksD5M8FHF9VITGIqV7OfhAr2 ymzQTUS6oXwrbSIG1xJ2a3z+VWG/wNlvS/m2bm3rpz8x23Wylws4usohGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPffC+JHM0C5nhvWuhdRMFAkRECcMB8GA1UdIwQY MBaAFI8Nt5voe9OGVbq3A6YOd0xNbCNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMt NmQwNzgxNTMyYTQ4LzEvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMtNmQwNzgxNTMyYTQ4 LzEvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8uQijsM lZ49jm++fqKd+yM4hUM6OUx2FqIHFdm7TV1CAVxyaVci2wsiEXmwdf3MDGZgiXL0 rp/Ef+Aexhas87hPi3rF12TjJI+yI9ZAnkIerkdzeDYBTmTqxaVjhIX98Db73hah 0UVFz3jE289uhcrMAgr9wT/UoHs2yHbWi6DpRMqpTGzXUR0cOQb6TKAlSu6T//9v Q7lB24VkWIaD4MKP2JduTehFsMNdcEh8t9Ai4rvfAamKWkvn5lCgsGzzUDaC5O/o Zs9ZYNgAc59kEYTPtLEkXN6wzLqLf5sNMyiPsfuzP/aRI97Xg1xm2Y8mLPtAXZs8 82pjaZhCAfceeA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:43 2025 by rpki-client