This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft (raw, json) Hash identifier: zHM2x/3GIhZO4OCLWOn2zehE3ggja7Bo+E7RsZKXw3s= Subject key identifier: D4:37:71:DE:F0:AE:7B:89:90:35:1B:AD:DE:1F:9C:76:4E:03:61:61 Authority key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA Certificate issuer: /CN=2736cb723aedd55aec34f400b76cc4678ccba1ba Certificate serial: 019AF3522B24CCFEF29873572CFF48734E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft Manifest number: B6 Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl (hash: pOnX6UpbdMO7u5MJYYGnMp6WfguJpSnD5aaSR4IvbGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2b:24:cc:fe:f2:98:73:57:2c:ff:48:73:4e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=d43771def0ae7b8990351badde1f9c764e036161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:53:5a:3c:01:20:e8:43:25:08:c7:30:4a: 2b:a4:d8:2e:35:1d:b8:fa:45:4e:26:2a:a7:05:18: 62:7b:c9:16:ab:43:9e:cc:73:8c:8e:36:4a:95:09: 8d:30:bd:4a:62:3b:b3:f4:b3:39:03:29:ff:d9:74: 3a:20:73:cc:ff:d5:63:b5:5f:08:56:60:fe:71:9d: fa:aa:86:ed:ca:c3:d3:c3:f7:4b:ee:98:5f:7e:8d: 1d:9a:44:41:54:72:3f:0a:92:32:b2:24:07:b9:a5: 67:ab:cb:be:6f:5c:5a:80:d9:d8:cb:5e:02:dd:e3: 9f:6f:89:6f:da:24:7b:5f:ef:d7:6e:52:24:89:65: 47:4f:e7:52:8d:18:60:87:a6:14:ee:6a:04:02:ee: 72:fa:98:5d:e9:93:42:8a:83:8f:65:03:17:2d:9d: 1d:48:e1:20:b1:32:e8:2d:62:b6:06:93:1f:3d:33: bd:12:0a:a3:ef:d3:b3:59:79:64:ee:bc:01:94:85: 39:9f:c3:d2:20:2a:47:bc:f5:61:57:18:31:11:21: d3:f8:38:de:28:8c:d0:4a:f5:ef:47:5b:77:bd:f8: 3d:45:7b:2b:db:7a:e6:2c:ef:54:7e:8a:6c:29:7d: c5:79:82:d0:cf:d7:bc:b4:f1:a8:5a:85:ee:40:ef: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:71:DE:F0:AE:7B:89:90:35:1B:AD:DE:1F:9C:76:4E:03:61:61 X509v3 Authority Key Identifier: keyid:27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:96:5f:e4:de:e8:28:af:35:97:83:46:64:f1:9d:55:82: 84:df:88:f5:b1:49:b0:15:12:4e:4f:38:d7:b4:02:ef:31:aa: 39:2d:de:f1:60:37:cc:80:83:19:d8:37:a9:55:0f:1c:74:76: 62:9a:40:45:ab:0d:9a:02:08:7a:b7:bd:b0:e2:50:e3:94:18: 34:70:de:06:98:1a:68:4b:73:1c:21:fa:73:5b:f2:1f:5f:9f: ff:2d:90:ca:1c:45:bb:cd:6e:68:e7:ae:34:a7:b5:b4:2e:5d: f9:d8:c1:dc:8c:cd:6e:b4:ed:c6:ae:0e:e4:32:fe:54:83:20: 46:be:23:be:2f:b8:14:ab:06:d9:99:0e:e5:32:bd:bc:05:6e: a1:41:bf:3d:89:cd:fd:07:ce:b8:40:70:cd:c0:16:54:86:a2: 9a:2e:01:23:ca:e8:11:3a:b1:9a:50:d0:8c:c0:ff:1e:f7:fd: 17:65:4e:4e:e7:52:e8:ba:91:39:63:be:a9:09:84:4f:b9:9e: 3d:02:8e:23:72:fd:79:1a:d3:62:fb:01:39:5f:09:76:76:e1: 4b:53:58:7f:81:55:e0:16:5a:4b:66:21:72:91:c1:b4:1f:bd: f5:d6:86:ce:bc:75:10:5b:d7:7c:7c:ac:5f:5a:ff:3c:e7:a1: f8:0b:20:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiskzP7ymHNXLP9Ic04BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzZjYjcyM2FlZGQ1NWFlYzM0ZjQwMGI3NmNjNDY3OGNj YmExYmEwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD EyhkNDM3NzFkZWYwYWU3Yjg5OTAzNTFiYWRkZTFmOWM3NjRlMDM2MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpTWjwBIOhDJQjHMEorpNguNR24 +kVOJiqnBRhie8kWq0OezHOMjjZKlQmNML1KYjuz9LM5Ayn/2XQ6IHPM/9VjtV8I VmD+cZ36qobtysPTw/dL7phffo0dmkRBVHI/CpIysiQHuaVnq8u+b1xagNnYy14C 3eOfb4lv2iR7X+/XblIkiWVHT+dSjRhgh6YU7moEAu5y+phd6ZNCioOPZQMXLZ0d SOEgsTLoLWK2BpMfPTO9Egqj79OzWXlk7rwBlIU5n8PSICpHvPVhVxgxESHT+Dje KIzQSvXvR1t3vfg9RXsr23rmLO9UfopsKX3FeYLQz9e8tPGoWoXuQO+3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ3cd7wrnuJkDUbrd4fnHZOA2FhMB8GA1UdIwQY MBaAFCc2y3I67dVa7DT0ALdsxGeMy6G6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hYWJiMDMtMmFjOC00MDY1LWFmOGMt NDdlZjJhOThiMjJkLzEvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hYWJiMDMtMmFjOC00MDY1LWFmOGMtNDdlZjJhOThiMjJk LzEvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAeWX+Te 6CivNZeDRmTxnVWChN+I9bFJsBUSTk8417QC7zGqOS3e8WA3zICDGdg3qVUPHHR2 YppARasNmgIIere9sOJQ45QYNHDeBpgaaEtzHCH6c1vyH1+f/y2QyhxFu81uaOeu NKe1tC5d+djB3IzNbrTtxq4O5DL+VIMgRr4jvi+4FKsG2ZkO5TK9vAVuoUG/PYnN /QfOuEBwzcAWVIaimi4BI8roETqxmlDQjMD/Hvf9F2VOTudS6LqROWO+qQmET7me PQKOI3L9eRrTYvsBOV8JdnbhS1NYf4FV4BZaS2YhcpHBtB+99daGzrx1EFvXfHys X1r/POeh+AsghA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:06 2025 by rpki-client