This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft File: jzAoLIbxBGuTEkzycOEU5fAm_3M.mft (raw, json) Hash identifier: VrOGIl4Iac1x9wuE9ozKrLyCWMlbR1f9SY2m3asVTJk= Subject key identifier: 62:E8:74:F6:13:A7:1E:B1:AF:CA:F4:C5:18:6E:07:5E:09:1D:7F:C8 Authority key identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73 Certificate issuer: /CN=8f30282c86f1046b93124cf270e114e5f026ff73 Certificate serial: 019AF12DCE4D31674D87C9D067C41A7E9341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft Manifest number: 111F Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: jzAoLIbxBGuTEkzycOEU5fAm_3M.crl (hash: mtxqZI/flcSg/7RIc/vN5LXJGiiXzWxL5EB2fkxl8/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ce:4d:31:67:4d:87:c9:d0:67:c4:1a:7e:93:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f30282c86f1046b93124cf270e114e5f026ff73 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=62e874f613a71eb1afcaf4c5186e075e091d7fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:f8:24:bb:7d:4e:d0:e5:88:d4:5c:48:54: 82:49:9b:89:1e:21:e8:06:18:57:ea:05:67:84:be: 05:81:4b:c6:bf:0a:d1:00:71:bb:3c:11:c7:72:88: a1:60:33:9d:bc:59:82:3c:95:76:da:ad:ed:7c:ce: 5d:fc:52:6f:f3:94:ae:53:73:0d:2a:73:d9:ad:24: e5:aa:27:79:93:3f:df:52:80:91:0b:81:a9:ff:ca: 95:ba:53:0c:26:94:18:0d:64:7b:e1:2f:54:bc:a9: b0:73:1d:19:71:e8:eb:53:b8:65:1c:57:c0:97:4b: a0:7f:ae:e0:9c:ac:e9:64:fe:58:76:93:38:95:45: 27:e9:68:7d:69:c5:a8:38:29:5d:82:b4:3d:81:57: c6:ad:cc:f7:e8:61:9e:9e:5d:4c:6a:c5:18:7b:b3: 4a:00:b0:06:fb:63:71:ba:d2:f9:3a:30:a3:b4:3b: b9:ec:62:29:47:b9:f2:9e:8e:ea:f9:ff:d8:22:6a: 01:5d:77:2f:4d:00:3e:56:cf:85:8e:70:ad:3e:f3: 1e:23:b4:bb:2d:f0:e6:20:de:14:3f:f9:37:b5:52: 34:d8:26:4b:8c:3a:04:86:5c:ca:a9:a2:91:02:b2: b8:09:27:af:6c:07:fb:b0:92:c5:84:83:62:36:27: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E8:74:F6:13:A7:1E:B1:AF:CA:F4:C5:18:6E:07:5E:09:1D:7F:C8 X509v3 Authority Key Identifier: keyid:8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:3a:b2:7e:76:b3:9a:a9:5d:b5:5d:56:87:25:63:05:22: 00:26:f7:89:cb:c4:b3:96:94:e0:cd:09:f5:3e:6f:a2:1e:87: 5c:3a:0b:4b:ad:67:0e:14:ec:89:f7:f0:6b:b4:04:91:5f:4a: 84:67:e1:12:e3:56:90:16:4d:79:4c:6f:6f:be:bc:e1:8e:dd: de:41:d0:bc:a4:c4:8c:f2:98:de:18:e5:e6:8e:43:88:a9:6e: 30:fd:4f:9b:4d:55:43:b8:b7:d1:d7:3d:79:46:c9:4a:2c:67: de:bd:c2:d0:83:32:0e:72:ee:d4:44:05:36:c8:49:15:77:71: 44:5c:ff:f5:32:a9:65:0b:22:fd:df:90:03:0f:b5:af:49:ac: ab:3c:4c:58:92:e7:61:9d:42:f2:1a:a7:7a:b6:14:4e:3f:4d: 08:7b:06:58:45:a5:22:d2:9e:b7:98:e3:68:70:86:f4:5c:36: 2d:c4:15:4b:65:5b:9f:7d:67:d9:ad:97:9b:34:02:ae:21:8e: f3:53:74:5c:af:b9:e4:a0:97:46:66:49:bc:06:1b:80:ec:fe: c7:55:ed:46:99:f5:07:25:02:61:b0:66:fc:75:5a:60:78:7b: dd:58:0d:fb:f8:40:30:40:f2:5a:f6:1b:c1:3b:bc:6a:d3:03: e0:d8:9b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLc5NMWdNh8nQZ8QafpNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzAyODJjODZmMTA0NmI5MzEyNGNmMjcwZTExNGU1ZjAy NmZmNzMwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD Eyg2MmU4NzRmNjEzYTcxZWIxYWZjYWY0YzUxODZlMDc1ZTA5MWQ3ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjb4JLt9TtDliNRcSFSCSZuJHiHo BhhX6gVnhL4FgUvGvwrRAHG7PBHHcoihYDOdvFmCPJV22q3tfM5d/FJv85SuU3MN KnPZrSTlqid5kz/fUoCRC4Gp/8qVulMMJpQYDWR74S9UvKmwcx0ZcejrU7hlHFfA l0ugf67gnKzpZP5YdpM4lUUn6Wh9acWoOCldgrQ9gVfGrcz36GGenl1MasUYe7NK ALAG+2NxutL5OjCjtDu57GIpR7nyno7q+f/YImoBXXcvTQA+Vs+FjnCtPvMeI7S7 LfDmIN4UP/k3tVI02CZLjDoEhlzKqaKRArK4CSevbAf7sJLFhINiNicUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLodPYTpx6xr8r0xRhuB14JHX/IMB8GA1UdIwQY MBaAFI8wKCyG8QRrkxJM8nDhFOXwJv9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpBb0xJYnhCR3VURWt6eWNPRVU1ZkFtXzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2Q3OTgtMzFkNC00NDc4LTk5NjIt Zjk4Nzk2ZjUxMDIyLzEvanpBb0xJYnhCR3VURWt6eWNPRVU1ZkFtXzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82Y2Q3OTgtMzFkNC00NDc4LTk5NjItZjk4Nzk2ZjUxMDIy LzEvanpBb0xJYnhCR3VURWt6eWNPRVU1ZkFtXzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTA6sn52 s5qpXbVdVoclYwUiACb3icvEs5aU4M0J9T5voh6HXDoLS61nDhTsiffwa7QEkV9K hGfhEuNWkBZNeUxvb7684Y7d3kHQvKTEjPKY3hjl5o5DiKluMP1Pm01VQ7i30dc9 eUbJSixn3r3C0IMyDnLu1EQFNshJFXdxRFz/9TKpZQsi/d+QAw+1r0msqzxMWJLn YZ1C8hqnerYUTj9NCHsGWEWlItKet5jjaHCG9Fw2LcQVS2Vbn31n2a2XmzQCriGO 81N0XK+55KCXRmZJvAYbgOz+x1XtRpn1ByUCYbBm/HVaYHh73VgN+/hAMEDyWvYb wTu8atMD4Nibpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:53 2025 by rpki-client