This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json) Hash identifier: JBvQkWOr6QEhPnMRZ/Dm9xkyPUHmY7W5u2aK0mPBf/I= Subject key identifier: A9:99:08:96:3A:56:BD:0E:74:96:16:99:82:81:3B:15:E7:D0:43:02 Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88 Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888 Certificate serial: 019AF208DAC7DA36A67E9481512E5287EEA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=) 2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: 3jquW3lc/Z6+WqJiJ7MbYS4DlhYGiNfgLQHKKCF3HCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:da:c7:da:36:a6:7e:94:81:51:2e:52:87:ee:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=a99908963a56bd0e7496169982813b15e7d04302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:4b:a4:c5:bf:fc:00:55:ef:2c:a8:ce:a0: 4e:7f:f2:25:d9:3b:2e:ab:a9:3a:b6:61:8b:15:12: 4f:c2:8f:e8:0b:45:50:6d:a8:e5:6b:50:99:5c:ab: 05:f3:60:c4:1a:89:45:b3:44:de:d9:af:cf:4b:49: 48:cc:c1:b7:c1:fe:e3:e0:95:df:b5:77:69:9d:7a: 38:eb:5a:fb:0a:ba:80:2a:8a:60:1f:6d:d4:fe:8d: 4f:b9:ce:26:3a:58:af:60:ce:aa:4a:e7:01:92:89: 0d:e5:be:f5:9e:38:3e:b6:4a:42:f4:0d:cc:bc:a8: 0d:55:df:85:d1:24:4d:88:49:07:0a:77:f6:2b:01: 71:4b:9c:cf:17:05:c9:0f:f5:18:46:c1:91:4f:53: c9:6f:e7:bf:44:11:69:7b:ca:d8:d7:09:df:2e:e8: e5:75:7f:91:87:da:72:51:d7:57:5d:39:5b:e8:43: 0a:00:f1:6b:ad:fa:d9:01:20:e6:98:b5:34:6e:93: 61:ec:09:90:f7:91:d7:72:19:fe:bd:c9:93:62:5f: 48:e7:54:dd:b4:2a:1d:85:6a:21:06:59:8b:81:1e: 9f:a7:0b:62:6f:de:fb:7a:d5:b1:76:91:6e:15:92: 12:c4:87:e7:c5:cd:cb:57:44:55:69:f3:ef:0c:33: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:08:96:3A:56:BD:0E:74:96:16:99:82:81:3B:15:E7:D0:43:02 X509v3 Authority Key Identifier: keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e6:05:70:18:40:1f:73:86:a1:1d:88:ba:8f:fd:ac:11:2c: 0e:11:93:52:14:d1:6e:dc:c7:af:cc:fa:24:e6:bd:a3:9c:c7: d8:94:f8:16:a7:66:0f:94:23:c0:f8:a1:e4:59:71:6f:d2:73: 7e:be:d9:ea:99:9b:4f:e7:72:73:42:c6:e8:99:18:be:c0:d8: f3:47:1e:f7:10:53:1b:cc:e8:90:85:11:f8:b8:4d:92:5d:de: be:dd:54:58:83:ff:3c:30:cf:ce:17:15:3e:8d:5c:97:51:25: 6b:18:1a:ea:2b:d2:1b:6a:a8:8d:c4:7d:83:eb:a2:1f:8e:c6: 06:06:5e:dc:dd:60:b0:31:79:8d:8f:95:7d:d2:ce:14:1a:77: 69:84:9a:ab:51:e0:47:e9:90:90:9e:f0:3d:f3:4e:2d:c7:83: 88:c3:8a:06:7e:27:c0:3e:13:81:e9:81:c5:d6:c5:9f:2f:fa: 97:79:67:96:3a:17:00:e8:ba:88:1a:5f:f9:e2:4c:37:2b:d8: 2f:7b:5d:76:b6:43:3f:a1:9e:33:41:00:4a:35:20:58:cc:d3: 69:b1:82:f8:eb:b6:ec:3c:ff:8e:1f:a2:d0:13:e6:8d:95:21: 56:f0:33:bc:93:13:f9:69:43:30:e9:0e:d7:dd:55:26:5f:bf: f6:e8:69:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNrH2jamfpSBUS5Sh+6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjI1OTlkOTVlYzkxOTMyN2ZmNjg3NDJkNmM0OWMyYTZh NTQ4ODgwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EyhhOTk5MDg5NjNhNTZiZDBlNzQ5NjE2OTk4MjgxM2IxNWU3ZDA0MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvytLpMW//ABV7yyozqBOf/Il2Tsu q6k6tmGLFRJPwo/oC0VQbajla1CZXKsF82DEGolFs0Te2a/PS0lIzMG3wf7j4JXf tXdpnXo461r7CrqAKopgH23U/o1Puc4mOlivYM6qSucBkokN5b71njg+tkpC9A3M vKgNVd+F0SRNiEkHCnf2KwFxS5zPFwXJD/UYRsGRT1PJb+e/RBFpe8rY1wnfLujl dX+Rh9pyUddXXTlb6EMKAPFrrfrZASDmmLU0bpNh7AmQ95HXchn+vcmTYl9I51Td tCodhWohBlmLgR6fpwtib977etWxdpFuFZISxIfnxc3LV0RVafPvDDOl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmZCJY6Vr0OdJYWmYKBOxXn0EMCMB8GA1UdIwQY MBaAFHPyWZ2V7JGTJ/9odC1sScKmpUiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTct MTgzMDlkOGE0YzYzLzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTctMTgzMDlkOGE0YzYz LzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+YFcBhA H3OGoR2Iuo/9rBEsDhGTUhTRbtzHr8z6JOa9o5zH2JT4FqdmD5QjwPih5Flxb9Jz fr7Z6pmbT+dyc0LG6JkYvsDY80ce9xBTG8zokIUR+LhNkl3evt1UWIP/PDDPzhcV Po1cl1Elaxga6ivSG2qojcR9g+uiH47GBgZe3N1gsDF5jY+VfdLOFBp3aYSaq1Hg R+mQkJ7wPfNOLceDiMOKBn4nwD4TgemBxdbFny/6l3lnljoXAOi6iBpf+eJMNyvY L3tddrZDP6GeM0EASjUgWMzTabGC+Ou27Dz/jh+i0BPmjZUhVvAzvJMT+WlDMOkO 191VJl+/9uhpUA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client