This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json) Hash identifier: ORFFkEX+lSRkjQu54MWtkxrvJVRJH8ynajxoA3lsagU= Subject key identifier: A7:B8:16:1D:CD:D6:E6:FB:F1:6D:CB:57:5D:45:25:8C:E4:A7:79:8A Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019AF2401CC70EB00915EF3FF1730EFF2132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft Manifest number: 0F02 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=) 2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: eeGIP/UCexm2Vmb78KZEtPNIQjCBmu1SUG2r1laww60=) 3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1c:c7:0e:b0:09:15:ef:3f:f1:73:0e:ff:21:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=a7b8161dcdd6e6fbf16dcb575d45258ce4a7798a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:0f:c3:68:16:30:bc:d0:c4:f7:fc:db:47: 0b:64:7d:0a:bc:59:c6:61:f7:17:99:08:2c:b4:a7: 20:b0:95:44:65:16:cf:f5:44:f3:62:c2:40:c3:93: c5:ea:4d:13:f0:48:bb:3a:96:49:30:96:fc:09:b1: 9d:40:13:4e:e4:1d:c2:98:df:36:7d:34:3f:ed:ad: bb:c7:ed:f5:e4:1b:7d:ab:e4:66:42:f7:93:9e:31: b0:84:58:c0:5a:1a:07:1f:a3:52:7d:ec:98:6e:af: 0f:13:61:08:8c:60:0d:57:42:98:58:4f:e0:5b:71: 75:e1:8f:d9:c9:4f:56:0a:f9:7c:97:87:f6:51:87: f7:09:ff:a9:7b:d1:e9:b7:45:1f:c3:3f:00:87:f3: a4:5c:16:1e:26:7c:52:d8:83:6c:15:6a:c3:03:b2: 56:21:d8:7b:a8:05:10:50:e3:a2:c8:75:3e:c5:b2: 32:06:cf:ab:bd:e1:a2:b8:3d:80:12:99:8f:22:9c: f3:f0:33:d3:5e:7d:39:ec:61:2e:3c:12:10:03:6c: 8e:ff:6c:be:26:c5:b4:51:21:99:6c:e4:a1:02:22: e4:40:ad:90:5b:65:bf:71:0b:dd:54:8a:e1:2a:2d: ba:e0:4e:67:4f:47:69:b2:36:83:60:13:e4:3d:c0: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B8:16:1D:CD:D6:E6:FB:F1:6D:CB:57:5D:45:25:8C:E4:A7:79:8A X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:4a:0b:f2:35:3a:b9:b3:7f:e2:5b:6f:79:22:6d:ec:01: c9:ea:19:67:4e:a9:03:be:8a:45:53:39:43:18:fe:d0:28:b4: 39:b0:dc:f0:b5:89:81:cd:2f:9e:e0:5c:62:f1:12:f8:e2:34: 0c:4e:87:14:9c:2d:38:b3:8a:13:1a:a4:25:c1:27:67:7b:29: 03:e3:b7:0f:c9:a1:5f:db:c1:42:5d:3c:c6:be:0b:61:e5:d0: b6:63:41:30:1a:4a:93:92:19:fb:5e:d1:5d:36:42:2d:07:00: c9:a2:c8:b3:6e:1b:a7:58:89:0b:a0:1b:63:7c:c5:94:9f:54: 2c:64:9f:b9:13:28:30:ef:3a:60:77:58:f3:46:9a:ae:1c:2e: 74:c2:e0:0a:b3:43:b6:80:f3:6a:cb:ed:9e:a1:68:d8:54:39: 67:86:b8:c8:59:75:11:00:f4:a4:ae:45:bb:23:88:a3:83:13: 27:57:5f:2c:00:6c:ea:9e:91:b7:f5:9c:e1:1c:f4:ec:dd:a0: b9:32:76:19:b6:af:4d:f6:79:69:7e:11:9c:2e:6e:b2:8f:57: 54:3e:8e:97:62:83:c9:45:55:c8:a8:87:de:63:3c:34:04:8d: c2:96:88:52:f0:62:d8:cf:49:17:08:2d:5c:2d:78:72:d2:cd: cf:13:7d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBzHDrAJFe8/8XMO/yEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EyhhN2I4MTYxZGNkZDZlNmZiZjE2ZGNiNTc1ZDQ1MjU4Y2U0YTc3OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviUPw2gWMLzQxPf820cLZH0KvFnG YfcXmQgstKcgsJVEZRbP9UTzYsJAw5PF6k0T8Ei7OpZJMJb8CbGdQBNO5B3CmN82 fTQ/7a27x+315Bt9q+RmQveTnjGwhFjAWhoHH6NSfeyYbq8PE2EIjGANV0KYWE/g W3F14Y/ZyU9WCvl8l4f2UYf3Cf+pe9Hpt0Ufwz8Ah/OkXBYeJnxS2INsFWrDA7JW Idh7qAUQUOOiyHU+xbIyBs+rveGiuD2AEpmPIpzz8DPTXn057GEuPBIQA2yO/2y+ JsW0USGZbOShAiLkQK2QW2W/cQvdVIrhKi264E5nT0dpsjaDYBPkPcDPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe4Fh3N1ub78W3LV11FJYzkp3mKMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffNKC/I1 Ormzf+Jbb3kibewByeoZZ06pA76KRVM5Qxj+0Ci0ObDc8LWJgc0vnuBcYvES+OI0 DE6HFJwtOLOKExqkJcEnZ3spA+O3D8mhX9vBQl08xr4LYeXQtmNBMBpKk5IZ+17R XTZCLQcAyaLIs24bp1iJC6AbY3zFlJ9ULGSfuRMoMO86YHdY80aarhwudMLgCrND toDzasvtnqFo2FQ5Z4a4yFl1EQD0pK5FuyOIo4MTJ1dfLABs6p6Rt/Wc4Rz07N2g uTJ2GbavTfZ5aX4RnC5uso9XVD6Ol2KDyUVVyKiH3mM8NASNwpaIUvBi2M9JFwgt XC14ctLNzxN9+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:12 2025 by rpki-client