This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json) Hash identifier: 9IuS0JCMNMkOQ9g4/FLS4jFJAVRznnrKm/r38FTU1Oc= Subject key identifier: E3:F5:AD:46:5E:6B:E5:4A:37:EF:4C:39:73:65:E9:8A:BD:A9:54:93 Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97 Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97 Certificate serial: 019AF088734141E466FA8A40220DD62B64C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft Manifest number: 60 Signing time: Fri 05 Dec 2025 22:01:05 +0000 Manifest this update: Fri 05 Dec 2025 22:01:05 +0000 Manifest next update: Sat 06 Dec 2025 22:01:05 +0000 Files and hashes: 1: 1-O-D5pri3mmR8booyMgtZ5-BGW4.roa (hash: jb6YU5fT/HqK2xKc/LbLrArBSelpTLeT7YITNpvV0to=) 2: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: XoRITW4eMs0JVdY0zhn2E/drh0UANyEkX/gUuyW6mYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:73:41:41:e4:66:fa:8a:40:22:0d:d6:2b:64:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97 Validity Not Before: Dec 5 22:01:05 2025 GMT Not After : Dec 6 22:01:05 2025 GMT Subject: CN=e3f5ad465e6be54a37ef4c397365e98abda95493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:dd:3d:5b:6a:c2:e9:2a:85:fd:36:bf:6c: 34:a4:fd:57:5b:ba:52:d0:71:75:9a:8e:cf:73:6c: a9:47:b2:0f:e5:44:2c:34:f6:bc:cf:4a:23:f2:8c: ae:19:9c:13:aa:d9:3b:99:81:91:02:4e:69:5e:cb: 1f:a1:70:c9:a3:cc:12:26:dc:f5:48:3b:84:86:36: ee:6d:0f:48:ea:ab:a8:ab:28:77:63:c0:94:f6:c5: 6a:66:50:94:3c:46:1a:b5:d5:dc:23:34:01:9b:b0: 51:68:31:ea:63:0e:26:eb:f6:0c:e7:31:14:84:47: fb:b7:bc:cc:e1:17:13:dd:f4:ac:20:45:c0:05:3b: 79:a2:ef:03:36:b0:80:a3:69:ce:2b:a7:1e:92:ee: b6:da:6e:bc:61:f9:a7:98:f7:78:42:b9:3c:4e:6f: e9:42:e3:62:d4:33:6f:fa:eb:30:8c:6f:e2:18:e3: 8f:d8:b2:73:23:56:6d:3e:a3:83:14:c3:e9:6f:45: d7:29:06:0c:03:da:24:9f:a0:93:82:e1:9f:c4:e3: 62:da:60:c0:77:7e:1b:19:bb:c8:76:8c:ff:82:16: e5:c7:6e:89:ff:99:4a:de:c4:53:14:93:19:e9:46: 25:10:0c:89:64:69:3d:89:fb:10:55:05:83:bf:63: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:AD:46:5E:6B:E5:4A:37:EF:4C:39:73:65:E9:8A:BD:A9:54:93 X509v3 Authority Key Identifier: keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c5:65:da:78:ab:85:53:a0:69:a4:2a:67:7f:fb:e7:0f:c7: ef:7d:5a:5b:77:31:82:be:19:f0:0f:2b:4c:eb:59:11:5e:65: f2:26:88:ba:e0:3a:d0:ce:d9:07:fe:a5:33:b6:10:17:85:dc: 7c:1e:1e:0d:be:7f:13:f1:b2:e3:fb:39:bb:49:1e:3f:f2:5f: c7:40:2a:57:74:9e:77:5c:3b:dc:43:5f:9d:ff:6e:64:c7:fc: ab:dd:ce:64:f6:24:1c:73:58:32:eb:64:78:22:da:87:1e:15: 1f:4d:8e:fc:ef:17:f9:77:b3:b5:fe:d5:8e:4d:fd:37:ba:cf: 1b:71:fd:a0:29:96:dd:29:ab:b0:90:59:25:d1:b1:ca:29:10: 40:79:fe:34:71:96:49:c3:47:6f:7a:0c:47:90:33:4c:5e:1c: 20:86:40:df:ef:67:13:ba:0b:ba:25:b1:d8:b9:9f:9b:b9:bc: 6f:da:c4:37:2c:78:3b:77:59:b8:12:fc:25:08:e7:4b:6a:01: b4:7b:9e:61:05:0c:67:ae:ec:fe:8c:18:36:29:17:2c:3d:0f: b1:08:fc:43:d6:7a:f8:94:be:97:08:e7:15:a2:64:bb:5b:fa: 70:c4:84:6f:b6:49:0e:a5:98:f2:18:35:35:c7:fb:d6:22:5a: cd:24:79:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHNBQeRm+opAIg3WK2TFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTRhOGIzZDc1YzViMjIwZWQ5OWNmMmU3MjAwNGY2ZWMx MWFhOTcwHhcNMjUxMjA1MjIwMTA1WhcNMjUxMjA2MjIwMTA1WjAzMTEwLwYDVQQD EyhlM2Y1YWQ0NjVlNmJlNTRhMzdlZjRjMzk3MzY1ZTk4YWJkYTk1NDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCndPVtqwukqhf02v2w0pP1XW7pS 0HF1mo7Pc2ypR7IP5UQsNPa8z0oj8oyuGZwTqtk7mYGRAk5pXssfoXDJo8wSJtz1 SDuEhjbubQ9I6quoqyh3Y8CU9sVqZlCUPEYatdXcIzQBm7BRaDHqYw4m6/YM5zEU hEf7t7zM4RcT3fSsIEXABTt5ou8DNrCAo2nOK6ceku622m68YfmnmPd4Qrk8Tm/p QuNi1DNv+uswjG/iGOOP2LJzI1ZtPqODFMPpb0XXKQYMA9okn6CTguGfxONi2mDA d34bGbvIdoz/ghblx26J/5lK3sRTFJMZ6UYlEAyJZGk9ifsQVQWDv2MBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP1rUZea+VKN+9MOXNl6Yq9qVSTMB8GA1UdIwQY MBaAFCWUqLPXXFsiDtmc8ucgBPbsEaqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjRjZGUtMWFhNi00ZTg4LTlhM2Mt MWNhOWMyNjJjZTczLzEvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYjRjZGUtMWFhNi00ZTg4LTlhM2MtMWNhOWMyNjJjZTcz LzEvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcVl2nir hVOgaaQqZ3/75w/H731aW3cxgr4Z8A8rTOtZEV5l8iaIuuA60M7ZB/6lM7YQF4Xc fB4eDb5/E/Gy4/s5u0keP/Jfx0AqV3Sed1w73ENfnf9uZMf8q93OZPYkHHNYMutk eCLahx4VH02O/O8X+Xeztf7Vjk39N7rPG3H9oCmW3SmrsJBZJdGxyikQQHn+NHGW ScNHb3oMR5AzTF4cIIZA3+9nE7oLuiWx2Lmfm7m8b9rENyx4O3dZuBL8JQjnS2oB tHueYQUMZ67s/owYNikXLD0PsQj8Q9Z6+JS+lwjnFaJku1v6cMSEb7ZJDqWY8hg1 Ncf71iJazSR5hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:48 2025 by rpki-client