This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json) Hash identifier: BdZKGHQuUmhaWEihQAQErT5kZOlnlh3owLu4bZ8ee5U= Subject key identifier: FC:AE:1B:F4:9A:F2:98:C2:6F:36:6D:92:73:F5:9A:B3:74:85:29:40 Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e Certificate serial: 019B0C3782952D904C82920ADBA233BF8815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft Manifest number: 1301 Signing time: Thu 11 Dec 2025 07:02:02 +0000 Manifest this update: Thu 11 Dec 2025 07:02:02 +0000 Manifest next update: Fri 12 Dec 2025 07:02:02 +0000 Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: OPqX1vSbq4qb3El6QYtJTkShANUdjSyrIr+ia+1Kwsg=) 2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:82:95:2d:90:4c:82:92:0a:db:a2:33:bf:88:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e Validity Not Before: Dec 11 07:02:02 2025 GMT Not After : Dec 12 07:02:02 2025 GMT Subject: CN=fcae1bf49af298c26f366d9273f59ab374852940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:7b:8f:54:67:e0:00:57:ce:72:b2:c8:78: 45:00:70:79:ce:67:36:93:16:0e:71:55:fa:6e:e4: 09:06:29:ac:39:51:fe:a2:20:f7:69:19:b2:2c:71: 5a:90:5c:06:8d:bd:53:58:5c:8b:d5:9d:d9:64:4c: c7:fd:fa:15:dd:1a:6f:db:a2:34:8a:c2:87:a2:26: 62:5a:4a:a2:32:ac:14:8d:b3:0a:ea:f5:5a:4f:3c: 93:73:70:eb:7c:c0:be:07:56:29:96:50:8c:18:92: a8:7d:94:33:92:6f:13:cf:1a:e5:8a:26:88:3d:2f: 52:5d:87:08:4e:c9:e9:75:5b:eb:91:18:07:37:31: ed:4b:f7:d5:58:8a:f8:c4:b2:c5:22:2c:ab:52:d1: ff:ad:5a:92:e6:90:06:f5:f7:17:02:44:b7:0a:16: ac:ef:af:6d:da:ca:9e:85:f8:27:43:07:b6:91:53: bc:96:16:5d:6a:99:3b:3a:81:43:47:b9:d0:9e:4b: 22:65:9a:e4:5d:66:5c:2c:65:62:37:04:28:a0:62: af:0b:a6:0e:ed:70:64:f1:99:5f:69:aa:20:c0:9d: 18:82:9e:9a:68:4a:02:d0:a3:f1:94:41:4b:2b:d9: e5:2b:3a:9e:be:2d:d6:b4:ad:9e:3c:36:1c:da:ee: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AE:1B:F4:9A:F2:98:C2:6F:36:6D:92:73:F5:9A:B3:74:85:29:40 X509v3 Authority Key Identifier: keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f8:f3:8c:bc:73:db:d5:0f:2a:b5:11:60:dd:eb:a1:ec:5a: 5a:22:17:3f:3a:bf:27:fb:d5:ba:8a:df:85:b9:f0:ad:b9:63: 8d:8f:d7:f4:d0:77:7e:91:e6:9a:a8:74:30:d5:eb:4b:94:22: 40:48:b9:e4:cb:22:4b:73:b9:f2:9f:72:be:f3:9f:97:5d:ab: e8:a3:20:68:8e:4e:b3:58:c4:7a:63:12:a5:ab:e4:20:15:58: 86:21:cb:af:55:c0:f0:6a:b1:d0:f2:7c:96:1b:1c:68:a7:41: 14:9b:31:02:e8:94:be:0e:03:bb:9b:a7:7a:40:5d:46:8b:bf: e1:80:01:22:87:f9:53:c1:3d:01:15:79:15:92:7f:b6:19:1b: fb:96:13:be:69:b1:ec:30:b9:b8:4a:e7:2d:35:ca:f5:55:b7: 77:86:42:9b:96:60:f6:a5:3e:7d:7d:74:03:6a:17:b4:08:aa: 93:71:13:7c:0d:4e:09:b9:6d:a7:ef:51:a7:c8:da:f7:72:32: 66:7a:a8:eb:a1:ed:e4:c8:b0:69:69:6e:ed:53:87:5f:dd:da: b0:ad:ba:15:60:64:16:3f:d5:13:a3:a7:5b:10:09:23:6c:a3: 4d:95:dd:7f:4a:e9:5c:db:8e:a8:2b:e1:15:af:a5:82:bc:92: 15:a5:51:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMN4KVLZBMgpIK26Izv4gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzkxYWUyOGE5MWQ1OTkxMzQ2YWVkYWYxN2JmODYwNWM4 Y2YyMmUwHhcNMjUxMjExMDcwMjAyWhcNMjUxMjEyMDcwMjAyWjAzMTEwLwYDVQQD EyhmY2FlMWJmNDlhZjI5OGMyNmYzNjZkOTI3M2Y1OWFiMzc0ODUyOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiF7j1Rn4ABXznKyyHhFAHB5zmc2 kxYOcVX6buQJBimsOVH+oiD3aRmyLHFakFwGjb1TWFyL1Z3ZZEzH/foV3Rpv26I0 isKHoiZiWkqiMqwUjbMK6vVaTzyTc3DrfMC+B1YpllCMGJKofZQzkm8TzxrliiaI PS9SXYcITsnpdVvrkRgHNzHtS/fVWIr4xLLFIiyrUtH/rVqS5pAG9fcXAkS3Chas 769t2sqehfgnQwe2kVO8lhZdapk7OoFDR7nQnksiZZrkXWZcLGViNwQooGKvC6YO 7XBk8ZlfaaogwJ0Ygp6aaEoC0KPxlEFLK9nlKzqevi3WtK2ePDYc2u5FhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyuG/Sa8pjCbzZtknP1mrN0hSlAMB8GA1UdIwQY MBaAFCc5GuKKkdWZE0au2vF7+GBcjPIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAt YTRjMTI4MDc1ODYyLzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAtYTRjMTI4MDc1ODYy LzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvjzjLxz 29UPKrURYN3roexaWiIXPzq/J/vVuorfhbnwrbljjY/X9NB3fpHmmqh0MNXrS5Qi QEi55MsiS3O58p9yvvOfl12r6KMgaI5Os1jEemMSpavkIBVYhiHLr1XA8Gqx0PJ8 lhscaKdBFJsxAuiUvg4Du5unekBdRou/4YABIof5U8E9ARV5FZJ/thkb+5YTvmmx 7DC5uErnLTXK9VW3d4ZCm5Zg9qU+fX10A2oXtAiqk3ETfA1OCbltp+9Rp8ja93Iy Znqo66Ht5MiwaWlu7VOHX93asK26FWBkFj/VE6OnWxAJI2yjTZXdf0rpXNuOqCvh Fa+lgrySFaVR3g== -----END CERTIFICATE-----Generated at Thu Dec 11 16:12:32 2025 by rpki-client