This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json) Hash identifier: 2cg//9hmv/jSozlsEi21lmTRtvLBWxeTB31zKWFl2AI= Subject key identifier: 8B:73:F2:8D:19:81:0B:42:82:BE:14:65:76:53:00:E1:F2:CD:11:09 Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019AF23FDB5EF7EF03CE51C458E858266464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft Manifest number: 0C46 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=) 2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: ZVK6MvXpvxu+VtAbeqlJbtkPYOdSYbvnxX+vVC9wbaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:db:5e:f7:ef:03:ce:51:c4:58:e8:58:26:64:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=8b73f28d19810b4282be1465765300e1f2cd1109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:b8:3c:2a:0e:8b:a5:44:84:53:f7:10:e5: ff:09:b2:12:c5:94:e8:80:ea:12:a0:b2:5f:cb:88: 7c:ba:b7:aa:a5:22:f7:8c:62:02:13:a4:c8:8e:ea: c2:0c:f9:4d:73:61:9a:19:cb:b1:c8:fb:50:3f:f6: 6d:70:26:d5:8e:c6:e2:08:4e:e4:e9:0d:1b:e8:bc: a1:29:75:fd:c6:f0:20:e9:3e:17:d8:80:24:25:ed: 50:8f:6b:e0:86:49:ad:6d:19:79:70:48:f4:1b:c1: 81:b8:e0:17:8e:cd:7f:30:28:13:06:76:fe:f5:69: 71:75:92:a1:26:ad:d5:48:36:c9:88:6d:63:e0:4f: 35:a2:6f:eb:b1:ba:ed:ca:13:95:52:16:68:78:f6: bf:36:97:70:ac:7f:14:73:bb:38:3f:de:db:4e:d7: 47:b5:4c:56:1b:f7:0c:d5:53:b3:6b:5a:94:dc:32: c9:dc:c9:d2:b3:62:ff:19:ff:fb:5b:a7:f0:8d:cc: 1b:b2:62:7a:60:b8:08:c4:72:9c:a7:e9:53:1e:76: 77:e1:e9:14:4e:68:33:96:f3:d5:d9:e5:b0:17:a8: 80:fe:99:bd:0b:2b:d9:74:98:3c:7f:20:48:2e:a3: 54:c1:60:cb:dc:86:a7:ce:10:19:a6:25:7e:17:e2: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:73:F2:8D:19:81:0B:42:82:BE:14:65:76:53:00:E1:F2:CD:11:09 X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:89:4a:40:ae:3d:18:78:6e:b3:9a:38:ad:fb:58:cc:28:14: cd:32:5b:ca:ba:9b:7a:a4:ad:29:ce:6f:f2:73:cf:19:27:a7: 4d:67:4a:d5:65:cc:dd:42:f7:bd:5d:20:23:d5:f3:ae:ce:dd: c9:02:94:23:10:7c:53:65:c6:ce:74:72:2c:27:63:40:42:30: 21:3e:42:17:fd:fd:40:ee:9a:e3:94:16:91:00:da:3a:7b:da: 1a:61:2b:4b:dc:7e:cd:93:97:38:46:b3:95:64:29:0e:e9:ab: 4c:6c:07:21:19:45:2e:bc:56:9c:3a:3a:03:41:a5:b9:54:4a: 0c:b9:bb:dd:e6:ca:08:59:02:cd:d5:7a:e4:8a:44:4d:88:8a: 47:10:c3:f6:5d:4a:88:20:72:2c:fe:1f:fa:08:11:d0:e9:fc: d1:e1:d0:e7:e2:7c:e0:b4:70:38:24:31:05:be:67:97:c8:43: 16:f6:e8:a3:24:24:d3:a7:74:eb:72:9e:f2:2f:92:ca:d0:12: 75:fe:4b:e5:38:08:7f:05:34:9a:dc:61:34:d1:69:39:3e:6e: 8c:0f:ce:32:a7:29:dc:6e:de:d4:cf:80:64:a0:6f:5a:7c:3f: 3e:2f:55:e8:fb:d3:4e:be:57:82:eb:4b:f2:0a:df:4f:d5:23: 06:2f:73:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9te9+8DzlHEWOhYJmRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg4YjczZjI4ZDE5ODEwYjQyODJiZTE0NjU3NjUzMDBlMWYyY2QxMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRi4PCoOi6VEhFP3EOX/CbISxZTo gOoSoLJfy4h8ureqpSL3jGICE6TIjurCDPlNc2GaGcuxyPtQP/ZtcCbVjsbiCE7k 6Q0b6LyhKXX9xvAg6T4X2IAkJe1Qj2vghkmtbRl5cEj0G8GBuOAXjs1/MCgTBnb+ 9WlxdZKhJq3VSDbJiG1j4E81om/rsbrtyhOVUhZoePa/NpdwrH8Uc7s4P97bTtdH tUxWG/cM1VOza1qU3DLJ3MnSs2L/Gf/7W6fwjcwbsmJ6YLgIxHKcp+lTHnZ34ekU TmgzlvPV2eWwF6iA/pm9CyvZdJg8fyBILqNUwWDL3IanzhAZpiV+F+IuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItz8o0ZgQtCgr4UZXZTAOHyzREJMB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4lKQK49 GHhus5o4rftYzCgUzTJbyrqbeqStKc5v8nPPGSenTWdK1WXM3UL3vV0gI9Xzrs7d yQKUIxB8U2XGznRyLCdjQEIwIT5CF/39QO6a45QWkQDaOnvaGmErS9x+zZOXOEaz lWQpDumrTGwHIRlFLrxWnDo6A0GluVRKDLm73ebKCFkCzdV65IpETYiKRxDD9l1K iCByLP4f+ggR0On80eHQ5+J84LRwOCQxBb5nl8hDFvbooyQk06d063Ke8i+SytAS df5L5TgIfwU0mtxhNNFpOT5ujA/OMqcp3G7e1M+AZKBvWnw/Pi9V6PvTTr5XgutL 8grfT9UjBi9zzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:11 2025 by rpki-client