This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json) Hash identifier: qHnnx581CZFVMjss6tPHPCixUHde3VsWnrJTFFvh3mI= Subject key identifier: B1:2C:1B:A7:CD:2C:E8:C7:0D:2A:7F:70:54:B7:A3:9F:D8:59:B9:BF Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019B2C2F9AC9693C304347AC253D9BFFEEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft Manifest number: 0C64 Signing time: Wed 17 Dec 2025 12:01:15 +0000 Manifest this update: Wed 17 Dec 2025 12:01:15 +0000 Manifest next update: Thu 18 Dec 2025 12:01:15 +0000 Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=) 2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: PDQAwqQ82atFepRymhW2JM5DwOvnzMv3lEPorjCNkjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:9a:c9:69:3c:30:43:47:ac:25:3d:9b:ff:ee:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Dec 17 12:01:15 2025 GMT Not After : Dec 18 12:01:15 2025 GMT Subject: CN=b12c1ba7cd2ce8c70d2a7f7054b7a39fd859b9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:09:ac:99:45:e3:77:94:ee:a0:cf:c7:cc: 86:73:cf:fe:06:dc:d7:a2:cf:6b:2f:dd:5f:e5:fd: a8:d8:ab:41:dd:30:8f:b3:34:6f:8e:fa:9d:69:2f: 9a:e2:1a:4a:19:c6:3d:4d:24:4e:a2:0a:1a:7b:76: 48:cd:7c:98:d7:0c:10:55:e4:dc:7e:f8:43:df:7a: 44:fe:3b:02:66:6f:e5:28:17:32:a6:0b:cd:7b:29: fb:ba:ec:20:a6:87:e7:a2:04:b0:7a:4b:24:1f:e1: e2:8e:1d:44:b9:08:e5:b3:8e:44:c6:cd:bc:cb:51: ed:6d:86:13:6b:ea:5f:38:7c:ed:b1:8a:9c:e1:a0: 3f:0f:4d:ac:a4:3a:f2:d9:7e:a8:81:f8:2d:18:c2: 50:9d:a3:df:8e:df:f5:72:4e:f5:7d:23:7f:5e:b3: 1e:1f:d1:75:3f:57:a6:8c:c6:a5:c6:1f:b1:04:b3: 95:2f:a0:1a:fb:4b:fb:60:0a:47:5f:51:9c:a6:d2: 6a:0e:27:3f:fb:89:30:04:10:51:14:61:ea:93:26: 52:93:c7:ad:de:3d:ce:8d:0b:0e:95:8a:c5:38:b3: 31:29:ff:c1:e4:6b:13:fb:d2:7a:a9:97:36:25:0d: a1:77:2a:96:6f:dd:2c:57:65:05:95:2c:e9:77:c8: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2C:1B:A7:CD:2C:E8:C7:0D:2A:7F:70:54:B7:A3:9F:D8:59:B9:BF X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b9:ad:d9:05:c7:05:8d:5b:ad:8c:43:c1:24:4b:32:98:a4: ca:4c:25:82:61:3b:a9:81:f3:56:8f:60:a4:6c:ad:d1:6b:78: 84:ea:b0:e0:46:86:f6:32:a2:b3:16:3a:d8:d0:c4:c6:6c:10: 88:89:f1:50:bf:7f:37:cd:6c:d4:56:18:24:7d:2f:4a:63:bd: ab:f5:a6:a8:49:bb:6e:71:11:71:d6:f4:df:2e:c5:62:be:42: d7:62:e1:56:ac:90:f5:79:d7:89:30:18:82:d8:ce:47:0e:95: ae:16:f5:6f:40:71:c1:84:7f:df:88:1c:a7:a0:eb:68:f9:61: 9f:ba:88:00:e1:23:f6:2b:e3:7a:c8:52:ea:e5:70:fe:11:7a: 8b:dd:cb:95:25:4c:a9:0a:13:b9:3e:fb:d4:be:6a:66:8c:ef: 43:98:66:90:6f:35:3d:4f:ee:da:5c:d5:cd:f2:0b:0a:6c:ae: ad:7b:ab:9c:f6:49:0a:47:7e:e2:3f:47:01:c6:ce:22:2b:e3: 54:54:33:5f:30:4e:d6:e6:e0:56:89:11:cf:00:40:a2:dd:44: 36:44:e7:24:88:22:a2:09:e5:61:3c:3d:0d:c7:8c:f1:4f:5e: 77:c1:66:f8:3c:55:38:fa:db:4f:8c:e5:c9:a9:3a:24:2a:cd: 62:eb:fe:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5rJaTwwQ0esJT2b/+7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjUxMjE3MTIwMTE1WhcNMjUxMjE4MTIwMTE1WjAzMTEwLwYDVQQD EyhiMTJjMWJhN2NkMmNlOGM3MGQyYTdmNzA1NGI3YTM5ZmQ4NTliOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYAJrJlF43eU7qDPx8yGc8/+BtzX os9rL91f5f2o2KtB3TCPszRvjvqdaS+a4hpKGcY9TSROogoae3ZIzXyY1wwQVeTc fvhD33pE/jsCZm/lKBcypgvNeyn7uuwgpofnogSwekskH+Hijh1EuQjls45Exs28 y1HtbYYTa+pfOHztsYqc4aA/D02spDry2X6ogfgtGMJQnaPfjt/1ck71fSN/XrMe H9F1P1emjMalxh+xBLOVL6Aa+0v7YApHX1GcptJqDic/+4kwBBBRFGHqkyZSk8et 3j3OjQsOlYrFOLMxKf/B5GsT+9J6qZc2JQ2hdyqWb90sV2UFlSzpd8h3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEsG6fNLOjHDSp/cFS3o5/YWbm/MB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLmt2QXH BY1brYxDwSRLMpikykwlgmE7qYHzVo9gpGyt0Wt4hOqw4EaG9jKisxY62NDExmwQ iInxUL9/N81s1FYYJH0vSmO9q/WmqEm7bnERcdb03y7FYr5C12LhVqyQ9XnXiTAY gtjORw6Vrhb1b0BxwYR/34gcp6DraPlhn7qIAOEj9ivjeshS6uVw/hF6i93LlSVM qQoTuT771L5qZozvQ5hmkG81PU/u2lzVzfILCmyurXurnPZJCkd+4j9HAcbOIivj VFQzXzBO1ubgVokRzwBAot1ENkTnJIgiognlYTw9DceM8U9ed8Fm+DxVOPrbT4zl yak6JCrNYuv+Kw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:27:27 2025 by rpki-client