This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json) Hash identifier: 2Nj6uW31SB1P+m1ztaxb/n7+xHmFOOvYHTmETgKDSbU= Subject key identifier: FB:D6:9E:26:13:94:6C:23:CB:DD:58:1E:20:44:26:FD:7D:20:E4:40 Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Certificate serial: 019B50A9F0457383C1839F293AB8FBCCED67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft Manifest number: 07F5 Signing time: Wed 24 Dec 2025 14:01:12 +0000 Manifest this update: Wed 24 Dec 2025 14:01:12 +0000 Manifest next update: Thu 25 Dec 2025 14:01:12 +0000 Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=) 2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: Bj8kNkEcBpMXjAddZho+Robo+2o7RhaTtwLVCQKnuFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:f0:45:73:83:c1:83:9f:29:3a:b8:fb:cc:ed:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Validity Not Before: Dec 24 14:01:12 2025 GMT Not After : Dec 25 14:01:12 2025 GMT Subject: CN=fbd69e2613946c23cbdd581e204426fd7d20e440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:66:0a:00:9d:bd:bb:4b:19:5d:f7:cc:c8: e2:3c:fc:7b:29:de:e6:45:be:35:01:d5:a3:ac:26: c6:cd:39:0d:a3:6f:5a:56:64:a0:04:f5:27:e8:a1: 89:30:81:7d:f3:cd:df:24:e0:8f:3c:f4:22:2f:30: 19:e7:d9:0b:f2:e3:e8:19:94:b7:6b:5b:96:e2:26: 5d:24:78:fd:e9:68:1f:75:eb:8e:6a:c9:33:0d:21: 2e:ec:3a:64:bd:36:b7:5e:0a:a4:9e:8a:e6:c0:d8: 89:b2:cd:4a:e9:51:4a:49:1e:69:40:b1:8c:42:07: 78:01:cc:b2:83:f7:dc:1c:4b:a1:8b:27:d0:19:72: 74:4d:aa:8e:86:0e:b9:70:b4:a5:7e:f8:5a:80:a9: a9:1e:c6:b1:01:24:17:15:e9:94:d2:d6:93:5a:50: 1b:c2:a4:80:f7:66:96:cb:16:2e:5b:aa:76:15:aa: 83:3e:15:89:02:a9:e6:1d:a3:aa:75:9e:f7:cb:fa: 38:15:8b:1b:aa:4e:0e:3e:91:15:dd:3c:fc:0a:d4: b6:6d:de:2a:70:68:39:95:16:c2:8e:19:a1:b6:85: 15:2d:de:98:8e:e4:d6:80:df:af:a4:93:25:ff:62: 7c:7d:ec:8b:48:8c:71:6e:4f:5a:29:4e:64:c2:5d: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D6:9E:26:13:94:6C:23:CB:DD:58:1E:20:44:26:FD:7D:20:E4:40 X509v3 Authority Key Identifier: keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e7:0f:c7:00:a3:7b:b1:1b:52:9f:48:0e:f9:22:00:22:77: 3b:83:f9:5a:c1:03:ab:2b:67:a9:36:06:e0:bf:1b:2c:ae:d7: 61:d3:44:0e:9a:9a:54:84:f6:52:49:c8:c1:05:e9:ee:fe:ca: 8c:66:98:7a:a2:a4:4c:75:2c:15:2b:d4:a8:5b:50:af:18:f9: 39:78:ea:b1:8e:8b:44:a0:23:a4:47:69:6f:66:c4:7c:a9:a0: ce:cf:94:fc:71:cb:99:27:e4:5e:f8:e0:fd:b0:9f:52:aa:c2: 19:a8:44:3b:3d:c8:54:47:f6:01:22:07:a6:1c:fb:0c:12:6e: a2:8a:46:e1:17:39:c5:c5:3a:41:d1:e8:f9:98:da:e4:a6:be: 5b:d1:ca:7e:cc:84:1b:1e:6c:d9:ac:70:c3:a4:50:4c:39:da: af:85:27:a6:7a:d1:a5:d2:b3:61:6e:c0:02:34:60:ee:65:7d: d7:1f:9c:4c:0f:d3:47:d7:d9:d4:f7:bf:e0:28:ae:f4:aa:76: 84:82:84:72:8b:77:2d:9a:5d:57:0c:05:61:d9:af:31:d4:32: 8a:e7:50:e9:96:b7:26:1e:a2:c5:d3:13:a6:fe:36:3d:b5:c2: cd:3e:23:f0:1f:10:46:0d:ee:5f:00:b8:4b:55:75:3e:eb:15: 46:84:c9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqfBFc4PBg58pOrj7zO1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1 Mjk0NTMwHhcNMjUxMjI0MTQwMTEyWhcNMjUxMjI1MTQwMTEyWjAzMTEwLwYDVQQD EyhmYmQ2OWUyNjEzOTQ2YzIzY2JkZDU4MWUyMDQ0MjZmZDdkMjBlNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXhmCgCdvbtLGV33zMjiPPx7Kd7m Rb41AdWjrCbGzTkNo29aVmSgBPUn6KGJMIF9883fJOCPPPQiLzAZ59kL8uPoGZS3 a1uW4iZdJHj96WgfdeuOaskzDSEu7DpkvTa3XgqknormwNiJss1K6VFKSR5pQLGM Qgd4Acyyg/fcHEuhiyfQGXJ0TaqOhg65cLSlfvhagKmpHsaxASQXFemU0taTWlAb wqSA92aWyxYuW6p2FaqDPhWJAqnmHaOqdZ73y/o4FYsbqk4OPpEV3Tz8CtS2bd4q cGg5lRbCjhmhtoUVLd6YjuTWgN+vpJMl/2J8feyLSIxxbk9aKU5kwl2w4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvWniYTlGwjy91YHiBEJv19IORAMB8GA1UdIwQY MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANucPxwCj e7EbUp9IDvkiACJ3O4P5WsEDqytnqTYG4L8bLK7XYdNEDpqaVIT2UknIwQXp7v7K jGaYeqKkTHUsFSvUqFtQrxj5OXjqsY6LRKAjpEdpb2bEfKmgzs+U/HHLmSfkXvjg /bCfUqrCGahEOz3IVEf2ASIHphz7DBJuoopG4Rc5xcU6QdHo+Zja5Ka+W9HKfsyE Gx5s2axww6RQTDnar4UnpnrRpdKzYW7AAjRg7mV91x+cTA/TR9fZ1Pe/4Ciu9Kp2 hIKEcot3LZpdVwwFYdmvMdQyiudQ6Za3Jh6ixdMTpv42PbXCzT4j8B8QRg3uXwC4 S1V1PusVRoTJYw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:00 2025 by rpki-client