This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json) Hash identifier: oLUvTV1EmfkbggaKBFHWusoHd1dHynM59OvPHB12QW4= Subject key identifier: 85:0C:2E:6E:C8:4A:2E:68:25:26:CF:8C:CD:66:A3:AF:36:EE:7A:04 Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab Certificate serial: 019B3DFEAF6EB02D39753A18E69B611771CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft Manifest number: 072E Signing time: Sat 20 Dec 2025 23:00:59 +0000 Manifest this update: Sat 20 Dec 2025 23:00:59 +0000 Manifest next update: Sun 21 Dec 2025 23:00:59 +0000 Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: SSIdLgeQsvoTn26AtQZux0TMoU8hIXQmMxFYccUbpgE=) 2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:af:6e:b0:2d:39:75:3a:18:e6:9b:61:17:71:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab Validity Not Before: Dec 20 23:00:59 2025 GMT Not After : Dec 21 23:00:59 2025 GMT Subject: CN=850c2e6ec84a2e682526cf8ccd66a3af36ee7a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:26:e2:08:c7:19:6e:8f:07:df:3a:15:b5: 1a:2d:93:f8:24:85:0f:5d:d0:72:7b:0c:4f:53:37: c0:14:31:99:47:41:9e:bf:26:2e:c3:3c:a3:c7:84: 95:4b:5d:9a:30:af:e4:47:a6:57:93:cc:1f:5e:5a: f9:f8:a3:06:bb:ac:41:88:d8:90:1f:d7:fb:07:a7: 78:a2:d9:1e:88:47:86:fd:e4:3c:bc:76:88:34:59: 89:09:13:b1:98:d4:e5:d6:81:ec:ef:52:c1:0f:81: fe:9a:8f:14:9a:b5:f9:83:e3:6c:59:e3:35:b0:3c: d9:db:1c:d1:1b:2a:9c:5a:b6:15:e3:a3:fe:fb:97: 58:81:9e:2c:e6:ef:f4:8b:7e:9e:72:66:41:22:a7: 49:12:cb:aa:ce:d2:4d:bb:13:28:12:ef:ce:8d:9f: d1:ec:9f:4b:e5:41:61:09:73:47:30:be:ba:8b:d4: 76:ff:9e:4d:82:fe:08:ab:f9:57:4a:62:d4:66:0f: 3b:71:ce:18:15:54:34:b8:dd:ef:94:4c:12:8b:c9: 79:a7:0a:f6:eb:6a:5d:34:af:de:3e:59:07:79:4e: 1a:e0:f8:51:da:61:17:ff:53:93:42:85:1d:bb:50: 2d:3c:eb:9f:14:b9:2d:ee:9d:c9:64:c1:75:8b:a7: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:2E:6E:C8:4A:2E:68:25:26:CF:8C:CD:66:A3:AF:36:EE:7A:04 X509v3 Authority Key Identifier: keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f5:ee:8d:68:de:20:da:54:bb:86:37:59:5f:af:e8:58:56: 27:d7:74:2a:50:20:0e:f4:63:df:05:fe:6d:7f:84:8d:a4:d6: 3c:7e:ee:17:26:80:a1:38:5b:ec:46:33:b9:4b:6c:67:00:c4: 44:05:16:3d:76:65:28:9e:69:65:33:ac:08:04:ac:c6:d5:95: 0a:9b:c9:37:5a:3f:3f:d6:74:b9:69:e6:30:8e:21:83:18:5d: c5:3b:f5:2d:b8:61:6b:b9:51:f2:3f:38:f1:e6:3d:e5:30:94: a0:41:69:7b:2f:66:c9:9c:ca:ab:f0:d4:32:43:7f:10:8b:ad: a0:cf:fb:0e:65:5d:99:eb:5b:d6:65:83:9d:cb:64:9b:b1:3b: e2:90:9f:40:cf:ab:df:c6:8e:3e:0d:94:3d:d9:0b:0c:4e:d4: 88:d5:e0:fb:10:7a:57:a8:61:21:30:ea:a0:65:71:9a:ac:57: f8:7a:b4:ed:3c:03:3a:42:87:a7:20:9a:33:b8:e7:6e:82:6f: 24:40:85:1a:86:63:71:92:74:d7:96:ba:fe:63:f4:9d:d2:23: f9:86:5c:3b:4e:0f:c2:c9:49:f5:b5:e0:66:0d:42:9a:6c:7d: 64:a4:17:64:05:b5:d2:24:a3:63:0a:d9:a0:bf:07:ea:12:b8: 50:df:c9:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/q9usC05dToY5pthF3HNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy NzEwYWIwHhcNMjUxMjIwMjMwMDU5WhcNMjUxMjIxMjMwMDU5WjAzMTEwLwYDVQQD Eyg4NTBjMmU2ZWM4NGEyZTY4MjUyNmNmOGNjZDY2YTNhZjM2ZWU3YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4m4gjHGW6PB986FbUaLZP4JIUP XdByewxPUzfAFDGZR0GevyYuwzyjx4SVS12aMK/kR6ZXk8wfXlr5+KMGu6xBiNiQ H9f7B6d4otkeiEeG/eQ8vHaINFmJCROxmNTl1oHs71LBD4H+mo8UmrX5g+NsWeM1 sDzZ2xzRGyqcWrYV46P++5dYgZ4s5u/0i36ecmZBIqdJEsuqztJNuxMoEu/OjZ/R 7J9L5UFhCXNHML66i9R2/55Ngv4Iq/lXSmLUZg87cc4YFVQ0uN3vlEwSi8l5pwr2 62pdNK/ePlkHeU4a4PhR2mEX/1OTQoUdu1AtPOufFLkt7p3JZMF1i6eKNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUMLm7ISi5oJSbPjM1mo6827noEMB8GA1UdIwQY MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPXujWje INpUu4Y3WV+v6FhWJ9d0KlAgDvRj3wX+bX+EjaTWPH7uFyaAoThb7EYzuUtsZwDE RAUWPXZlKJ5pZTOsCASsxtWVCpvJN1o/P9Z0uWnmMI4hgxhdxTv1Lbhha7lR8j84 8eY95TCUoEFpey9myZzKq/DUMkN/EIutoM/7DmVdmetb1mWDnctkm7E74pCfQM+r 38aOPg2UPdkLDE7UiNXg+xB6V6hhITDqoGVxmqxX+Hq07TwDOkKHpyCaM7jnboJv JECFGoZjcZJ015a6/mP0ndIj+YZcO04PwslJ9bXgZg1Cmmx9ZKQXZAW10iSjYwrZ oL8H6hK4UN/Jow== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:27 2025 by rpki-client