This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json) Hash identifier: czXVA1uQjlQQvJpH4QIvl4rN6DQTy8f+mgZEQDF9/CA= Subject key identifier: 0A:16:86:3A:DD:1F:84:B4:AA:4C:EE:D8:CC:12:16:3A:00:F0:3F:4B Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541 Certificate serial: 019B51BC2A0941FDDE1AE987494F65BD72B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft Manifest number: 0D77 Signing time: Wed 24 Dec 2025 19:00:44 +0000 Manifest this update: Wed 24 Dec 2025 19:00:44 +0000 Manifest next update: Thu 25 Dec 2025 19:00:44 +0000 Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=) 2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 1ZIvr7kMilISmvu9k8w1yCGll0q6XYYQTfnIpEc1Vcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:2a:09:41:fd:de:1a:e9:87:49:4f:65:bd:72:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541 Validity Not Before: Dec 24 19:00:44 2025 GMT Not After : Dec 25 19:00:44 2025 GMT Subject: CN=0a16863add1f84b4aa4ceed8cc12163a00f03f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:32:d4:0b:70:3d:f2:7f:24:0b:c4:3f:91: eb:67:e2:f2:7f:c9:13:14:43:15:af:23:a7:c4:55: cb:40:fb:aa:54:16:6e:0e:3f:9b:63:f7:55:8f:57: 08:d8:d9:70:7e:2e:d8:fe:3a:a5:43:21:9b:67:ea: ae:cf:7e:43:92:ac:95:16:61:2d:db:1f:b1:41:0a: ec:eb:52:82:35:c5:88:f1:02:bc:36:cc:10:14:67: 6d:1f:60:0b:4f:0e:23:38:50:d0:b2:a0:b4:2c:1e: 2e:87:88:fd:ea:96:91:80:01:e5:6f:a4:3e:ea:74: f2:56:ac:6a:70:b2:0a:01:54:e7:33:e6:29:2c:fa: a8:1e:50:ba:1f:43:3c:b4:69:c8:c6:d5:bf:c9:e7: ef:43:27:a8:7b:f3:00:85:95:2b:68:f2:17:9f:21: 0a:a4:95:d5:b1:dd:71:8c:32:ae:96:28:48:04:e8: a4:9b:69:f5:dc:6a:db:59:64:d0:d4:19:5a:17:7c: d3:8f:a7:5b:83:d3:45:d3:93:4e:e7:3d:f3:41:b0: 3b:41:ed:d7:1a:0f:47:58:f6:ac:b1:32:02:f0:42: ed:cb:ae:28:19:d8:50:3e:c8:2b:66:a5:28:f6:b2: e6:5e:da:63:51:9b:2c:1c:ce:90:5c:bb:1b:11:b2: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:86:3A:DD:1F:84:B4:AA:4C:EE:D8:CC:12:16:3A:00:F0:3F:4B X509v3 Authority Key Identifier: keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2f:20:07:23:ff:6c:1e:41:00:4e:d3:7e:89:cc:c3:78:59: 9a:53:de:60:e6:d4:18:70:45:b8:a9:b7:8e:6e:bb:bb:3c:1a: ce:fc:6b:b0:cc:56:a6:38:2f:cb:41:93:8b:e8:36:0b:95:6c: e4:55:f7:32:3d:e1:ef:03:b8:ff:80:76:87:c6:5f:b3:8b:93: 8f:40:77:62:14:99:a4:18:99:5f:95:ff:17:17:0f:b9:33:4d: 4e:08:03:53:38:6f:1f:b1:3e:d1:55:f4:65:eb:e1:ac:c7:39: d6:7d:16:fb:1f:85:0d:3a:46:e2:9b:96:cf:c5:3f:8b:1f:c0: 14:84:70:0c:a5:4d:e9:50:40:65:f3:56:27:6c:56:7d:b3:22: 60:b9:98:1c:ab:e3:c5:b7:02:d0:3e:1a:5e:63:82:06:5b:30: 4e:bc:6c:ad:db:fc:36:8e:89:fa:bd:0e:e1:9d:9f:dc:0d:2e: 75:4d:30:8f:ec:e7:95:30:62:14:e3:50:6b:31:e9:e0:f9:90: 36:20:4a:7e:14:0e:7b:63:c5:88:72:d4:4f:b1:92:3d:d6:e6: bf:a7:93:d4:9f:98:68:9b:ae:03:08:85:d0:26:9f:8b:2d:2e: 47:48:35:90:7c:19:7f:72:01:ac:be:c3:91:a5:75:81:2f:39: 5a:65:04:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCoJQf3eGumHSU9lvXKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy MzM1NDEwHhcNMjUxMjI0MTkwMDQ0WhcNMjUxMjI1MTkwMDQ0WjAzMTEwLwYDVQQD EygwYTE2ODYzYWRkMWY4NGI0YWE0Y2VlZDhjYzEyMTYzYTAwZjAzZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc4y1AtwPfJ/JAvEP5HrZ+Lyf8kT FEMVryOnxFXLQPuqVBZuDj+bY/dVj1cI2Nlwfi7Y/jqlQyGbZ+quz35DkqyVFmEt 2x+xQQrs61KCNcWI8QK8NswQFGdtH2ALTw4jOFDQsqC0LB4uh4j96paRgAHlb6Q+ 6nTyVqxqcLIKAVTnM+YpLPqoHlC6H0M8tGnIxtW/yefvQyeoe/MAhZUraPIXnyEK pJXVsd1xjDKulihIBOikm2n13GrbWWTQ1BlaF3zTj6dbg9NF05NO5z3zQbA7Qe3X Gg9HWPassTIC8ELty64oGdhQPsgrZqUo9rLmXtpjUZssHM6QXLsbEbJ5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoWhjrdH4S0qkzu2MwSFjoA8D9LMB8GA1UdIwQY MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It MzUyMDNkNmIwZDU3LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3 LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXC8gByP/ bB5BAE7TfonMw3hZmlPeYObUGHBFuKm3jm67uzwazvxrsMxWpjgvy0GTi+g2C5Vs 5FX3Mj3h7wO4/4B2h8Zfs4uTj0B3YhSZpBiZX5X/FxcPuTNNTggDUzhvH7E+0VX0 ZevhrMc51n0W+x+FDTpG4puWz8U/ix/AFIRwDKVN6VBAZfNWJ2xWfbMiYLmYHKvj xbcC0D4aXmOCBlswTrxsrdv8No6J+r0O4Z2f3A0udU0wj+znlTBiFONQazHp4PmQ NiBKfhQOe2PFiHLUT7GSPdbmv6eT1J+YaJuuAwiF0Cafiy0uR0g1kHwZf3IBrL7D kaV1gS85WmUE+g== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:59 2025 by rpki-client