This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json) Hash identifier: TIysrln4PVXV6scoHR7BmYp4X2WKassnqgrJ/AN5RfM= Subject key identifier: 01:9D:EE:FC:23:1F:C2:CE:3B:08:CA:10:0B:2C:82:39:C8:BE:71:9E Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Certificate serial: 019B42801F05F9ACA53C5E4F93CB932CA791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft Manifest number: 0DB3 Signing time: Sun 21 Dec 2025 20:00:51 +0000 Manifest this update: Sun 21 Dec 2025 20:00:51 +0000 Manifest next update: Mon 22 Dec 2025 20:00:51 +0000 Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=) 2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: z4dZ9iiAeEyEhazDqO4rhGnpme8lFlxvNA358mQw/Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:1f:05:f9:ac:a5:3c:5e:4f:93:cb:93:2c:a7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Validity Not Before: Dec 21 20:00:51 2025 GMT Not After : Dec 22 20:00:51 2025 GMT Subject: CN=019deefc231fc2ce3b08ca100b2c8239c8be719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:b1:8b:da:5b:eb:f9:64:da:56:53:d2:46: c4:98:0c:ec:f9:b4:74:6f:56:ae:57:74:f2:72:d6: 1e:4f:21:22:73:96:ac:b5:ee:24:42:6b:c4:6c:d5: 08:11:88:fc:98:78:d1:73:c3:d9:a6:e8:65:a3:c5: 62:99:c5:02:3d:33:d8:63:61:b6:b3:eb:cc:1c:bc: e8:04:fa:9d:3d:b4:67:1a:8e:a1:ff:df:00:a8:6d: 06:f0:12:41:66:89:b1:c9:5b:e6:ac:8b:fe:06:a7: 2e:4d:8a:9b:38:a8:38:78:18:91:ba:1a:9c:ee:a1: 72:6f:fe:52:e3:97:b6:b6:68:ed:45:4f:03:e8:2b: 55:18:08:94:17:6a:ba:d4:06:f5:bd:94:7d:17:27: 8c:22:81:5b:f7:60:ac:4a:52:91:21:f9:8b:8b:1c: f2:af:7c:7b:cc:8b:00:58:33:38:35:2f:23:ba:92: 50:b3:b8:ba:57:96:f2:e2:ea:d3:59:9e:c5:c1:56: 49:ed:f3:60:35:33:6b:67:0a:b5:7a:ec:3e:45:11: a1:d7:4c:cc:56:18:22:f5:e9:cc:21:e5:62:98:96: e8:ba:35:71:ae:01:5c:ac:79:35:e8:4d:ff:dd:1d: ed:39:b7:f5:ec:21:12:89:6d:5d:05:f5:1c:48:35: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:EE:FC:23:1F:C2:CE:3B:08:CA:10:0B:2C:82:39:C8:BE:71:9E X509v3 Authority Key Identifier: keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d0:bb:41:19:e1:85:d5:42:b8:86:08:ba:fc:dc:8e:26:65: 4c:3e:9e:f4:04:99:dd:fb:b7:e6:de:96:78:99:7a:e9:ac:38: 06:db:b7:49:00:40:67:d5:16:4b:0a:7c:b5:72:cf:43:1e:66: a3:8b:66:3d:b6:5f:59:82:27:aa:ad:ba:54:50:8f:eb:0e:8c: 3d:f5:fa:3d:6b:86:da:3d:0a:52:c9:6b:b1:d0:f6:dd:1c:7c: a4:6a:60:85:f3:00:06:61:6d:06:e2:ca:b5:b1:c2:46:4a:52: 47:fa:9b:8d:b0:f4:fe:96:a3:e3:f3:4e:f7:36:20:f5:3b:7d: 48:30:e5:f9:e9:79:82:5b:55:47:7e:bc:6e:e6:87:23:64:bb: 84:ec:7d:a7:70:c5:c7:2f:91:ca:08:2c:29:fd:cc:f7:4f:0d: dd:95:3d:42:88:44:a7:63:7b:80:6c:8f:89:7c:65:a1:27:3e: c7:7d:7e:02:13:f3:f4:21:fb:0b:43:51:cc:98:1b:17:5d:73: 52:ff:19:60:07:3e:8b:b4:44:67:4c:68:37:3c:24:d8:69:1f: 8e:45:49:0e:f0:1d:14:84:54:76:7b:fb:5a:b8:b5:43:4a:df: 0e:62:ef:9f:79:9d:01:82:a6:1d:ba:ec:14:6f:d4:7c:7e:33: f6:44:05:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgB8F+aylPF5Pk8uTLKeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz YjY4YWYwHhcNMjUxMjIxMjAwMDUxWhcNMjUxMjIyMjAwMDUxWjAzMTEwLwYDVQQD EygwMTlkZWVmYzIzMWZjMmNlM2IwOGNhMTAwYjJjODIzOWM4YmU3MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscuxi9pb6/lk2lZT0kbEmAzs+bR0 b1auV3TyctYeTyEic5aste4kQmvEbNUIEYj8mHjRc8PZpuhlo8VimcUCPTPYY2G2 s+vMHLzoBPqdPbRnGo6h/98AqG0G8BJBZomxyVvmrIv+BqcuTYqbOKg4eBiRuhqc 7qFyb/5S45e2tmjtRU8D6CtVGAiUF2q61Ab1vZR9FyeMIoFb92CsSlKRIfmLixzy r3x7zIsAWDM4NS8jupJQs7i6V5by4urTWZ7FwVZJ7fNgNTNrZwq1euw+RRGh10zM Vhgi9enMIeVimJboujVxrgFcrHk16E3/3R3tObf17CESiW1dBfUcSDUY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGd7vwjH8LOOwjKEAssgjnIvnGeMB8GA1UdIwQY MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdC7QRnh hdVCuIYIuvzcjiZlTD6e9ASZ3fu35t6WeJl66aw4Btu3SQBAZ9UWSwp8tXLPQx5m o4tmPbZfWYInqq26VFCP6w6MPfX6PWuG2j0KUslrsdD23Rx8pGpghfMABmFtBuLK tbHCRkpSR/qbjbD0/paj4/NO9zYg9Tt9SDDl+el5gltVR368buaHI2S7hOx9p3DF xy+RyggsKf3M908N3ZU9QohEp2N7gGyPiXxloSc+x31+AhPz9CH7C0NRzJgbF11z Uv8ZYAc+i7REZ0xoNzwk2GkfjkVJDvAdFIRUdnv7Wri1Q0rfDmLvn3mdAYKmHbrs FG/UfH4z9kQF5A== -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:11 2025 by rpki-client