This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json) Hash identifier: KY6RYW1LHENLE36yG0peWeJcS4faD3oXHYQRIsRea8Q= Subject key identifier: A4:32:73:7B:03:6F:29:5F:F8:57:C8:88:1B:94:21:FA:7F:42:2F:00 Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Certificate serial: 019B5260BF3DBF8EAAA091BA684A7B3A0991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:00:30 +0000 Manifest this update: Wed 24 Dec 2025 22:00:30 +0000 Manifest next update: Thu 25 Dec 2025 22:00:30 +0000 Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=) 2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: n+WFC5syiP25Z4s3HMt+3JbsGkw5WKPmCiYCl9OSgtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:bf:3d:bf:8e:aa:a0:91:ba:68:4a:7b:3a:09:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Validity Not Before: Dec 24 22:00:30 2025 GMT Not After : Dec 25 22:00:30 2025 GMT Subject: CN=a432737b036f295ff857c8881b9421fa7f422f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:f4:cd:f8:75:4d:98:81:f2:b5:f4:e4:b1: 7c:21:ca:4a:0f:4b:bd:ba:54:7d:14:af:6e:e2:88: b5:1a:f6:76:cf:f7:ed:16:20:b4:3d:6e:f6:b9:e4: 44:2a:50:d1:90:5c:31:66:91:69:c4:dc:11:fe:fa: 2d:3d:2c:f9:bf:5b:24:20:a5:56:61:12:63:fe:83: b0:0d:0f:2d:67:a6:6b:48:c5:8c:4d:c0:c4:32:c1: 9b:95:3b:bb:fb:a2:01:fa:4f:55:6c:93:68:27:7b: 13:3c:5f:54:1f:8a:2c:4e:fe:20:3c:f8:f6:8f:d9: ee:2b:3a:b0:ba:70:19:b5:23:77:4c:53:09:0c:ed: f7:06:28:99:a4:65:e0:bc:96:27:8b:32:2b:27:b6: 35:32:0c:c1:94:ed:64:75:fb:b0:4a:6d:c6:45:fa: 22:7f:4d:30:60:fc:2b:9b:2d:4d:1f:3d:28:6d:0a: d2:61:0c:ce:1c:1a:87:14:e6:42:5f:5e:28:2f:7c: 88:21:4c:88:15:2a:0d:d6:8e:1b:f3:7b:be:18:6e: 3b:28:77:b4:86:ee:27:84:62:38:48:ec:d7:7f:7e: 21:09:65:96:41:1b:f7:2d:a3:f7:34:a5:a9:4c:80: 29:e0:b3:a2:11:2a:ce:44:df:0d:ff:0b:ef:4e:63: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:73:7B:03:6F:29:5F:F8:57:C8:88:1B:94:21:FA:7F:42:2F:00 X509v3 Authority Key Identifier: keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ef:d1:cd:fe:4f:bf:c3:f2:4d:2a:89:81:be:4c:5d:19:98: fe:81:7e:96:48:cf:98:a8:45:0d:ce:47:07:eb:f6:4b:de:8d: 57:d2:ec:5c:bd:19:2b:69:88:87:a7:8e:03:09:4d:02:4d:27: 56:99:21:20:fe:f4:16:fe:b1:34:80:2e:ea:9e:a2:ec:17:d1: 9c:61:6a:6f:62:13:c9:9f:f0:a8:17:cd:2c:4f:0c:db:10:89: 8b:8b:9a:12:63:c0:27:82:00:ca:84:fb:89:db:e4:90:b6:e1: d4:b3:3b:c9:cf:30:38:a2:1d:0f:8c:38:d5:53:7d:e3:99:cb: ce:ab:3d:f7:94:f3:5e:9b:91:ad:03:ef:3d:79:c7:40:04:77: 35:d9:b5:6a:a6:87:28:7d:5f:73:2d:44:1d:9e:62:6d:bc:22: ce:cb:10:5c:d3:e0:16:c7:83:83:c5:d5:80:ff:dd:df:f2:c8: b2:ac:0d:a4:d1:6d:9a:43:a7:3d:7b:2d:a7:69:d4:73:ab:a6: 86:8b:dd:bc:8e:c1:22:41:aa:0a:47:23:e2:25:36:4f:af:9c: 3a:e3:57:f5:be:ba:11:55:27:af:eb:27:39:f2:7f:28:95:a1: 3e:59:f2:00:c7:91:53:85:bc:66:75:ae:f0:0a:90:28:53:04: aa:c4:04:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYL89v46qoJG6aEp7OgmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0 NjVjYjgwHhcNMjUxMjI0MjIwMDMwWhcNMjUxMjI1MjIwMDMwWjAzMTEwLwYDVQQD EyhhNDMyNzM3YjAzNmYyOTVmZjg1N2M4ODgxYjk0MjFmYTdmNDIyZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wb0zfh1TZiB8rX05LF8IcpKD0u9 ulR9FK9u4oi1GvZ2z/ftFiC0PW72ueREKlDRkFwxZpFpxNwR/votPSz5v1skIKVW YRJj/oOwDQ8tZ6ZrSMWMTcDEMsGblTu7+6IB+k9VbJNoJ3sTPF9UH4osTv4gPPj2 j9nuKzqwunAZtSN3TFMJDO33BiiZpGXgvJYnizIrJ7Y1MgzBlO1kdfuwSm3GRfoi f00wYPwrmy1NHz0obQrSYQzOHBqHFOZCX14oL3yIIUyIFSoN1o4b83u+GG47KHe0 hu4nhGI4SOzXf34hCWWWQRv3LaP3NKWpTIAp4LOiESrORN8N/wvvTmO3qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQyc3sDbylf+FfIiBuUIfp/Qi8AMB8GA1UdIwQY MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+/Rzf5P v8PyTSqJgb5MXRmY/oF+lkjPmKhFDc5HB+v2S96NV9LsXL0ZK2mIh6eOAwlNAk0n VpkhIP70Fv6xNIAu6p6i7BfRnGFqb2ITyZ/wqBfNLE8M2xCJi4uaEmPAJ4IAyoT7 idvkkLbh1LM7yc8wOKIdD4w41VN945nLzqs995TzXpuRrQPvPXnHQAR3Ndm1aqaH KH1fcy1EHZ5ibbwizssQXNPgFseDg8XVgP/d3/LIsqwNpNFtmkOnPXstp2nUc6um hovdvI7BIkGqCkcj4iU2T6+cOuNX9b66EVUnr+snOfJ/KJWhPlnyAMeRU4W8ZnWu 8AqQKFMEqsQEvA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:31:22 2025 by rpki-client