This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: tmtD/FGNmResL/tc7YG+xJw/w82jpErD0aTrWiSeV5E= Subject key identifier: E3:E4:4C:C8:91:ED:48:32:FA:A7:84:7A:45:E4:A5:78:19:F5:4B:DC Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B39EB078D77A167B37BA7EE17806EC0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 17C1 Signing time: Sat 20 Dec 2025 04:01:02 +0000 Manifest this update: Sat 20 Dec 2025 04:01:02 +0000 Manifest next update: Sun 21 Dec 2025 04:01:02 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: g7NYdTH59Ms67GWbb4SYqzV3UJs761KqVlM2jZaEd+8=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:07:8d:77:a1:67:b3:7b:a7:ee:17:80:6e:c0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Dec 20 04:01:02 2025 GMT Not After : Dec 21 04:01:02 2025 GMT Subject: CN=e3e44cc891ed4832faa7847a45e4a57819f54bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:9f:3b:c8:38:04:4a:95:b3:2a:81:63:c2: 53:e8:14:5d:56:9c:5e:5f:0e:71:f6:c3:f6:12:e4: 72:a1:15:02:02:c9:c7:60:a6:f5:7c:07:b6:c0:31: 07:23:15:ad:15:6f:19:f6:07:db:31:4a:d4:3c:09: 8c:5c:d4:21:7e:ef:81:03:3e:53:6e:52:4b:6c:54: 9c:05:8e:39:6b:e9:29:7f:b5:dc:8f:2f:be:ea:e5: 06:14:73:f2:21:3b:6c:8c:35:d1:19:8d:4e:6f:a4: 53:a5:bf:a9:15:66:1a:c1:70:d1:82:e2:1f:b6:04: 02:10:84:70:38:a7:ae:61:02:60:a0:7a:9e:01:a3: 78:21:e3:d8:44:e0:d9:dd:21:de:6a:11:b6:ea:74: 2a:a8:fa:2d:eb:b3:2c:91:a7:c2:06:cc:9c:d3:51: d2:fd:3d:ee:eb:6b:2a:aa:80:60:04:51:38:70:75: 98:7c:bc:f3:0e:ee:4d:8f:4d:d5:a4:50:15:e2:b7: 88:03:52:b0:9a:a6:94:79:29:62:e3:7b:6d:7c:7f: 20:30:85:63:15:93:8b:31:ed:4b:5c:d6:54:99:ec: 78:7d:d3:d4:2d:71:04:89:10:2c:6a:7d:83:51:fb: 56:09:36:20:69:06:87:9c:a4:65:e8:7b:b6:74:20: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:4C:C8:91:ED:48:32:FA:A7:84:7A:45:E4:A5:78:19:F5:4B:DC X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ef:af:61:0f:5c:0b:6c:d7:f6:e8:53:15:2f:fb:70:79:47: aa:06:04:f3:fc:73:d0:94:0e:8f:6b:4d:84:a1:46:b9:fc:0b: 18:61:f2:63:d0:f6:0d:41:0b:57:96:20:21:79:6e:c5:c4:4f: f4:6a:a7:34:ee:fb:5a:88:eb:c5:3a:48:ed:c6:87:89:52:82: 59:fc:cf:5e:18:27:94:a7:8f:d9:83:1c:e6:a5:bb:e4:4c:39: da:cd:a5:7d:9d:d2:66:46:62:75:26:e5:48:0c:ab:5c:08:25: 94:70:f9:7f:82:30:10:a0:00:7f:cc:f0:73:0f:f3:a4:27:e6: bc:02:20:bb:2d:33:10:5a:ea:b4:59:d8:3f:5e:9a:f6:fb:74: 30:7f:2b:5f:57:5f:06:60:cf:21:73:37:f6:d0:f2:4c:b0:eb: d1:7a:3f:03:12:b6:38:f5:f7:5c:86:7d:61:fc:f0:2b:a7:f8: 92:56:8a:f8:30:c8:94:50:f2:14:cc:be:02:91:03:ed:fe:d3: bb:e5:96:b6:d0:37:e9:c6:70:3a:01:e1:f9:0e:7f:5b:50:77: 21:6c:a1:ec:61:d3:5f:cc:56:45:f2:a9:74:4a:36:a3:88:71: d1:5a:0c:9e:70:19:c4:4a:90:7f:31:f7:d2:f3:c5:03:f0:6a: 21:4f:5a:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56weNd6Fns3un7heAbsDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUxMjIwMDQwMTAyWhcNMjUxMjIxMDQwMTAyWjAzMTEwLwYDVQQD EyhlM2U0NGNjODkxZWQ0ODMyZmFhNzg0N2E0NWU0YTU3ODE5ZjU0YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fKfO8g4BEqVsyqBY8JT6BRdVpxe Xw5x9sP2EuRyoRUCAsnHYKb1fAe2wDEHIxWtFW8Z9gfbMUrUPAmMXNQhfu+BAz5T blJLbFScBY45a+kpf7Xcjy++6uUGFHPyITtsjDXRGY1Ob6RTpb+pFWYawXDRguIf tgQCEIRwOKeuYQJgoHqeAaN4IePYRODZ3SHeahG26nQqqPot67MskafCBsyc01HS /T3u62sqqoBgBFE4cHWYfLzzDu5Nj03VpFAV4reIA1KwmqaUeSli43ttfH8gMIVj FZOLMe1LXNZUmex4fdPULXEEiRAsan2DUftWCTYgaQaHnKRl6Hu2dCCIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPkTMiR7Ugy+qeEekXkpXgZ9UvcMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO+vYQ9c C2zX9uhTFS/7cHlHqgYE8/xz0JQOj2tNhKFGufwLGGHyY9D2DUELV5YgIXluxcRP 9GqnNO77WojrxTpI7caHiVKCWfzPXhgnlKeP2YMc5qW75Ew52s2lfZ3SZkZidSbl SAyrXAgllHD5f4IwEKAAf8zwcw/zpCfmvAIguy0zEFrqtFnYP16a9vt0MH8rX1df BmDPIXM39tDyTLDr0Xo/AxK2OPX3XIZ9YfzwK6f4klaK+DDIlFDyFMy+ApED7f7T u+WWttA36cZwOgHh+Q5/W1B3IWyh7GHTX8xWRfKpdEo2o4hx0VoMnnAZxEqQfzH3 0vPFA/BqIU9aSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:44 2025 by rpki-client