This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json) Hash identifier: c3C6LDVLGfbvWCpVKPCucV2x9M10DdyCwno1mtxEXCQ= Subject key identifier: 3C:5D:C3:8C:B7:0E:69:7C:51:31:B0:32:1D:F4:1E:5E:0D:B7:CB:76 Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73 Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73 Certificate serial: 019B27AE44EBD0DD0D4B899464217AA6D901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft Manifest number: 0C85 Signing time: Tue 16 Dec 2025 15:01:30 +0000 Manifest this update: Tue 16 Dec 2025 15:01:30 +0000 Manifest next update: Wed 17 Dec 2025 15:01:30 +0000 Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: 8Nhkr2cxLTjmWolaKPM1zGgrce9T80PS2IfT6sHSicg=) 2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:44:eb:d0:dd:0d:4b:89:94:64:21:7a:a6:d9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73 Validity Not Before: Dec 16 15:01:30 2025 GMT Not After : Dec 17 15:01:30 2025 GMT Subject: CN=3c5dc38cb70e697c5131b0321df41e5e0db7cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:4c:61:f2:54:cd:e0:30:b9:ad:79:ef:7e: 8f:01:75:8f:57:04:6f:83:92:f7:ab:7c:5b:af:e3: 7a:57:dc:30:49:5a:66:b3:a7:ac:ef:0c:02:ac:56: 75:5b:78:d0:ba:6f:bd:21:6f:80:85:87:96:3f:c9: d3:00:b4:27:80:b8:14:8c:96:c9:a0:07:14:18:c8: 39:17:d7:a3:88:62:3e:23:cf:01:60:71:d6:7b:bb: 3a:5f:7d:af:0b:8e:af:04:37:91:9a:4b:9f:a1:20: 60:8f:2f:30:5a:38:24:ac:9c:3e:44:f8:07:7e:df: 32:aa:4d:ed:5e:26:3f:df:83:c8:64:7d:46:85:e2: 53:ce:0d:e1:d1:15:2e:ff:ba:e0:d0:33:39:8a:62: 3c:69:ba:a9:51:c8:2e:f0:dd:4b:6b:44:b1:e6:38: a0:00:d8:58:60:b1:97:16:b1:2d:53:59:ff:b7:e4: d1:d7:a9:8f:ae:54:d0:d7:2e:59:2e:21:f6:4e:c8: 06:5d:3e:30:8f:51:6b:57:6c:82:d9:cf:7f:59:a9: 9d:e4:ce:ad:53:cc:6c:f3:5c:db:36:31:8d:64:ab: fe:54:33:29:43:4a:68:25:43:75:da:3d:e3:28:b2: a7:71:c8:69:9f:e1:62:8f:29:e0:f4:10:24:0c:ed: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5D:C3:8C:B7:0E:69:7C:51:31:B0:32:1D:F4:1E:5E:0D:B7:CB:76 X509v3 Authority Key Identifier: keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8f:52:89:f0:51:87:d1:e2:2a:4a:c6:68:2c:46:4b:87:86: ec:c5:69:aa:2c:56:2b:f5:97:8d:a3:7f:e6:25:f6:e6:ed:f1: bc:f5:8f:a2:1e:09:18:0f:dc:cc:53:b4:ac:3e:28:6e:00:a2: 09:36:0a:89:81:76:f1:78:ae:e9:13:0d:27:7f:e4:db:b6:4d: fe:87:33:60:a3:37:ef:97:73:4a:2b:a0:62:d1:69:65:a3:bb: 3e:d6:90:b9:9c:21:fa:b3:4f:93:34:da:e1:cf:b4:78:0b:e0: ff:ef:27:dc:68:bb:c1:44:99:4e:e9:eb:bf:59:f3:20:55:29: a4:f5:f5:61:5c:3c:7a:5c:4b:74:42:41:d6:9a:a0:da:2b:85: 97:b7:42:e6:4d:93:90:cb:b1:df:c1:dc:00:7b:c4:58:28:89: 39:ad:fd:68:20:c8:a3:19:05:90:ed:21:85:2c:f4:f1:84:9a: 16:04:4a:1e:2f:f3:a2:d4:2e:2a:47:27:35:0b:04:b7:ff:90: 88:bd:64:a5:b7:5f:7b:d1:85:15:53:2b:b8:7a:4c:2b:44:ca: 93:86:86:7d:35:ba:ed:ff:41:26:71:04:4f:52:64:5a:ed:c8: 24:c0:28:a9:be:6b:05:0f:68:f4:02:be:57:1d:4d:ef:f0:bc: 8b:89:52:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrkTr0N0NS4mUZCF6ptkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2NlZDMwYjI4NTJlNTUyYzc4Mzc0NjcwMDNmMTc1ZWE1 OWRlNzMwHhcNMjUxMjE2MTUwMTMwWhcNMjUxMjE3MTUwMTMwWjAzMTEwLwYDVQQD EygzYzVkYzM4Y2I3MGU2OTdjNTEzMWIwMzIxZGY0MWU1ZTBkYjdjYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFJMYfJUzeAwua15736PAXWPVwRv g5L3q3xbr+N6V9wwSVpms6es7wwCrFZ1W3jQum+9IW+AhYeWP8nTALQngLgUjJbJ oAcUGMg5F9ejiGI+I88BYHHWe7s6X32vC46vBDeRmkufoSBgjy8wWjgkrJw+RPgH ft8yqk3tXiY/34PIZH1GheJTzg3h0RUu/7rg0DM5imI8abqpUcgu8N1La0Sx5jig ANhYYLGXFrEtU1n/t+TR16mPrlTQ1y5ZLiH2TsgGXT4wj1FrV2yC2c9/Wamd5M6t U8xs81zbNjGNZKv+VDMpQ0poJUN12j3jKLKncchpn+Fijyng9BAkDO0JZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxdw4y3Dml8UTGwMh30Hl4Nt8t2MB8GA1UdIwQY MBaAFI887TCyhS5VLHg3RnAD8XXqWd5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYt ZTM0NGZkYjcyMmEzLzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYtZTM0NGZkYjcyMmEz LzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI9SifBR h9HiKkrGaCxGS4eG7MVpqixWK/WXjaN/5iX25u3xvPWPoh4JGA/czFO0rD4obgCi CTYKiYF28Xiu6RMNJ3/k27ZN/oczYKM375dzSiugYtFpZaO7PtaQuZwh+rNPkzTa 4c+0eAvg/+8n3Gi7wUSZTunrv1nzIFUppPX1YVw8elxLdEJB1pqg2iuFl7dC5k2T kMux38HcAHvEWCiJOa39aCDIoxkFkO0hhSz08YSaFgRKHi/zotQuKkcnNQsEt/+Q iL1kpbdfe9GFFVMruHpMK0TKk4aGfTW67f9BJnEET1JkWu3IJMAoqb5rBQ9o9AK+ Vx1N7/C8i4lSGQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:25 2025 by rpki-client