This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json) Hash identifier: gg5RNXNJWc3180nvawXtv8ewE0dC9rSysWppAYlRwVw= Subject key identifier: 14:1D:E4:71:2A:1B:EB:72:81:96:DB:A5:9E:21:AD:BC:FC:7A:46:66 Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Certificate serial: 019B416D27C82074A1EBD5FFDDD8693EFCB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft Manifest number: 023D Signing time: Sun 21 Dec 2025 15:00:31 +0000 Manifest this update: Sun 21 Dec 2025 15:00:31 +0000 Manifest next update: Mon 22 Dec 2025 15:00:31 +0000 Files and hashes: 1: Odu_8Z8wYQ4rAwGBZ2rfmaKWPvY.roa (hash: G+0rnOlwTF853BxAQkBgLndsmH7cjPaqnqIy5TqAej8=) 2: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: kyIJPMTMkFKDGR4kokIe/Wv6GRIZwrCbFI76jtqsyU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:27:c8:20:74:a1:eb:d5:ff:dd:d8:69:3e:fc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Validity Not Before: Dec 21 15:00:31 2025 GMT Not After : Dec 22 15:00:31 2025 GMT Subject: CN=141de4712a1beb728196dba59e21adbcfc7a4666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:2f:df:2e:87:07:4a:23:36:d4:2c:59:b1: ec:4e:5a:f3:29:0a:63:f8:51:82:a3:1f:c8:0d:eb: 09:0b:aa:c7:92:cb:3e:f7:9c:32:c9:64:2e:0c:b2: 9f:85:57:f6:f1:20:ff:06:ca:9b:db:b1:fb:55:14: f5:8f:e7:61:9e:71:b7:01:fb:3a:c7:43:db:64:e3: cf:bc:9d:ec:ab:40:40:f8:4d:8a:36:b9:9d:9c:1c: ee:31:69:51:17:7f:97:0a:d3:95:4d:75:ed:dd:c0: 14:b1:9b:d0:31:0c:93:87:cf:0d:06:43:91:72:2d: 8a:0f:06:e3:7c:c3:e9:bf:72:05:91:27:69:c7:a3: f2:89:fd:90:5b:5a:69:c8:0a:48:38:a3:a2:d1:8f: a6:13:3f:13:8b:d5:d0:69:d2:dc:4a:da:39:be:d5: 48:b0:42:ea:06:9b:ab:9e:62:32:6e:64:fd:80:94: bd:5c:b1:f3:ae:1b:5a:b3:7f:14:f9:b8:b7:a5:1b: f1:91:00:5d:47:a9:61:5b:19:2e:d9:82:a1:b8:d4: 6b:ea:9d:f5:8f:18:50:0b:10:ff:c7:c6:c2:f2:9a: a7:4b:9b:ea:5d:63:94:76:a6:98:40:22:0a:85:45: 3a:b3:89:34:69:96:65:98:fa:3f:08:e8:18:aa:04: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:E4:71:2A:1B:EB:72:81:96:DB:A5:9E:21:AD:BC:FC:7A:46:66 X509v3 Authority Key Identifier: keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1c:01:b6:35:0e:31:2d:76:29:65:71:53:b3:9c:6a:a1:9c: 66:0b:2d:b7:b9:4c:4c:f5:8c:0f:25:cd:87:3d:82:79:c6:05: 5d:b9:c4:39:0b:32:bf:f4:f3:2c:90:4b:5a:40:08:42:04:40: 43:79:17:70:eb:26:fe:bc:67:ed:b6:0e:64:65:1e:84:15:c7: 08:59:71:5f:f4:12:5d:b1:ff:a5:3b:e9:01:e2:c4:f7:77:0c: ba:d5:26:17:88:b5:61:1c:f5:04:5b:ee:df:57:89:bc:88:0f: f6:2b:b3:2c:03:17:a6:78:1a:e6:4c:e6:e2:f8:f3:aa:7b:34: 24:09:5b:7f:a8:72:28:9f:02:53:27:04:64:d9:88:5e:6b:27: 91:d1:02:91:f9:31:f1:6c:28:6e:53:d4:15:d9:d1:e6:4c:25: 93:d5:94:a2:2e:b9:e8:a1:41:f4:04:1e:eb:93:c1:fd:7d:d2: 5f:b1:da:57:a7:e6:1e:fc:8d:8a:1a:6b:07:cb:12:9a:95:84: 11:5b:31:bc:2f:06:c5:1f:5d:ae:55:b8:d2:c2:97:d8:a0:23: 94:39:5d:03:c9:9f:62:c1:13:ea:1c:22:42:a4:97:1e:7a:3d: 42:35:76:2d:16:6a:2a:4e:87:7f:72:2b:2c:ab:f3:e4:18:12: be:f4:61:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbSfIIHSh69X/3dhpPvy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm MDkxOTYwHhcNMjUxMjIxMTUwMDMxWhcNMjUxMjIyMTUwMDMxWjAzMTEwLwYDVQQD EygxNDFkZTQ3MTJhMWJlYjcyODE5NmRiYTU5ZTIxYWRiY2ZjN2E0NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZkv3y6HB0ojNtQsWbHsTlrzKQpj +FGCox/IDesJC6rHkss+95wyyWQuDLKfhVf28SD/Bsqb27H7VRT1j+dhnnG3Afs6 x0PbZOPPvJ3sq0BA+E2KNrmdnBzuMWlRF3+XCtOVTXXt3cAUsZvQMQyTh88NBkOR ci2KDwbjfMPpv3IFkSdpx6Pyif2QW1ppyApIOKOi0Y+mEz8Ti9XQadLcSto5vtVI sELqBpurnmIybmT9gJS9XLHzrhtas38U+bi3pRvxkQBdR6lhWxku2YKhuNRr6p31 jxhQCxD/x8bC8pqnS5vqXWOUdqaYQCIKhUU6s4k0aZZlmPo/COgYqgRDgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQd5HEqG+tygZbbpZ4hrbz8ekZmMB8GA1UdIwQY MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhwBtjUO MS12KWVxU7OcaqGcZgstt7lMTPWMDyXNhz2CecYFXbnEOQsyv/TzLJBLWkAIQgRA Q3kXcOsm/rxn7bYOZGUehBXHCFlxX/QSXbH/pTvpAeLE93cMutUmF4i1YRz1BFvu 31eJvIgP9iuzLAMXpnga5kzm4vjzqns0JAlbf6hyKJ8CUycEZNmIXmsnkdECkfkx 8WwoblPUFdnR5kwlk9WUoi656KFB9AQe65PB/X3SX7HaV6fmHvyNihprB8sSmpWE EVsxvC8GxR9drlW40sKX2KAjlDldA8mfYsET6hwiQqSXHno9QjV2LRZqKk6Hf3Ir LKvz5BgSvvRheA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:30:23 2025 by rpki-client