This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json) Hash identifier: CEOyg5TKQVqBthPFJ9cIHH1yXLTiZCusRUOtzkhus8A= Subject key identifier: C3:6B:DE:D1:23:57:EC:08:5E:07:74:10:F5:61:1E:93:34:8E:E2:51 Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Certificate serial: 019B34202F72BE6337766C600F826DD1166E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft Manifest number: 13C8 Signing time: Fri 19 Dec 2025 01:01:23 +0000 Manifest this update: Fri 19 Dec 2025 01:01:23 +0000 Manifest next update: Sat 20 Dec 2025 01:01:23 +0000 Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=) 2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: qaItJbOppdnLqbujhpEKl1CD1twUljNVW8AKr3hWnNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:2f:72:be:63:37:76:6c:60:0f:82:6d:d1:16:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Validity Not Before: Dec 19 01:01:23 2025 GMT Not After : Dec 20 01:01:23 2025 GMT Subject: CN=c36bded12357ec085e077410f5611e93348ee251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:e5:26:c6:84:a6:b9:ab:07:0d:74:67:72: ed:50:49:11:ee:a7:ac:d0:ff:06:1c:cd:4f:60:4c: 63:38:10:d9:22:dc:b1:7a:ef:4c:f9:b6:0c:5d:74: b0:f7:86:36:0c:ec:3d:4a:30:58:dc:75:9c:67:6f: 8f:f8:3f:05:42:cc:1f:cc:10:95:2d:0c:aa:16:50: 67:58:c9:42:5b:7b:9c:90:6a:c5:6d:5f:a5:5c:97: 8b:b5:83:ae:14:ff:39:03:08:54:c7:3a:f2:cd:b6: 98:fa:a8:b8:56:1f:64:c5:0d:57:27:a7:57:63:04: a0:df:49:fd:83:53:5b:3d:77:cc:1b:e9:27:a5:a9: 29:0e:2a:52:57:0c:e8:e2:d3:fd:32:ec:ec:9d:0c: 14:4b:d6:22:41:2e:1d:fd:5a:02:cf:1d:ff:4a:e9: d4:86:49:f9:de:8d:aa:dd:1b:23:e8:93:86:9b:7f: d0:63:7e:8f:35:27:f0:f4:6c:2c:43:d1:78:0a:5e: 70:2a:ad:02:ba:39:7d:5f:3f:15:f0:d7:aa:57:06: 8f:56:28:92:f8:f6:93:97:70:2b:e9:e2:9e:68:2f: 7f:df:d2:68:bf:b7:ab:35:3c:b3:fc:97:68:d4:9c: ef:13:2a:d7:7e:f8:58:36:14:3d:88:93:8b:ef:98: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6B:DE:D1:23:57:EC:08:5E:07:74:10:F5:61:1E:93:34:8E:E2:51 X509v3 Authority Key Identifier: keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:e5:9d:23:91:96:e5:48:16:ef:8f:11:21:8f:36:87:79: 95:95:73:66:f0:69:ba:74:8d:2c:d5:30:0b:3d:5d:73:fc:52: af:b3:f2:a4:b4:7d:4e:63:21:64:be:88:fe:49:95:30:a4:09: 9c:ee:af:4a:bc:20:45:0a:7d:e3:6a:b0:3e:39:96:66:b5:df: 41:5a:5a:0a:13:2c:86:82:e2:6e:a1:bc:f3:67:53:47:e4:66: 32:02:0b:ba:f0:b5:2e:6d:d6:6e:7e:21:9f:2c:40:bb:e4:ad: 38:9c:0f:b2:e5:94:5d:65:89:99:92:9f:82:ec:c2:f6:1a:fe: 9d:74:2c:ac:e0:90:e2:48:aa:d2:fb:87:e0:82:b1:a1:35:07: 5a:31:21:ad:b9:58:09:eb:5d:37:93:a0:37:27:0e:8c:05:9c: 65:42:4f:0f:bd:d9:6f:bd:73:58:dc:67:3e:04:ec:10:a8:b2: 06:f8:0b:13:30:cb:45:c1:a3:41:8d:78:ba:33:10:91:cb:f8: d5:2e:70:64:9f:16:6b:ef:f0:fb:ee:ed:96:da:62:fb:e4:5a: e5:c6:e6:82:9b:db:41:4e:a5:1e:4a:8c:1d:a2:6b:e4:45:24: f3:ed:66:72:78:d9:6a:36:e7:59:0c:3f:cb:1c:26:68:32:75: 9b:64:e5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IC9yvmM3dmxgD4Jt0RZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk MmQyN2EwHhcNMjUxMjE5MDEwMTIzWhcNMjUxMjIwMDEwMTIzWjAzMTEwLwYDVQQD EyhjMzZiZGVkMTIzNTdlYzA4NWUwNzc0MTBmNTYxMWU5MzM0OGVlMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldzlJsaEprmrBw10Z3LtUEkR7qes 0P8GHM1PYExjOBDZItyxeu9M+bYMXXSw94Y2DOw9SjBY3HWcZ2+P+D8FQswfzBCV LQyqFlBnWMlCW3uckGrFbV+lXJeLtYOuFP85AwhUxzryzbaY+qi4Vh9kxQ1XJ6dX YwSg30n9g1NbPXfMG+knpakpDipSVwzo4tP9MuzsnQwUS9YiQS4d/VoCzx3/SunU hkn53o2q3Rsj6JOGm3/QY36PNSfw9GwsQ9F4Cl5wKq0Cujl9Xz8V8NeqVwaPViiS +PaTl3Ar6eKeaC9/39Jov7erNTyz/Jdo1JzvEyrXfvhYNhQ9iJOL75isKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNr3tEjV+wIXgd0EPVhHpM0juJRMB8GA1UdIwQY MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt ZGU5N2U5MTQxZmVkLzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhXlnSOR luVIFu+PESGPNod5lZVzZvBpunSNLNUwCz1dc/xSr7PypLR9TmMhZL6I/kmVMKQJ nO6vSrwgRQp942qwPjmWZrXfQVpaChMshoLibqG882dTR+RmMgILuvC1Lm3Wbn4h nyxAu+StOJwPsuWUXWWJmZKfguzC9hr+nXQsrOCQ4kiq0vuH4IKxoTUHWjEhrblY CetdN5OgNycOjAWcZUJPD73Zb71zWNxnPgTsEKiyBvgLEzDLRcGjQY14ujMQkcv4 1S5wZJ8Wa+/w++7tltpi++Ra5cbmgpvbQU6lHkqMHaJr5EUk8+1mcnjZajbnWQw/ yxwmaDJ1m2TlMg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:10:47 2025 by rpki-client