This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json) Hash identifier: G01Oj6nyJ6jHcdQjaInj3afsqQebhl81QpdlvRNnszY= Subject key identifier: 88:D7:5F:78:E2:5F:62:A8:04:6C:73:E1:15:E8:C3:4F:B5:3B:D9:15 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B3720F7013FD1D4BA59CAA7CD0AF6C2A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft Manifest number: 0FB6 Signing time: Fri 19 Dec 2025 15:01:05 +0000 Manifest this update: Fri 19 Dec 2025 15:01:05 +0000 Manifest next update: Sat 20 Dec 2025 15:01:05 +0000 Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=) 2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=) 3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: YTNzqfGnv260Ue7PdttLu5jdCb42Th3sWIjuk6fKFqM=) 4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=) 5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=) 6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=) 7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=) 8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=) 9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:f7:01:3f:d1:d4:ba:59:ca:a7:cd:0a:f6:c2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Dec 19 15:01:05 2025 GMT Not After : Dec 20 15:01:05 2025 GMT Subject: CN=88d75f78e25f62a8046c73e115e8c34fb53bd915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:6d:4f:81:56:d4:10:fc:14:93:8d:7e:72: de:23:5a:ca:a8:38:e8:ff:01:0a:96:ea:92:d8:6b: 24:74:37:f1:40:9f:5b:41:33:b4:74:42:54:41:5c: 5b:95:53:34:6e:91:02:3c:07:ba:b0:a3:26:89:91: 74:ca:99:e2:81:22:2b:eb:d2:32:52:cd:0d:df:e1: 14:ce:18:7b:42:ec:43:5e:f4:d6:1a:29:d4:74:83: 1e:c0:81:ff:21:ae:24:0c:ca:89:4f:3c:da:dd:5c: 89:38:72:32:d2:a7:ab:44:9e:c1:f2:05:ad:41:df: b9:17:51:ee:51:36:e1:34:04:d3:bc:43:b5:b7:2d: f7:8f:22:9c:de:81:c1:30:14:c8:7a:fb:d9:f0:45: 31:8c:6c:1a:c4:a4:75:34:b9:b2:de:05:fc:24:ec: e7:33:d0:ec:62:d6:1a:85:9c:5b:25:01:a1:a1:c1: 45:94:79:be:36:9c:64:c8:3d:2d:3b:ec:d4:32:40: 14:fe:07:a1:ca:95:42:7e:35:13:00:79:3a:0a:d1: f4:f6:a6:23:83:80:39:b2:63:4e:6c:1f:11:04:12: 7c:03:c8:a5:fe:38:f5:01:70:36:2c:bf:7d:e1:3d: b2:d5:dd:21:96:a1:36:b2:6c:aa:ae:cf:93:12:28: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D7:5F:78:E2:5F:62:A8:04:6C:73:E1:15:E8:C3:4F:B5:3B:D9:15 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dc:d9:79:9e:f8:a3:3e:02:b4:45:e5:0d:7b:49:37:dc:3d: ec:d7:31:bb:ad:81:2b:85:22:d5:66:1a:e5:cf:5e:a0:91:cb: 7e:70:c5:07:38:4e:94:da:da:f3:79:1e:12:b4:1d:23:01:68: f5:c8:9c:b3:94:1c:61:f7:e0:ba:5f:cc:df:91:9b:03:37:ea: 74:cd:7a:bb:4c:dd:b9:38:51:36:f0:a6:fe:01:91:d7:db:55: 91:f1:29:50:a8:e3:02:89:d7:66:09:a8:d5:e2:04:0f:87:00: 60:43:04:85:f1:ab:7d:e3:21:62:6f:8e:d6:7e:b4:96:e4:6f: b8:c1:65:d8:c2:06:86:76:c3:f6:a1:3d:e2:61:5d:3c:bf:ff: 58:38:80:bd:f4:f5:34:a0:b6:3f:78:87:42:c8:44:bb:a7:cd: 63:b9:82:02:e2:0d:f4:c3:b4:14:d3:93:70:fc:fe:07:59:64: 7f:61:ef:f6:91:b7:3b:49:7f:f7:16:a0:60:29:20:4b:3c:97: da:57:59:68:42:6a:af:00:7b:9d:83:a1:db:fa:5b:dd:ea:75: a7:27:59:fa:8e:41:ac:8b:85:01:fd:f7:b6:45:36:5a:84:21: 59:73:90:8e:b4:34:33:8e:a6:33:1a:41:62:2a:d4:7f:3e:f4: cd:c8:53:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IPcBP9HUulnKp80K9sKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjUxMjE5MTUwMTA1WhcNMjUxMjIwMTUwMTA1WjAzMTEwLwYDVQQD Eyg4OGQ3NWY3OGUyNWY2MmE4MDQ2YzczZTExNWU4YzM0ZmI1M2JkOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ptT4FW1BD8FJONfnLeI1rKqDjo /wEKluqS2GskdDfxQJ9bQTO0dEJUQVxblVM0bpECPAe6sKMmiZF0ypnigSIr69Iy Us0N3+EUzhh7QuxDXvTWGinUdIMewIH/Ia4kDMqJTzza3VyJOHIy0qerRJ7B8gWt Qd+5F1HuUTbhNATTvEO1ty33jyKc3oHBMBTIevvZ8EUxjGwaxKR1NLmy3gX8JOzn M9DsYtYahZxbJQGhocFFlHm+NpxkyD0tO+zUMkAU/gehypVCfjUTAHk6CtH09qYj g4A5smNObB8RBBJ8A8il/jj1AXA2LL994T2y1d0hlqE2smyqrs+TEiiFAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjXX3jiX2KoBGxz4RXow0+1O9kVMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtzZeZ74 oz4CtEXlDXtJN9w97Ncxu62BK4Ui1WYa5c9eoJHLfnDFBzhOlNra83keErQdIwFo 9cics5QcYffgul/M35GbAzfqdM16u0zduThRNvCm/gGR19tVkfEpUKjjAonXZgmo 1eIED4cAYEMEhfGrfeMhYm+O1n60luRvuMFl2MIGhnbD9qE94mFdPL//WDiAvfT1 NKC2P3iHQshEu6fNY7mCAuIN9MO0FNOTcPz+B1lkf2Hv9pG3O0l/9xagYCkgSzyX 2ldZaEJqrwB7nYOh2/pb3ep1pydZ+o5BrIuFAf33tkU2WoQhWXOQjrQ0M46mMxpB YirUfz70zchTWA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:50:15 2025 by rpki-client