This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json) Hash identifier: uHh1BZ2F+ZtnLPrX7cFf1lL6/6WEUlukY3wCuM8Qt3w= Subject key identifier: F0:72:6E:39:D4:14:6D:49:83:2D:07:D2:AC:3E:3C:E5:9F:AB:4A:E9 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B3F111E2A561F6F4D61ADE4C5C4192805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft Manifest number: 15A8 Signing time: Sun 21 Dec 2025 04:00:44 +0000 Manifest this update: Sun 21 Dec 2025 04:00:44 +0000 Manifest next update: Mon 22 Dec 2025 04:00:44 +0000 Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=) 2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: lJRsJH+J9eyRJWLUkEQEH9X0bgGR+1yxvBctcWr3p/o=) 3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=) 4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1e:2a:56:1f:6f:4d:61:ad:e4:c5:c4:19:28:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Dec 21 04:00:44 2025 GMT Not After : Dec 22 04:00:44 2025 GMT Subject: CN=f0726e39d4146d49832d07d2ac3e3ce59fab4ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:d5:cb:53:c1:d6:a3:02:bd:8b:09:d5:4b: 81:41:6b:b5:52:45:ea:e7:67:e2:68:19:ef:5a:9a: 13:b6:a4:82:60:eb:60:f3:88:55:3e:a7:8b:bf:6a: 92:eb:4e:dd:19:d1:a5:18:9c:d6:a3:d7:1f:4f:99: 58:8d:52:ea:86:e6:e4:10:c0:fe:57:70:94:f3:e6: fd:9e:21:34:cb:dc:70:05:83:6b:e1:eb:a0:fd:1c: 4c:41:c2:06:59:e3:b7:aa:78:3b:2e:ba:d0:0f:ce: 93:ac:42:cf:c8:5f:99:93:ed:90:fe:c9:39:8c:74: 4f:b9:69:5b:9b:d4:5a:1f:54:f1:01:e7:56:3e:4b: e5:7f:a3:af:d5:b1:b0:42:5a:8e:4a:22:38:56:1b: 48:a9:9e:df:fc:91:6f:62:28:db:e8:12:2c:dc:3d: 06:0b:d8:69:77:41:cd:29:42:90:8b:c2:90:bd:8b: 9c:89:63:24:fb:5a:4a:3e:32:32:08:59:03:3d:23: ef:d2:5f:1f:15:fe:be:79:ab:1e:2d:52:b8:a5:d1: 7d:60:ec:eb:4d:60:6c:2b:60:41:a5:01:f2:19:22: 6a:c4:c1:d8:88:13:12:96:93:b0:10:e5:6f:a9:a7: 06:42:01:6b:4c:3a:f6:3c:ad:1c:66:ad:13:4b:1e: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:6E:39:D4:14:6D:49:83:2D:07:D2:AC:3E:3C:E5:9F:AB:4A:E9 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a8:84:1f:bb:c9:25:d7:95:62:39:04:47:c5:a0:82:74:f9: 4c:f6:d6:d9:4f:95:d8:d5:38:4b:a9:21:46:75:6f:59:9a:e1: ee:34:65:0d:74:15:47:f0:68:6d:42:6b:62:b0:45:d0:21:2c: dc:c9:89:d2:db:f6:36:5c:c3:34:74:b2:fd:e4:fd:90:2e:12: cd:72:61:7d:c2:e1:98:c5:33:dd:24:56:21:04:00:d3:3f:fe: aa:7f:b8:c4:35:34:a3:c5:52:1e:c7:bc:37:cf:14:65:a0:62: 0e:fd:cd:60:03:90:31:62:6d:bf:d8:0a:d7:88:fd:b4:9a:4b: 09:5d:68:1a:a3:5f:7c:b0:19:ad:47:47:8d:db:b3:c8:d9:1f: 67:d4:5f:e9:f0:96:a0:c7:76:69:14:ad:69:47:ac:5c:57:e5: f1:63:09:9e:8d:61:91:98:38:79:41:df:a8:11:27:09:30:23: 42:b5:9b:c3:2b:34:42:46:a2:de:97:2d:88:3d:7e:a2:21:22: d7:b2:c7:24:52:02:8b:14:58:d5:4b:fd:5b:de:08:dd:22:5e: 19:f8:7c:7c:a7:97:a5:65:2d:d8:2e:04:59:bf:0a:62:2a:dc: ed:83:e2:61:f0:71:e2:28:47:ff:f3:98:10:3b:c9:1e:d9:da: 92:ca:d8:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ER4qVh9vTWGt5MXEGSgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjUxMjIxMDQwMDQ0WhcNMjUxMjIyMDQwMDQ0WjAzMTEwLwYDVQQD EyhmMDcyNmUzOWQ0MTQ2ZDQ5ODMyZDA3ZDJhYzNlM2NlNTlmYWI0YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyDVy1PB1qMCvYsJ1UuBQWu1UkXq 52fiaBnvWpoTtqSCYOtg84hVPqeLv2qS607dGdGlGJzWo9cfT5lYjVLqhubkEMD+ V3CU8+b9niE0y9xwBYNr4eug/RxMQcIGWeO3qng7LrrQD86TrELPyF+Zk+2Q/sk5 jHRPuWlbm9RaH1TxAedWPkvlf6Ov1bGwQlqOSiI4VhtIqZ7f/JFvYijb6BIs3D0G C9hpd0HNKUKQi8KQvYuciWMk+1pKPjIyCFkDPSPv0l8fFf6+easeLVK4pdF9YOzr TWBsK2BBpQHyGSJqxMHYiBMSlpOwEOVvqacGQgFrTDr2PK0cZq0TSx7+VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBybjnUFG1Jgy0H0qw+POWfq0rpMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqiEH7vJ JdeVYjkER8WggnT5TPbW2U+V2NU4S6khRnVvWZrh7jRlDXQVR/BobUJrYrBF0CEs 3MmJ0tv2NlzDNHSy/eT9kC4SzXJhfcLhmMUz3SRWIQQA0z/+qn+4xDU0o8VSHse8 N88UZaBiDv3NYAOQMWJtv9gK14j9tJpLCV1oGqNffLAZrUdHjduzyNkfZ9Rf6fCW oMd2aRStaUesXFfl8WMJno1hkZg4eUHfqBEnCTAjQrWbwys0Qkai3pctiD1+oiEi 17LHJFICixRY1Uv9W94I3SJeGfh8fKeXpWUt2C4EWb8KYirc7YPiYfBx4ihH//OY EDvJHtnaksrYgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:10 2025 by rpki-client