This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json) Hash identifier: pVBaqira3OS/sJz+/vRLUueK/YmMKjUzmVQVIHvZWrQ= Subject key identifier: 2C:36:24:3C:98:B0:45:65:3F:A7:44:9A:1D:60:22:09:E9:6F:A8:8F Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B5260C38C7C4A385EDF9469E6D2D0ECBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft Manifest number: 15B2 Signing time: Wed 24 Dec 2025 22:00:31 +0000 Manifest this update: Wed 24 Dec 2025 22:00:31 +0000 Manifest next update: Thu 25 Dec 2025 22:00:31 +0000 Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=) 2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: QNi797nW8Ea5+2HPxA7ht6HS0h+fsj2YDNshAIbqJfw=) 3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=) 4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:c3:8c:7c:4a:38:5e:df:94:69:e6:d2:d0:ec:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Dec 24 22:00:31 2025 GMT Not After : Dec 25 22:00:31 2025 GMT Subject: CN=2c36243c98b045653fa7449a1d602209e96fa88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:a1:bb:1b:49:22:79:35:67:28:63:25:9a: 35:85:75:db:3c:8b:4c:be:0b:ae:df:fd:95:59:23: a5:af:10:df:58:ac:39:0d:22:4d:6d:08:61:1b:0e: bc:07:0a:05:f3:6e:de:52:b0:48:e2:e4:16:d8:f8: cc:25:62:cf:98:bc:11:1c:42:5a:fa:64:93:b3:17: e0:02:45:c3:54:30:a5:fa:46:72:8a:2d:97:5c:0a: 08:83:7c:e6:a2:37:fa:02:2b:32:f1:f1:98:ab:28: 6f:b8:1f:19:eb:a9:ae:c4:38:a1:96:17:2b:1b:36: 60:1d:c5:fc:91:f3:41:d9:1a:ec:a4:4d:26:a3:06: df:58:78:d0:57:3e:77:df:c2:26:85:d7:14:2a:ef: 2d:30:d9:78:f5:5c:37:17:e0:de:e8:83:82:a8:3e: 15:43:ab:cb:0b:e2:63:ae:94:87:e6:44:32:ed:11: 04:9b:8a:b8:ab:3d:f4:23:35:e8:ff:64:c6:66:c9: be:c1:1e:0c:0c:41:03:b9:9b:9d:5f:63:44:24:e2: 67:ea:ce:6e:cd:d6:d5:36:ee:f3:06:05:aa:e5:55: 36:0b:b7:bc:62:b0:97:3b:ee:76:74:e2:5e:63:c5: 46:bb:f9:55:fc:21:57:f4:22:3b:60:f5:5f:b6:af: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:24:3C:98:B0:45:65:3F:A7:44:9A:1D:60:22:09:E9:6F:A8:8F X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:8d:87:74:1e:1e:88:2f:23:72:f5:fb:bf:68:24:5a:fd: 7d:24:34:53:4f:79:6e:54:76:d8:7b:01:b4:1d:55:c5:be:a3: e7:f4:77:31:ff:34:5b:ac:d8:a4:f7:13:b5:92:ee:83:67:5d: ea:9b:f5:7f:3e:94:ae:c2:aa:3e:0e:37:a5:9a:71:0f:83:62: 1b:fb:8f:4e:d9:ac:b8:7b:be:bd:da:7a:3d:af:35:72:a8:5b: 03:23:3b:69:5c:7b:5d:38:df:e7:4f:6a:52:9d:5a:d3:d8:1a: 95:db:d6:4a:d7:2d:71:e1:a0:c0:0d:aa:09:85:52:d7:7d:66: 90:44:64:cd:c2:be:ff:a7:20:f5:a6:cc:f6:de:d0:0d:d7:77: b0:b6:29:12:93:4a:61:2b:a8:e4:cb:20:68:6d:bf:91:52:4e: 3d:8e:9e:75:cc:5e:98:cb:32:a7:17:15:08:09:be:f2:0b:2f: 63:d1:e8:22:cf:25:f9:cc:44:cc:13:76:ad:28:74:b1:ad:0f: e5:59:ef:21:94:7f:9b:0a:87:1b:25:ff:cd:9c:b7:6e:69:93: 64:ba:ea:c9:50:b8:6a:52:c5:be:b1:38:ca:d4:e3:da:31:21: 29:26:25:c7:40:70:66:7a:3d:6e:6e:1f:c5:88:00:29:67:c8: 07:ac:86:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYMOMfEo4Xt+UaebS0Oy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjUxMjI0MjIwMDMxWhcNMjUxMjI1MjIwMDMxWjAzMTEwLwYDVQQD EygyYzM2MjQzYzk4YjA0NTY1M2ZhNzQ0OWExZDYwMjIwOWU5NmZhODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nKhuxtJInk1ZyhjJZo1hXXbPItM vguu3/2VWSOlrxDfWKw5DSJNbQhhGw68BwoF827eUrBI4uQW2PjMJWLPmLwRHEJa +mSTsxfgAkXDVDCl+kZyii2XXAoIg3zmojf6Aisy8fGYqyhvuB8Z66muxDihlhcr GzZgHcX8kfNB2RrspE0mowbfWHjQVz5338ImhdcUKu8tMNl49Vw3F+De6IOCqD4V Q6vLC+JjrpSH5kQy7REEm4q4qz30IzXo/2TGZsm+wR4MDEEDuZudX2NEJOJn6s5u zdbVNu7zBgWq5VU2C7e8YrCXO+52dOJeY8VGu/lV/CFX9CI7YPVftq8sXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw2JDyYsEVlP6dEmh1gIgnpb6iPMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoeNh3Qe HogvI3L1+79oJFr9fSQ0U095blR22HsBtB1Vxb6j5/R3Mf80W6zYpPcTtZLug2dd 6pv1fz6UrsKqPg43pZpxD4NiG/uPTtmsuHu+vdp6Pa81cqhbAyM7aVx7XTjf509q Up1a09galdvWStctceGgwA2qCYVS131mkERkzcK+/6cg9abM9t7QDdd3sLYpEpNK YSuo5MsgaG2/kVJOPY6edcxemMsypxcVCAm+8gsvY9HoIs8l+cxEzBN2rSh0sa0P 5VnvIZR/mwqHGyX/zZy3bmmTZLrqyVC4alLFvrE4ytTj2jEhKSYlx0BwZno9bm4f xYgAKWfIB6yGEg== -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:51 2025 by rpki-client