This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json) Hash identifier: E1vJc1r8QAdYe0U2dAPQXyJdnVNSgcWiYNCClyywVFo= Subject key identifier: DE:E7:93:CC:5F:71:ED:08:D7:7B:BC:9C:2E:6B:67:ED:E7:AD:95:87 Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03 Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903 Certificate serial: 019B4D3AD2D4AED02E8DA0F4675838FA0D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 22:00:59 +0000 Manifest this update: Tue 23 Dec 2025 22:00:59 +0000 Manifest next update: Wed 24 Dec 2025 22:00:59 +0000 Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=) 2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: cqqTQpGlRb6k2jTOG9PVWsv2BQ7ZRo5cfqPjAyhjUgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:d2:d4:ae:d0:2e:8d:a0:f4:67:58:38:fa:0d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903 Validity Not Before: Dec 23 22:00:59 2025 GMT Not After : Dec 24 22:00:59 2025 GMT Subject: CN=dee793cc5f71ed08d77bbc9c2e6b67ede7ad9587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:12:ef:e4:5c:be:fe:14:d3:22:13:fe:e8: 00:70:05:f8:b7:76:2a:7f:5c:7e:1f:ba:7f:7e:d6: 14:52:6f:e4:33:61:09:b0:d5:5c:66:7e:ba:17:fb: 83:0e:90:4c:50:04:e6:32:e7:2e:55:54:74:19:45: d4:36:1f:04:b8:53:c6:32:96:c3:7e:3b:c3:0b:b2: 0d:87:f6:5e:28:3e:42:f6:4a:d4:24:5d:08:32:d2: 68:ca:ea:35:f7:09:d8:31:8e:38:3d:6b:f8:74:13: d7:ad:9b:22:99:83:1a:0e:a5:99:64:9d:e4:c4:17: a5:a3:05:be:be:d3:b0:e8:46:d7:ed:03:f3:47:da: 04:3c:bf:31:d6:e8:48:04:f8:fd:c4:64:79:1a:0a: 30:ab:34:a7:ac:3e:7f:fc:95:e6:ef:21:91:20:a2: 1f:c3:a5:5a:73:31:67:9b:95:94:15:4d:d3:0b:9d: 19:f4:e2:d3:65:19:55:b0:a2:5a:97:15:a0:b0:b0: 21:55:3d:a4:34:d4:1c:53:95:a1:bd:b5:94:f1:26: 63:1f:bb:8e:24:d0:0d:5d:3a:53:ec:17:fb:5b:a9: 39:eb:25:81:1f:07:7f:ab:ce:9e:ae:4c:1c:10:d5: 36:fa:2e:d0:e8:29:b8:65:25:2e:73:c1:80:dc:eb: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:93:CC:5F:71:ED:08:D7:7B:BC:9C:2E:6B:67:ED:E7:AD:95:87 X509v3 Authority Key Identifier: keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:79:aa:38:2a:75:ad:e9:a7:99:f8:c0:86:c3:3e:c4:17: 24:b9:1c:e9:52:36:e1:9a:f3:81:3a:56:e9:f5:a8:1e:15:84: 5b:66:2c:e0:7e:31:24:22:5b:91:e2:ee:93:16:df:1f:3a:b8: e4:f7:9e:fe:26:d4:46:55:fa:79:e5:1a:0b:a4:fd:3e:d2:20: a8:ce:8f:32:ae:93:fd:0a:cc:1b:60:d4:57:d8:fa:6c:56:9d: fa:12:54:e0:ac:88:1e:78:e1:f2:f9:7b:ad:72:1c:f8:da:80: 8d:a5:de:5b:88:a4:3b:24:ec:80:42:23:6a:12:3f:f8:6c:67: 8f:39:ff:40:ca:47:51:1a:36:4c:38:3b:8d:7d:b6:76:6d:d3: 63:c7:30:ba:3c:7f:dd:99:8e:b7:84:77:eb:5c:db:cb:a0:7c: 87:e2:f4:0a:1a:17:63:c2:c3:3b:53:7a:56:3a:f7:48:3e:47: e0:8b:e0:de:4c:dc:ac:47:5b:5a:f9:f6:f2:9b:2f:c1:ab:77: 01:9b:b1:93:fa:36:e5:20:f6:a1:66:3d:7b:f5:56:63:4f:48: 81:28:b9:86:65:8e:bb:89:fe:5f:51:52:05:78:f9:9b:d4:d4: d3:56:f1:f9:4b:b1:2d:08:29:ad:d6:e2:cb:0b:f5:84:52:00: cc:55:5e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOtLUrtAujaD0Z1g4+g2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlM2NjNTY3ZmViZmUzNDg3OGFlYjkxMzg2MWNmMDYwMGEy ODM5MDMwHhcNMjUxMjIzMjIwMDU5WhcNMjUxMjI0MjIwMDU5WjAzMTEwLwYDVQQD EyhkZWU3OTNjYzVmNzFlZDA4ZDc3YmJjOWMyZTZiNjdlZGU3YWQ5NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gS7+Rcvv4U0yIT/ugAcAX4t3Yq f1x+H7p/ftYUUm/kM2EJsNVcZn66F/uDDpBMUATmMucuVVR0GUXUNh8EuFPGMpbD fjvDC7INh/ZeKD5C9krUJF0IMtJoyuo19wnYMY44PWv4dBPXrZsimYMaDqWZZJ3k xBelowW+vtOw6EbX7QPzR9oEPL8x1uhIBPj9xGR5GgowqzSnrD5//JXm7yGRIKIf w6VaczFnm5WUFU3TC50Z9OLTZRlVsKJalxWgsLAhVT2kNNQcU5WhvbWU8SZjH7uO JNANXTpT7Bf7W6k56yWBHwd/q86erkwcENU2+i7Q6Cm4ZSUuc8GA3OtyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7nk8xfce0I13u8nC5rZ+3nrZWHMB8GA1UdIwQY MBaAFK48xWf+v+NIeK65E4Yc8GAKKDkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYt OWZiMjI0YmU4YjA4LzEvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYtOWZiMjI0YmU4YjA4 LzEvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa15qjgq da3pp5n4wIbDPsQXJLkc6VI24ZrzgTpW6fWoHhWEW2Ys4H4xJCJbkeLukxbfHzq4 5Pee/ibURlX6eeUaC6T9PtIgqM6PMq6T/QrMG2DUV9j6bFad+hJU4KyIHnjh8vl7 rXIc+NqAjaXeW4ikOyTsgEIjahI/+Gxnjzn/QMpHURo2TDg7jX22dm3TY8cwujx/ 3ZmOt4R361zby6B8h+L0ChoXY8LDO1N6Vjr3SD5H4Ivg3kzcrEdbWvn28psvwat3 AZuxk/o25SD2oWY9e/VWY09IgSi5hmWOu4n+X1FSBXj5m9TU01bx+UuxLQgprdbi ywv1hFIAzFVeRg== -----END CERTIFICATE-----Generated at Wed Dec 24 00:31:14 2025 by rpki-client