This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json) Hash identifier: tHi9pJb8fCo9GRgYkLRfrEqQYrymlZt8F5Vk0ao+GyY= Subject key identifier: 79:AF:AF:57:03:84:0C:CA:9F:9E:23:C4:19:4B:D3:05:D3:C7:F7:13 Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019B39B402490F680774590397A9AAAE53DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft Manifest number: 0F27 Signing time: Sat 20 Dec 2025 03:00:56 +0000 Manifest this update: Sat 20 Dec 2025 03:00:56 +0000 Manifest next update: Sun 21 Dec 2025 03:00:56 +0000 Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=) 2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: Hs2LlM9fa8wl2/lJf651iW4zUFy/yyS277AsznPk+V0=) 3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:02:49:0f:68:07:74:59:03:97:a9:aa:ae:53:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Dec 20 03:00:56 2025 GMT Not After : Dec 21 03:00:56 2025 GMT Subject: CN=79afaf5703840cca9f9e23c4194bd305d3c7f713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:72:05:f4:db:4e:31:1f:81:5c:df:81:95: 10:26:31:da:3b:e5:66:93:99:db:fe:c3:54:f8:4d: 06:79:73:46:35:06:ff:cb:a6:f9:aa:3f:f7:8d:e7: b1:75:9a:eb:18:27:a6:c6:5e:52:8a:95:db:95:a1: fc:af:4d:aa:29:2e:93:c8:c0:b9:23:53:52:9d:91: 37:07:89:f4:1b:42:c6:50:8a:a3:a6:f3:ef:e7:41: b7:2f:6e:da:80:5a:eb:52:26:75:29:6f:d0:9e:94: 2a:9f:07:58:bf:a3:7d:1a:42:50:05:9f:e0:9b:60: da:45:70:18:30:be:2a:80:1e:c7:62:e1:65:00:a6: d6:44:f8:da:e2:12:e6:fb:47:a0:84:e8:00:f6:90: 22:40:58:ff:dc:ed:b4:a3:ad:af:3f:93:5d:93:91: 00:d9:d2:f5:b5:a7:1b:7a:78:52:dc:6a:a6:d1:e1: f2:1f:a0:12:8e:af:4f:dc:a3:b8:f9:b4:f1:38:17: 6e:16:7f:5b:4f:01:9b:8d:98:f4:8e:92:f9:39:23: 32:a7:53:eb:10:28:6c:7a:4c:33:f7:75:0d:96:1d: ed:47:b8:fe:e2:e1:38:87:ee:4e:ef:66:58:7d:c1: ab:71:82:47:8f:ff:0e:c3:04:35:c5:87:24:c3:fd: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:AF:57:03:84:0C:CA:9F:9E:23:C4:19:4B:D3:05:D3:C7:F7:13 X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:86:a0:3a:4d:68:0c:48:d1:e3:78:c1:9f:35:4a:51:99:51: ab:e7:2f:6f:cc:23:c0:4d:cf:93:82:50:0f:1f:62:e9:f8:a5: 58:95:52:99:05:3f:ae:b1:53:92:b5:47:c7:e2:e1:f2:72:1a: 95:7f:aa:88:52:0b:b6:36:5b:d7:09:5a:e7:46:b5:47:4a:8f: 23:bc:2d:16:da:48:a0:61:08:65:00:21:26:d5:d9:f1:45:ca: 4f:4d:9f:e7:6d:45:28:b4:c4:67:a0:b6:5c:38:21:eb:58:e7: 1d:16:19:1c:de:a6:25:67:87:31:9d:d1:49:c5:8d:a8:26:90: 2e:bd:66:0d:61:0f:cf:7e:f0:f4:5e:e7:0b:4d:9e:61:36:30: 7d:cf:5c:71:c2:7e:83:90:54:19:77:e2:6f:f9:2b:f8:32:87: 45:60:e4:83:66:8b:c8:d6:ae:e8:73:2e:c4:76:3d:48:e0:00: f7:34:b7:95:2a:a9:03:7e:50:eb:51:d8:92:08:ca:b0:77:19: ee:78:70:57:74:6b:15:4c:9d:0c:aa:1c:e2:05:00:6e:db:98: 58:af:6b:1d:72:83:53:fc:4e:ef:39:f7:73:de:d5:bb:93:af: 8d:2a:a3:1f:ee:22:26:cf:95:a6:7c:a8:04:31:bd:86:56:89: 57:57:f3:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tAJJD2gHdFkDl6mqrlPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjUxMjIwMDMwMDU2WhcNMjUxMjIxMDMwMDU2WjAzMTEwLwYDVQQD Eyg3OWFmYWY1NzAzODQwY2NhOWY5ZTIzYzQxOTRiZDMwNWQzYzdmNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc9yBfTbTjEfgVzfgZUQJjHaO+Vm k5nb/sNU+E0GeXNGNQb/y6b5qj/3jeexdZrrGCemxl5SipXblaH8r02qKS6TyMC5 I1NSnZE3B4n0G0LGUIqjpvPv50G3L27agFrrUiZ1KW/QnpQqnwdYv6N9GkJQBZ/g m2DaRXAYML4qgB7HYuFlAKbWRPja4hLm+0eghOgA9pAiQFj/3O20o62vP5Ndk5EA 2dL1tacbenhS3Gqm0eHyH6ASjq9P3KO4+bTxOBduFn9bTwGbjZj0jpL5OSMyp1Pr EChsekwz93UNlh3tR7j+4uE4h+5O72ZYfcGrcYJHj/8OwwQ1xYckw/0xkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmvr1cDhAzKn54jxBlL0wXTx/cTMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYagOk1o DEjR43jBnzVKUZlRq+cvb8wjwE3Pk4JQDx9i6filWJVSmQU/rrFTkrVHx+Lh8nIa lX+qiFILtjZb1wla50a1R0qPI7wtFtpIoGEIZQAhJtXZ8UXKT02f521FKLTEZ6C2 XDgh61jnHRYZHN6mJWeHMZ3RScWNqCaQLr1mDWEPz37w9F7nC02eYTYwfc9cccJ+ g5BUGXfib/kr+DKHRWDkg2aLyNau6HMuxHY9SOAA9zS3lSqpA35Q61HYkgjKsHcZ 7nhwV3RrFUydDKoc4gUAbtuYWK9rHXKDU/xO7zn3c97Vu5OvjSqjH+4iJs+Vpnyo BDG9hlaJV1fzew== -----END CERTIFICATE-----Generated at Sat Dec 20 04:50:52 2025 by rpki-client