This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json) Hash identifier: YMMd//ezn6h++Aq9LF6Ugb2MuF3cFM/dG9IdDYd7oYY= Subject key identifier: 96:E8:E3:0C:50:B1:D4:25:37:6E:26:44:C5:75:17:B2:06:C2:29:27 Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97 Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97 Certificate serial: 019B5117F429643D3F1ABD22130774D1D039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft Manifest number: 92 Signing time: Wed 24 Dec 2025 16:01:22 +0000 Manifest this update: Wed 24 Dec 2025 16:01:22 +0000 Manifest next update: Thu 25 Dec 2025 16:01:22 +0000 Files and hashes: 1: 1-O-D5pri3mmR8booyMgtZ5-BGW4.roa (hash: jb6YU5fT/HqK2xKc/LbLrArBSelpTLeT7YITNpvV0to=) 2: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: PNn3VdpPV58uxe+dc/3yRPVx9SGlCOPuxO/2ERBiHgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:f4:29:64:3d:3f:1a:bd:22:13:07:74:d1:d0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97 Validity Not Before: Dec 24 16:01:22 2025 GMT Not After : Dec 25 16:01:22 2025 GMT Subject: CN=96e8e30c50b1d425376e2644c57517b206c22927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:f7:f8:88:e5:25:96:e5:62:82:f6:a6:80: 51:e1:1e:14:ba:21:c1:4f:e5:3b:17:eb:04:7b:88: c4:f8:1e:3a:a2:d0:93:83:ca:b6:18:55:97:fc:ae: 92:7e:aa:49:5e:92:bf:11:63:18:11:a3:78:e8:32: 53:a8:50:18:c2:95:85:df:02:42:95:1c:aa:56:4d: e9:a9:61:fd:94:ca:04:57:ab:9b:54:af:2d:9c:ea: 34:e5:e5:e3:52:c6:4d:12:f0:23:dc:03:ef:60:6c: 8b:05:39:8e:d9:53:12:84:b7:98:38:2b:03:be:3e: c1:8b:63:58:b5:91:1e:8e:27:7c:8c:ba:58:cf:b4: f1:e3:b8:41:36:6c:2a:4f:0d:2a:ac:81:3d:ca:04: ae:5a:df:82:0e:bd:53:12:78:68:00:e1:5e:40:a4: 3b:19:27:ca:31:7a:8c:4d:90:96:f8:53:24:da:b8: c6:3f:50:07:f3:5c:75:b1:a6:cb:2b:e4:1f:e0:bc: 18:21:4b:50:bd:2d:0f:e5:69:69:7c:74:3b:98:05: 46:42:55:58:cf:80:72:5a:a6:54:fb:48:66:fc:62: 97:46:09:87:7d:1e:56:4a:53:70:ee:c6:34:31:35: b5:17:41:89:11:ff:eb:96:da:9c:0e:31:a2:0b:94: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:E3:0C:50:B1:D4:25:37:6E:26:44:C5:75:17:B2:06:C2:29:27 X509v3 Authority Key Identifier: keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:11:ce:42:6b:d8:8b:ff:d3:5b:2b:cd:84:56:05:0b:0e:af: d6:6a:ec:fc:f8:18:1b:b2:77:15:49:83:70:10:75:46:03:62: fe:50:83:77:51:47:4d:f4:40:bf:fb:e2:83:61:55:9d:8d:cb: a5:07:fe:b7:f5:8e:3f:c1:68:11:f8:ca:10:48:0e:16:4c:cf: a7:e3:ed:f5:7f:4c:2b:ff:d6:3e:eb:9d:86:6f:4d:97:a2:df: ae:b0:30:9f:69:6d:36:46:e9:5d:65:ae:48:ec:01:2a:27:28: b0:b3:eb:6f:29:92:bf:a3:9f:f1:88:ab:d8:0e:9f:bb:fa:63: 9c:05:81:aa:f9:51:93:0c:33:09:9e:ca:f8:77:07:66:09:a2: 67:5f:cc:8b:40:75:de:d2:13:7e:de:fb:5e:53:4c:40:37:50: b9:8f:c0:7f:0f:fe:2c:ec:ff:60:62:66:f8:16:aa:94:0c:a7: 96:42:d2:c9:e6:b1:cb:1c:c1:6a:37:57:dd:ed:8b:ac:4b:e5: 9d:af:ad:7e:a2:71:37:64:45:14:7e:2a:66:67:ab:af:3e:e4: 18:ec:5c:80:ea:8b:a1:b3:1e:bf:6c:54:5a:e1:9d:87:a3:8e: 8b:21:cc:15:3e:a1:39:96:a7:03:be:ed:de:59:d3:36:38:fe: 52:3b:9d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF/QpZD0/Gr0iEwd00dA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTRhOGIzZDc1YzViMjIwZWQ5OWNmMmU3MjAwNGY2ZWMx MWFhOTcwHhcNMjUxMjI0MTYwMTIyWhcNMjUxMjI1MTYwMTIyWjAzMTEwLwYDVQQD Eyg5NmU4ZTMwYzUwYjFkNDI1Mzc2ZTI2NDRjNTc1MTdiMjA2YzIyOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+T3+IjlJZblYoL2poBR4R4UuiHB T+U7F+sEe4jE+B46otCTg8q2GFWX/K6SfqpJXpK/EWMYEaN46DJTqFAYwpWF3wJC lRyqVk3pqWH9lMoEV6ubVK8tnOo05eXjUsZNEvAj3APvYGyLBTmO2VMShLeYOCsD vj7Bi2NYtZEejid8jLpYz7Tx47hBNmwqTw0qrIE9ygSuWt+CDr1TEnhoAOFeQKQ7 GSfKMXqMTZCW+FMk2rjGP1AH81x1sabLK+Qf4LwYIUtQvS0P5WlpfHQ7mAVGQlVY z4ByWqZU+0hm/GKXRgmHfR5WSlNw7sY0MTW1F0GJEf/rltqcDjGiC5SkmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbo4wxQsdQlN24mRMV1F7IGwiknMB8GA1UdIwQY MBaAFCWUqLPXXFsiDtmc8ucgBPbsEaqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjRjZGUtMWFhNi00ZTg4LTlhM2Mt MWNhOWMyNjJjZTczLzEvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYjRjZGUtMWFhNi00ZTg4LTlhM2MtMWNhOWMyNjJjZTcz LzEvSlpTb3M5ZGNXeUlPMlp6eTV5QUU5dXdScXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxHOQmvY i//TWyvNhFYFCw6v1mrs/PgYG7J3FUmDcBB1RgNi/lCDd1FHTfRAv/vig2FVnY3L pQf+t/WOP8FoEfjKEEgOFkzPp+Pt9X9MK//WPuudhm9Nl6LfrrAwn2ltNkbpXWWu SOwBKicosLPrbymSv6Of8Yir2A6fu/pjnAWBqvlRkwwzCZ7K+HcHZgmiZ1/Mi0B1 3tITft77XlNMQDdQuY/Afw/+LOz/YGJm+BaqlAynlkLSyeaxyxzBajdX3e2LrEvl na+tfqJxN2RFFH4qZmerrz7kGOxcgOqLobMev2xUWuGdh6OOiyHMFT6hOZanA77t 3lnTNjj+UjudqA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:16:59 2025 by rpki-client