This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json) Hash identifier: VmRQB5PT6KJfiJwexaSe0Wv/fQf6bQFyqspGekmoUg0= Subject key identifier: EE:BB:D9:FE:E2:8B:AC:10:E5:B5:53:17:37:07:23:33:FF:D7:82:4C Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e Certificate serial: 019B650D7B94AD31E6F1FA83509C332756FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft Manifest number: 132F Signing time: Sun 28 Dec 2025 13:02:20 +0000 Manifest this update: Sun 28 Dec 2025 13:02:20 +0000 Manifest next update: Mon 29 Dec 2025 13:02:20 +0000 Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: G4swnZSrX/b854Fcj+CqhrbXQ3iymAecvPBshRfLSHk=) 2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:7b:94:ad:31:e6:f1:fa:83:50:9c:33:27:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e Validity Not Before: Dec 28 13:02:20 2025 GMT Not After : Dec 29 13:02:20 2025 GMT Subject: CN=eebbd9fee28bac10e5b5531737072333ffd7824c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ad:68:21:26:69:39:a0:d1:69:89:76:16:00: 3b:78:dd:b2:a8:4f:83:84:a4:92:a8:de:bb:d1:72: 21:5b:fa:6e:13:55:54:5a:78:5d:b1:b9:3a:c1:14: 74:ee:b9:4a:6e:d7:34:d0:60:4d:64:ce:23:6f:e5: f0:a8:16:34:87:a5:d0:f9:2a:41:ae:82:83:ec:4e: a5:f3:d2:4f:c7:a5:c8:53:98:29:31:39:09:0d:f8: 69:ab:5a:55:fb:29:40:ef:ca:b6:97:54:7b:5e:c2: 74:2a:8a:0a:6c:c5:ae:7c:da:9e:9c:33:6a:f1:5e: 03:0e:35:49:63:58:ca:92:79:59:2a:50:e6:5f:aa: 8b:9a:39:2c:c0:aa:73:59:62:60:6e:ca:3f:63:40: 55:ef:b0:c8:b2:65:33:db:46:e2:8a:9d:c4:2a:13: 65:49:bd:22:a3:2f:74:1c:8e:aa:a4:ed:6a:97:fd: f8:1e:93:33:31:4b:a4:d2:64:c1:06:19:e5:7d:61: 19:19:fa:7a:3e:1e:00:9e:98:04:1b:51:e1:96:50: a7:f2:a7:3f:26:8a:ae:17:31:bd:5c:e0:46:de:26: e6:c0:69:50:f2:e7:c2:11:93:b4:e6:97:9d:54:62: 36:c3:c7:3a:20:96:03:9b:ea:93:b4:f8:31:89:c2: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BB:D9:FE:E2:8B:AC:10:E5:B5:53:17:37:07:23:33:FF:D7:82:4C X509v3 Authority Key Identifier: keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3c:26:5a:9f:e3:79:0e:da:36:a8:98:11:12:8d:e6:a9:11: d2:8a:3d:1b:4e:54:b6:25:2a:f7:14:3d:b1:aa:49:4e:62:54: b3:a8:1d:87:4a:69:9f:9f:8e:60:dc:25:9c:10:5c:4f:2b:88: 0a:c8:ae:2c:8f:84:c3:1b:9f:7d:88:96:b8:9d:36:a3:8c:36: 07:53:6d:71:52:7a:83:fa:d9:30:73:d4:61:5e:e3:9a:cf:f7: a8:0c:0a:32:a5:c5:e1:13:37:c5:aa:c1:1d:31:5f:36:b1:30: 5f:f9:f4:ac:d2:ae:1b:d2:8c:e6:de:62:38:0c:59:a7:76:a5: 06:c0:a0:79:56:59:46:82:cb:fc:9f:20:54:21:cd:96:1b:d9: c3:ec:b5:3f:5d:0d:a2:4e:51:93:85:07:f8:1f:d4:42:cd:53: ec:38:c3:4e:4b:33:ae:95:49:79:75:1c:76:b8:af:ea:fa:7d: b9:2d:22:83:c3:0a:9b:12:7f:4b:42:6a:4b:a6:b5:d4:fd:00: e9:e7:d2:1c:79:1a:d9:43:df:a0:e9:bd:54:66:c5:39:f7:e0: ac:83:ee:4b:57:fb:09:fa:2b:10:e3:20:38:8e:d3:0c:9b:40: 6e:30:4f:4d:14:2a:44:1d:ab:6f:68:a2:0c:8f:e4:4b:1c:c4: 9e:62:76:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDXuUrTHm8fqDUJwzJ1b9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzkxYWUyOGE5MWQ1OTkxMzQ2YWVkYWYxN2JmODYwNWM4 Y2YyMmUwHhcNMjUxMjI4MTMwMjIwWhcNMjUxMjI5MTMwMjIwWjAzMTEwLwYDVQQD EyhlZWJiZDlmZWUyOGJhYzEwZTViNTUzMTczNzA3MjMzM2ZmZDc4MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8K1oISZpOaDRaYl2FgA7eN2yqE+D hKSSqN670XIhW/puE1VUWnhdsbk6wRR07rlKbtc00GBNZM4jb+XwqBY0h6XQ+SpB roKD7E6l89JPx6XIU5gpMTkJDfhpq1pV+ylA78q2l1R7XsJ0KooKbMWufNqenDNq 8V4DDjVJY1jKknlZKlDmX6qLmjkswKpzWWJgbso/Y0BV77DIsmUz20biip3EKhNl Sb0ioy90HI6qpO1ql/34HpMzMUuk0mTBBhnlfWEZGfp6Ph4AnpgEG1HhllCn8qc/ JoquFzG9XOBG3ibmwGlQ8ufCEZO05pedVGI2w8c6IJYDm+qTtPgxicKA0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO672f7ii6wQ5bVTFzcHIzP/14JMMB8GA1UdIwQY MBaAFCc5GuKKkdWZE0au2vF7+GBcjPIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAt YTRjMTI4MDc1ODYyLzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAtYTRjMTI4MDc1ODYy LzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjwmWp/j eQ7aNqiYERKN5qkR0oo9G05UtiUq9xQ9sapJTmJUs6gdh0ppn5+OYNwlnBBcTyuI CsiuLI+EwxuffYiWuJ02o4w2B1NtcVJ6g/rZMHPUYV7jms/3qAwKMqXF4RM3xarB HTFfNrEwX/n0rNKuG9KM5t5iOAxZp3alBsCgeVZZRoLL/J8gVCHNlhvZw+y1P10N ok5Rk4UH+B/UQs1T7DjDTkszrpVJeXUcdriv6vp9uS0ig8MKmxJ/S0JqS6a11P0A 6efSHHka2UPfoOm9VGbFOffgrIPuS1f7CforEOMgOI7TDJtAbjBPTRQqRB2rb2ii DI/kSxzEnmJ26w== -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:37 2025 by rpki-client