This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json) Hash identifier: 5saLt6zsPHiBpPd13b2TZpRvZ/eGh2Z1f53DB+utIf8= Subject key identifier: 16:26:79:31:A2:58:AE:20:16:DE:50:89:C2:8A:8B:28:3B:C4:2F:BC Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95 Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295 Certificate serial: 019B2B1DE5E9C45908F674D133B313808987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 07:02:18 +0000 Manifest this update: Wed 17 Dec 2025 07:02:18 +0000 Manifest next update: Thu 18 Dec 2025 07:02:18 +0000 Files and hashes: 1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=) 2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: p91wb0M4deNAa59PLBuXa0I11haMVfVCTdHq7Hxhu28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:e5:e9:c4:59:08:f6:74:d1:33:b3:13:80:89:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295 Validity Not Before: Dec 17 07:02:18 2025 GMT Not After : Dec 18 07:02:18 2025 GMT Subject: CN=16267931a258ae2016de5089c28a8b283bc42fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:66:0b:b7:52:f1:c8:60:74:51:8e:d5:84: f5:4a:29:9a:b4:d0:a3:02:32:52:d7:4f:79:8b:8c: 51:8f:52:6b:a8:25:96:27:80:3c:cd:94:6d:d2:29: c9:da:2f:04:17:cd:35:e8:52:d2:7c:11:f2:a3:be: dd:7b:a5:bb:c7:e8:1c:01:53:61:83:75:7c:44:f7: 90:f5:d0:6e:7c:dc:05:81:74:83:14:a8:c5:c2:2f: c3:f5:eb:82:d8:af:a7:f3:85:9a:5c:1d:31:d4:c7: 16:a1:c2:c4:3f:86:d5:a3:10:19:59:d3:9e:a6:a5: 7a:5a:43:ce:90:9f:10:e8:f0:62:9b:eb:99:e5:f3: 4e:83:4e:08:f3:d9:4e:44:14:9a:78:ca:72:28:43: e0:f4:05:b5:09:70:e2:cc:ab:a5:65:c8:a5:aa:ac: 89:ca:cf:7e:80:81:5c:f0:00:c3:ac:ca:68:b0:ad: ef:c0:ac:f0:8e:68:5c:ce:a2:76:9b:15:56:c0:63: 8f:da:1f:ed:4e:68:a7:75:58:e9:da:65:f8:54:ff: 0a:4d:df:18:15:09:22:9c:e4:25:07:34:82:6f:20: 9b:00:56:6c:02:aa:2f:13:bd:4a:2f:81:68:f8:d6: 47:99:a1:98:c6:71:b7:e8:ad:37:f8:d6:7d:45:5f: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:79:31:A2:58:AE:20:16:DE:50:89:C2:8A:8B:28:3B:C4:2F:BC X509v3 Authority Key Identifier: keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:06:54:f7:26:e4:ec:7d:e1:91:15:26:0b:6b:5e:e2:9a:fb: dd:93:ca:b8:a1:3a:9b:61:04:10:d6:35:eb:2f:05:b0:8b:57: b2:08:97:8e:57:3f:d3:c3:5f:a7:13:ab:8f:c2:57:7f:6f:5f: 5c:23:5b:a7:b8:8c:66:b7:5b:34:65:03:9b:e9:4d:7a:6e:78: 7e:63:74:6c:93:c9:c9:bf:e5:ed:d7:b0:3f:b8:ce:73:9e:87: d0:4b:78:af:0b:0f:28:83:16:82:bc:66:69:ce:86:85:55:a3: 6d:34:21:df:ad:c6:17:d7:66:ec:49:63:6f:78:2f:35:b4:6e: df:7e:e1:ea:b3:72:2b:e7:27:b7:a3:b0:00:75:98:8b:3e:db: 82:03:89:65:b5:b2:63:02:b0:5e:ae:5d:20:d6:07:ef:1b:f5: 64:a7:87:4a:59:69:cd:10:7b:85:bd:c1:ce:97:7f:2d:2b:22: 5a:77:68:fd:94:e8:8c:08:33:e2:53:9c:4f:68:c1:ea:00:9f: 9d:dd:b1:74:9b:96:7a:49:d7:a8:e5:23:01:c6:ef:d5:69:23: 78:ca:9d:6e:8e:03:64:89:24:80:75:2e:e1:9c:11:cc:91:21: 01:53:51:15:f4:80:57:bc:d5:3d:f5:34:26:eb:3f:9c:a0:7b: 74:3c:01:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHeXpxFkI9nTRM7MTgImHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2RjZmZjYTU3OTVhNDdmY2MyZTEzOGNlNTQ3M2U4MDAw OTgyOTUwHhcNMjUxMjE3MDcwMjE4WhcNMjUxMjE4MDcwMjE4WjAzMTEwLwYDVQQD EygxNjI2NzkzMWEyNThhZTIwMTZkZTUwODljMjhhOGIyODNiYzQyZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9FmC7dS8chgdFGO1YT1SimatNCj AjJS1095i4xRj1JrqCWWJ4A8zZRt0inJ2i8EF8016FLSfBHyo77de6W7x+gcAVNh g3V8RPeQ9dBufNwFgXSDFKjFwi/D9euC2K+n84WaXB0x1McWocLEP4bVoxAZWdOe pqV6WkPOkJ8Q6PBim+uZ5fNOg04I89lORBSaeMpyKEPg9AW1CXDizKulZcilqqyJ ys9+gIFc8ADDrMposK3vwKzwjmhczqJ2mxVWwGOP2h/tTmindVjp2mX4VP8KTd8Y FQkinOQlBzSCbyCbAFZsAqovE71KL4Fo+NZHmaGYxnG36K03+NZ9RV+GFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYmeTGiWK4gFt5QicKKiyg7xC+8MB8GA1UdIwQY MBaAFI89z/yleVpH/MLhOM5Uc+gACYKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYt YTBjZmUxMmYzZDUxLzEvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYtYTBjZmUxMmYzZDUx LzEvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwZU9ybk 7H3hkRUmC2te4pr73ZPKuKE6m2EEENY16y8FsItXsgiXjlc/08NfpxOrj8JXf29f XCNbp7iMZrdbNGUDm+lNem54fmN0bJPJyb/l7dewP7jOc56H0Et4rwsPKIMWgrxm ac6GhVWjbTQh363GF9dm7Eljb3gvNbRu337h6rNyK+cnt6OwAHWYiz7bggOJZbWy YwKwXq5dINYH7xv1ZKeHSllpzRB7hb3Bzpd/LSsiWndo/ZTojAgz4lOcT2jB6gCf nd2xdJuWeknXqOUjAcbv1WkjeMqdbo4DZIkkgHUu4ZwRzJEhAVNRFfSAV7zVPfU0 Jus/nKB7dDwBPA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:51 2025 by rpki-client