This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json) Hash identifier: PTvt1Q3WNjBhDOpsXTNGrcb7Aq2EYGP9rsh7fGqCa5A= Subject key identifier: BD:CC:6B:07:C9:03:50:1B:27:32:6F:3F:4A:B4:F9:E1:8B:E9:CD:20 Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019B3BA2B9E1A259B3BB27597181191BC978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft Manifest number: 0C6C Signing time: Sat 20 Dec 2025 12:01:18 +0000 Manifest this update: Sat 20 Dec 2025 12:01:18 +0000 Manifest next update: Sun 21 Dec 2025 12:01:18 +0000 Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=) 2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: GjSV38jo9zJwm6GJ/5v8caKwl/Ga4f1P9mxHENI2bCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b9:e1:a2:59:b3:bb:27:59:71:81:19:1b:c9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Dec 20 12:01:18 2025 GMT Not After : Dec 21 12:01:18 2025 GMT Subject: CN=bdcc6b07c903501b27326f3f4ab4f9e18be9cd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:19:74:62:30:6c:cd:c0:e5:21:9d:d1:db: 83:30:31:26:06:0b:dd:62:b6:14:a8:c1:c1:22:54: 6d:72:e2:86:10:f6:1a:cf:38:12:2c:cb:9c:bf:d9: 64:9d:90:8c:c0:12:56:dc:10:9c:c5:bc:ca:ee:3b: 3c:f2:b0:94:99:bd:2b:fe:a2:b6:13:2f:b1:67:6c: f6:20:dd:30:12:c7:47:ab:d3:70:dc:ad:8e:65:06: 03:df:8d:5f:91:d7:70:e9:44:b7:2e:17:24:7c:ad: 49:8a:29:23:48:4f:8d:b4:16:7e:3e:1f:26:12:72: 4e:03:f4:a3:f5:8d:dc:59:63:c7:e0:6a:88:fe:7a: ef:b7:5e:a1:db:42:1e:18:d6:d0:4c:cb:b7:11:03: 8e:8f:62:19:80:84:89:ae:40:f9:28:72:6a:5c:29: a9:76:71:28:27:13:36:a6:a7:24:58:8b:4d:5f:54: 38:29:c9:aa:9b:16:a6:ac:38:7d:91:2d:f3:09:be: e4:2b:c6:c2:e1:cd:f4:6c:7d:68:43:6a:09:e1:e8: 98:5c:cd:88:31:5e:b6:68:6c:70:67:db:3e:9e:9c: 0f:f7:e8:bc:5a:24:17:60:69:78:58:37:fc:7b:01: 6e:66:38:78:c6:c6:23:d4:35:5a:1f:4b:a5:13:38: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:6B:07:C9:03:50:1B:27:32:6F:3F:4A:B4:F9:E1:8B:E9:CD:20 X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f9:8d:44:ea:cf:90:12:03:95:98:91:14:35:89:0e:ce:df: c2:6c:a4:b7:98:18:54:28:97:bc:5f:e1:48:92:8f:ce:cd:a4: a6:f1:f0:bd:1c:1e:6c:42:58:37:1a:aa:c0:9a:3a:c5:ec:65: 3f:8e:bf:83:fb:ae:c3:bc:31:e5:1e:78:f3:3b:bd:d5:d6:1b: 35:95:92:71:56:ec:de:d6:12:6f:57:d8:d5:a6:0b:bc:01:67: 9a:09:9c:86:16:ff:6c:99:1e:6a:26:ee:82:d2:1d:10:38:3d: 10:82:5e:12:8f:75:1e:6d:a7:0a:a2:c9:92:16:fd:b3:2c:23: 19:32:fe:92:89:b7:bd:3a:2d:7d:15:82:00:c8:9b:a5:25:e2: d2:67:62:02:c9:33:9d:15:99:bb:68:01:70:c9:05:b2:f6:d4: 31:48:38:5c:4d:7e:98:22:e4:4d:f0:b4:2e:73:e6:d9:fd:a4: fe:7d:2c:ac:62:59:44:0d:0a:b9:03:08:8f:0b:76:71:b6:35: 87:9f:ff:57:65:f3:b7:fc:99:28:96:65:0c:54:2c:c5:14:cf: a5:ae:f7:1a:68:56:ba:cf:0c:d1:64:71:a1:43:39:26:cc:ba: 2e:ad:76:1a:33:60:cd:c2:a0:18:6e:e8:79:6c:76:3c:ba:ed: 5c:1f:e1:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ornholmzuydZcYEZG8l4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjUxMjIwMTIwMTE4WhcNMjUxMjIxMTIwMTE4WjAzMTEwLwYDVQQD EyhiZGNjNmIwN2M5MDM1MDFiMjczMjZmM2Y0YWI0ZjllMThiZTljZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOgZdGIwbM3A5SGd0duDMDEmBgvd YrYUqMHBIlRtcuKGEPYazzgSLMucv9lknZCMwBJW3BCcxbzK7js88rCUmb0r/qK2 Ey+xZ2z2IN0wEsdHq9Nw3K2OZQYD341fkddw6US3LhckfK1JiikjSE+NtBZ+Ph8m EnJOA/Sj9Y3cWWPH4GqI/nrvt16h20IeGNbQTMu3EQOOj2IZgISJrkD5KHJqXCmp dnEoJxM2pqckWItNX1Q4KcmqmxamrDh9kS3zCb7kK8bC4c30bH1oQ2oJ4eiYXM2I MV62aGxwZ9s+npwP9+i8WiQXYGl4WDf8ewFuZjh4xsYj1DVaH0ulEziA8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3MawfJA1AbJzJvP0q0+eGL6c0gMB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfmNROrP kBIDlZiRFDWJDs7fwmykt5gYVCiXvF/hSJKPzs2kpvHwvRwebEJYNxqqwJo6xexl P46/g/uuw7wx5R548zu91dYbNZWScVbs3tYSb1fY1aYLvAFnmgmchhb/bJkeaibu gtIdEDg9EIJeEo91Hm2nCqLJkhb9sywjGTL+kom3vTotfRWCAMibpSXi0mdiAskz nRWZu2gBcMkFsvbUMUg4XE1+mCLkTfC0LnPm2f2k/n0srGJZRA0KuQMIjwt2cbY1 h5//V2Xzt/yZKJZlDFQsxRTPpa73GmhWus8M0WRxoUM5Jsy6Lq12GjNgzcKgGG7o eWx2PLrtXB/hsA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:30:16 2025 by rpki-client