This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json) Hash identifier: zs+XZV4D1caAFvZO2/gNbeXUhKkKDWoeHsAWZVHh3U4= Subject key identifier: 2D:19:DD:47:11:53:0F:DA:7A:9B:D6:AC:01:7D:A5:E2:21:D1:7C:29 Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Certificate serial: 019B0B238781D58C130820643C7CFB93E3DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft Manifest number: 07D1 Signing time: Thu 11 Dec 2025 02:00:36 +0000 Manifest this update: Thu 11 Dec 2025 02:00:36 +0000 Manifest next update: Fri 12 Dec 2025 02:00:36 +0000 Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=) 2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: 1aSeWOvDITECp/f//KKBhdFGCo2ZusgwfDRMHdrj5iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:23:87:81:d5:8c:13:08:20:64:3c:7c:fb:93:e3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453 Validity Not Before: Dec 11 02:00:36 2025 GMT Not After : Dec 12 02:00:36 2025 GMT Subject: CN=2d19dd4711530fda7a9bd6ac017da5e221d17c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:e3:4a:8a:2c:00:22:dc:b3:18:db:30:dd: 7e:e4:5f:e6:c2:5c:26:88:5c:48:a0:80:8d:69:6a: e2:b0:8b:28:60:a3:c7:f2:eb:69:ec:e3:f2:a3:85: eb:b0:4d:e2:83:f1:16:ff:cd:db:64:8e:08:c8:36: 79:2f:23:a0:ed:b2:23:9c:07:e5:5a:9f:3a:74:85: f3:a7:3c:06:81:50:c4:94:f1:86:c3:59:76:ea:21: 5f:2c:bf:b4:50:d2:05:20:5e:56:1a:d5:f3:86:e4: 71:bf:cf:00:09:db:01:2c:b6:7a:bc:5b:e0:8f:8c: 39:ca:e3:9d:40:5f:ab:fb:fe:2e:6c:d6:82:b1:a8: 2b:38:a8:05:9c:1b:cf:53:3a:eb:bb:cb:74:3b:1e: fe:77:89:a6:83:8c:fa:c8:46:08:34:d5:6d:3c:eb: 0c:ad:36:56:fd:fc:3b:80:ff:a3:ee:78:fc:d9:94: a3:d7:08:92:bf:0e:42:c7:65:7c:eb:b5:6f:ac:12: 01:f6:95:65:8f:c1:e8:c9:76:3e:43:c6:7c:62:e5: 3b:35:b7:f8:f7:cc:36:27:9e:28:66:72:77:8a:d0: c3:18:b8:b1:e2:26:48:f7:c0:b0:36:b4:a0:5c:c4: d1:4f:c1:71:ae:35:70:52:4d:b0:5e:25:ce:68:64: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:DD:47:11:53:0F:DA:7A:9B:D6:AC:01:7D:A5:E2:21:D1:7C:29 X509v3 Authority Key Identifier: keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:40:56:62:ff:59:d3:b0:cf:b3:37:b8:91:38:a3:e9:f8: ae:01:21:6b:59:22:5c:12:2b:3a:90:22:1c:fe:35:78:5b:69: 5f:0a:7e:97:92:d5:ea:91:89:67:28:19:e0:4a:2d:e1:7d:8b: 9d:a0:cb:9e:53:97:52:bf:31:83:34:da:a2:5c:99:84:63:cf: e7:e9:2c:ff:44:37:93:ca:61:4b:14:23:19:fd:57:cd:69:4a: c0:19:40:9d:07:d0:db:a5:32:45:06:1f:c5:0a:cf:64:e3:10: ba:03:ed:96:9b:74:e7:bc:f4:65:6b:03:51:97:2e:d9:c7:1e: 3a:71:55:e5:b4:a6:64:e4:c7:b8:ba:01:df:5a:e9:8b:6e:37: 86:29:d0:45:fc:94:c2:6a:f6:0d:10:88:75:96:e4:98:29:9a: 1c:5b:cd:da:21:9b:95:19:59:76:95:41:e9:09:8a:6e:fe:d7: 0c:66:18:a4:dc:4d:46:88:36:60:47:37:b4:91:02:a0:1a:04: 22:a5:69:db:1b:e6:a6:da:bc:02:9c:84:25:d3:b5:3a:4b:17: 88:53:fe:0d:c3:d0:6e:eb:6d:b5:54:4a:5d:9d:56:c8:7b:62: bb:c3:b0:78:7d:36:17:df:19:81:c3:39:77:ac:26:28:48:c2: 1d:36:52:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLI4eB1YwTCCBkPHz7k+PaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1 Mjk0NTMwHhcNMjUxMjExMDIwMDM2WhcNMjUxMjEyMDIwMDM2WjAzMTEwLwYDVQQD EygyZDE5ZGQ0NzExNTMwZmRhN2E5YmQ2YWMwMTdkYTVlMjIxZDE3YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0DjSoosACLcsxjbMN1+5F/mwlwm iFxIoICNaWrisIsoYKPH8utp7OPyo4XrsE3ig/EW/83bZI4IyDZ5LyOg7bIjnAfl Wp86dIXzpzwGgVDElPGGw1l26iFfLL+0UNIFIF5WGtXzhuRxv88ACdsBLLZ6vFvg j4w5yuOdQF+r+/4ubNaCsagrOKgFnBvPUzrru8t0Ox7+d4mmg4z6yEYINNVtPOsM rTZW/fw7gP+j7nj82ZSj1wiSvw5Cx2V867VvrBIB9pVlj8HoyXY+Q8Z8YuU7Nbf4 98w2J54oZnJ3itDDGLix4iZI98CwNrSgXMTRT8FxrjVwUk2wXiXOaGSlCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0Z3UcRUw/aepvWrAF9peIh0XwpMB8GA1UdIwQY MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMZAVmL/ WdOwz7M3uJE4o+n4rgEha1kiXBIrOpAiHP41eFtpXwp+l5LV6pGJZygZ4Eot4X2L naDLnlOXUr8xgzTaolyZhGPP5+ks/0Q3k8phSxQjGf1XzWlKwBlAnQfQ26UyRQYf xQrPZOMQugPtlpt057z0ZWsDUZcu2cceOnFV5bSmZOTHuLoB31rpi243hinQRfyU wmr2DRCIdZbkmCmaHFvN2iGblRlZdpVB6QmKbv7XDGYYpNxNRog2YEc3tJECoBoE IqVp2xvmptq8ApyEJdO1OksXiFP+DcPQbutttVRKXZ1WyHtiu8OweH02F98ZgcM5 d6wmKEjCHTZSOg== -----END CERTIFICATE-----Generated at Thu Dec 11 06:58:09 2025 by rpki-client