This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json) Hash identifier: VjsTC0ZNjbr9d5bWz07p7ToTZIN79MkQFHWKEXNIqQ0= Subject key identifier: 74:B9:43:64:78:24:FD:DB:A6:F9:F3:69:CE:8A:FC:92:A2:A7:AD:3A Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab Certificate serial: 019B2C9D64323ABE8B3210B21034D304A38B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft Manifest number: 0725 Signing time: Wed 17 Dec 2025 14:01:10 +0000 Manifest this update: Wed 17 Dec 2025 14:01:10 +0000 Manifest next update: Thu 18 Dec 2025 14:01:10 +0000 Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 7hHUBOiM8voHHETnkv/4DXcUOqh0YHJ+UzfQ1KNAduU=) 2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:64:32:3a:be:8b:32:10:b2:10:34:d3:04:a3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab Validity Not Before: Dec 17 14:01:10 2025 GMT Not After : Dec 18 14:01:10 2025 GMT Subject: CN=74b943647824fddba6f9f369ce8afc92a2a7ad3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:ec:31:bf:de:24:11:75:d0:8c:c4:67:1a: 0c:d6:83:10:b5:ef:e9:b7:08:7a:d7:4e:82:fb:82: 1c:6a:7e:ea:c5:31:73:db:65:13:ba:74:62:4b:56: de:17:6b:ca:b9:a4:b9:a4:01:ba:09:09:4d:bc:ef: 2f:7b:c9:12:86:97:a2:9c:fe:ae:40:2a:51:10:f7: 47:67:96:2d:72:ed:59:80:f8:fc:6c:93:e4:a5:18: e5:91:65:7e:07:b1:cf:d9:3e:b2:d1:4e:42:70:67: d7:2f:07:f8:40:0a:f1:bf:67:80:3e:5d:ac:70:d4: ac:04:55:83:cc:34:c1:5e:65:a5:72:28:40:5f:2b: 91:1e:44:da:c3:cf:ab:56:1b:c1:79:d9:0f:83:4c: 4c:11:a3:3e:17:fd:6c:88:6f:95:be:0d:73:5d:79: 2d:ce:55:c6:c9:4b:b9:8c:28:58:7f:aa:ee:b5:23: 88:27:54:01:a8:46:79:54:f2:30:d9:06:14:6c:35: d5:79:b3:6b:a1:f1:34:3d:91:ba:eb:ed:d8:46:87: 6d:de:2b:e3:f7:f3:05:b0:85:a4:a8:fd:38:40:d2: b3:d9:da:46:35:16:12:39:1b:56:8e:f2:5b:f0:02: 3f:48:68:98:45:4b:fe:98:94:d1:84:38:60:4a:cd: c7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B9:43:64:78:24:FD:DB:A6:F9:F3:69:CE:8A:FC:92:A2:A7:AD:3A X509v3 Authority Key Identifier: keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:cd:9f:b8:4c:cf:98:03:13:27:0e:d0:58:5e:ea:3f:62: b4:39:fc:b7:c8:95:f9:11:98:60:80:56:ce:4a:ec:1a:46:12: 17:20:f7:e0:57:30:fb:f4:94:85:32:f7:55:98:ea:5f:08:7b: 3d:eb:e9:dd:e7:2a:51:52:3f:22:98:cb:c8:85:cf:b7:4c:6b: a8:67:01:68:d7:ec:43:47:bf:3c:71:69:b0:8b:2c:67:7b:45: 1a:0c:01:d8:96:f4:ea:e3:a4:39:2e:73:66:88:ef:29:ed:c9: 9c:d8:ed:c0:b1:07:ed:38:40:ec:a2:c3:89:17:ac:be:b7:f1: 13:d1:31:89:ab:fc:a8:6c:4b:20:0c:db:14:f1:b1:44:4f:87: 57:97:ee:3c:23:76:f8:e6:2e:eb:b4:ee:94:3c:be:e2:98:cc: 81:e0:4b:48:ee:67:22:bd:4c:44:c7:3d:e9:b7:27:75:21:26: 1e:1f:9c:de:ec:53:c5:28:a3:1c:8c:32:a8:df:0d:c8:84:60: ee:d5:95:79:1c:f0:f1:f6:3b:b0:ad:2d:1a:11:b7:5a:2a:f1: af:26:c4:16:aa:b5:42:01:ea:cc:b6:d4:a6:76:82:96:99:98: 09:b7:61:6d:4b:3c:aa:be:75:a6:e3:c0:ac:44:03:29:1e:d6: 56:1f:d1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnWQyOr6LMhCyEDTTBKOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy NzEwYWIwHhcNMjUxMjE3MTQwMTEwWhcNMjUxMjE4MTQwMTEwWjAzMTEwLwYDVQQD Eyg3NGI5NDM2NDc4MjRmZGRiYTZmOWYzNjljZThhZmM5MmEyYTdhZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFjsMb/eJBF10IzEZxoM1oMQte/p twh6106C+4Ican7qxTFz22UTunRiS1beF2vKuaS5pAG6CQlNvO8ve8kShpeinP6u QCpREPdHZ5Ytcu1ZgPj8bJPkpRjlkWV+B7HP2T6y0U5CcGfXLwf4QArxv2eAPl2s cNSsBFWDzDTBXmWlcihAXyuRHkTaw8+rVhvBedkPg0xMEaM+F/1siG+Vvg1zXXkt zlXGyUu5jChYf6rutSOIJ1QBqEZ5VPIw2QYUbDXVebNrofE0PZG66+3YRodt3ivj 9/MFsIWkqP04QNKz2dpGNRYSORtWjvJb8AI/SGiYRUv+mJTRhDhgSs3HtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS5Q2R4JP3bpvnzac6K/JKip606MB8GA1UdIwQY MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1/Nn7hM z5gDEycO0Fhe6j9itDn8t8iV+RGYYIBWzkrsGkYSFyD34Fcw+/SUhTL3VZjqXwh7 Pevp3ecqUVI/IpjLyIXPt0xrqGcBaNfsQ0e/PHFpsIssZ3tFGgwB2Jb06uOkOS5z ZojvKe3JnNjtwLEH7ThA7KLDiResvrfxE9Exiav8qGxLIAzbFPGxRE+HV5fuPCN2 +OYu67TulDy+4pjMgeBLSO5nIr1MRMc96bcndSEmHh+c3uxTxSijHIwyqN8NyIRg 7tWVeRzw8fY7sK0tGhG3WirxrybEFqq1QgHqzLbUpnaClpmYCbdhbUs8qr51puPA rEQDKR7WVh/REw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:51 2025 by rpki-client