This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json) Hash identifier: MMDANCttaYyBxi4jXrBFUROnb14XsM1BzzDdItpak1o= Subject key identifier: 59:8E:C5:1C:7D:4F:5C:4A:18:CB:6C:8A:3B:EA:AF:A4:1D:90:2D:E5 Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Certificate serial: 019B337ACA3A50D4A27AD663F52C6EA39AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 22:00:43 +0000 Manifest this update: Thu 18 Dec 2025 22:00:43 +0000 Manifest next update: Fri 19 Dec 2025 22:00:43 +0000 Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=) 2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: 7fMFHM1wD4tufBH8XZEfeJXmwuvsG+My7miv7B4DJ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:ca:3a:50:d4:a2:7a:d6:63:f5:2c:6e:a3:9a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Validity Not Before: Dec 18 22:00:43 2025 GMT Not After : Dec 19 22:00:43 2025 GMT Subject: CN=598ec51c7d4f5c4a18cb6c8a3beaafa41d902de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:79:6d:42:7f:ab:e9:b9:25:ea:fd:15:70: 58:7a:8a:f0:4f:2f:23:39:4f:bc:41:a5:b9:1f:ad: 44:48:7e:ec:ef:d6:7d:f7:a5:8f:42:b1:16:9a:be: 01:72:42:0f:5a:ad:5c:8d:46:39:a9:21:aa:fc:bd: 06:7f:59:2d:47:57:29:9c:5a:89:75:b3:83:c3:e6: e3:20:f0:0a:3e:4e:69:cd:31:23:a8:2f:66:6e:6b: 8d:28:16:b0:fb:ba:ab:21:7e:b0:5d:05:8f:56:90: f0:32:32:40:5d:c2:c0:be:71:99:78:91:1c:8d:91: 84:2b:ce:a6:b4:d5:04:78:31:8e:de:be:98:72:d9: c3:71:7d:e5:fa:ca:9a:86:d3:c9:2f:b4:bb:05:6e: ba:d8:6a:8f:e2:af:0e:54:fe:87:46:a3:8d:5d:a8: e6:d5:04:ad:f2:4b:0e:a2:b4:99:dc:f8:c1:73:03: 9b:69:09:cd:7e:61:ee:f0:8a:99:49:50:87:9a:fd: dd:af:66:73:63:af:e6:21:20:3c:1e:41:16:f4:cb: fc:86:84:0b:21:79:4b:2a:f4:59:01:40:06:3e:d4: 21:7e:6b:98:b5:02:71:15:37:19:25:73:ca:54:50: 78:01:06:56:af:b5:ef:b5:08:9b:79:f5:f5:ef:44: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:C5:1C:7D:4F:5C:4A:18:CB:6C:8A:3B:EA:AF:A4:1D:90:2D:E5 X509v3 Authority Key Identifier: keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c2:53:a4:90:17:e7:10:9d:a8:6d:81:5d:31:fd:a2:04:dd: b8:d8:ee:2d:ef:0f:a3:30:33:0e:0f:e1:66:1c:72:ef:47:91: 43:8d:3d:0c:23:24:56:2e:65:50:65:14:0d:1d:b4:59:35:f7: ff:d6:e3:d0:b0:2c:81:b8:c9:cc:d7:64:ae:bc:66:21:21:00: 76:c5:70:58:9a:52:9f:39:d1:77:70:7d:d4:45:c7:ae:19:43: de:ec:6c:e0:f5:e1:f7:dc:3b:ce:c4:73:e4:6b:50:fa:5f:15: 94:e1:34:e0:c2:02:f8:a8:ad:49:c1:5c:0f:60:ae:25:70:ba: 8e:2a:98:e9:b3:82:e1:89:58:0c:9d:c4:98:34:a5:23:e2:ab: 28:88:da:88:b4:f7:71:4c:d8:56:90:79:bd:53:fb:9d:ac:56: 5d:2a:b4:d1:af:5b:1d:22:61:3d:a0:d0:7e:c3:a3:8e:e8:7a: ed:f5:14:9a:30:47:0d:c4:c9:27:bd:94:35:53:30:c4:3a:fd: 8a:3f:b4:7f:6c:38:83:08:9e:42:3f:70:9a:c0:cd:9e:10:5c: 89:31:0e:7f:3d:9e:cc:66:c1:f0:f2:69:48:f8:d6:0c:54:5c: 28:6a:b3:cf:93:78:3d:30:cb:67:57:c6:65:7b:a3:14:32:ef: 02:3e:9a:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeso6UNSietZj9Sxuo5riMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0 NjVjYjgwHhcNMjUxMjE4MjIwMDQzWhcNMjUxMjE5MjIwMDQzWjAzMTEwLwYDVQQD Eyg1OThlYzUxYzdkNGY1YzRhMThjYjZjOGEzYmVhYWZhNDFkOTAyZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDF5bUJ/q+m5Jer9FXBYeorwTy8j OU+8QaW5H61ESH7s79Z996WPQrEWmr4BckIPWq1cjUY5qSGq/L0Gf1ktR1cpnFqJ dbODw+bjIPAKPk5pzTEjqC9mbmuNKBaw+7qrIX6wXQWPVpDwMjJAXcLAvnGZeJEc jZGEK86mtNUEeDGO3r6YctnDcX3l+sqahtPJL7S7BW662GqP4q8OVP6HRqONXajm 1QSt8ksOorSZ3PjBcwObaQnNfmHu8IqZSVCHmv3dr2ZzY6/mISA8HkEW9Mv8hoQL IXlLKvRZAUAGPtQhfmuYtQJxFTcZJXPKVFB4AQZWr7XvtQibefX170T4TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmOxRx9T1xKGMtsijvqr6QdkC3lMB8GA1UdIwQY MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcJTpJAX 5xCdqG2BXTH9ogTduNjuLe8PozAzDg/hZhxy70eRQ409DCMkVi5lUGUUDR20WTX3 /9bj0LAsgbjJzNdkrrxmISEAdsVwWJpSnznRd3B91EXHrhlD3uxs4PXh99w7zsRz 5GtQ+l8VlOE04MIC+KitScFcD2CuJXC6jiqY6bOC4YlYDJ3EmDSlI+KrKIjaiLT3 cUzYVpB5vVP7naxWXSq00a9bHSJhPaDQfsOjjuh67fUUmjBHDcTJJ72UNVMwxDr9 ij+0f2w4gwieQj9wmsDNnhBciTEOfz2ezGbB8PJpSPjWDFRcKGqzz5N4PTDLZ1fG ZXujFDLvAj6atw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:02 2025 by rpki-client