This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: Dgmc6eqBsng1HMITK1AO+XJuEuKYtUbXDCAMJJ63Flk= Subject key identifier: A4:32:62:98:0E:50:40:DB:78:94:82:74:31:B9:CA:1A:DB:76:0E:12 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B0D80335D737AC62BF8332DAA41FCE7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 17AA Signing time: Thu 11 Dec 2025 13:01:03 +0000 Manifest this update: Thu 11 Dec 2025 13:01:03 +0000 Manifest next update: Fri 12 Dec 2025 13:01:03 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 1E1J+yA0UKUQIKLGBszl1tEDiq4OoB9RHSXSrbUWkrM=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:33:5d:73:7a:c6:2b:f8:33:2d:aa:41:fc:e7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Dec 11 13:01:03 2025 GMT Not After : Dec 12 13:01:03 2025 GMT Subject: CN=a43262980e5040db7894827431b9ca1adb760e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:b6:18:d5:f7:ca:17:89:1e:d7:24:2f:3d: 56:72:97:0e:98:7c:5c:ec:37:91:d6:cd:25:f3:61: 44:6c:64:82:37:16:74:2f:80:d6:4b:8e:f0:4b:dc: 3a:05:3a:d9:05:94:be:84:40:84:0c:5a:83:09:41: 68:c3:ce:bd:8b:a9:b4:f9:11:cb:89:3b:be:d5:bb: 74:e9:a0:bb:e0:fe:bc:1c:d5:d6:61:ea:62:96:0a: c8:ac:63:91:99:cf:f0:01:ee:21:c6:01:c8:27:87: f9:91:db:33:92:32:8e:4f:85:77:33:01:ee:6c:62: 4a:ad:bd:8d:89:2a:f5:5b:22:d1:85:39:73:ec:9f: 21:9c:02:ee:53:81:0a:98:e9:02:2a:7c:36:e1:9a: 3f:78:d1:85:c1:7e:43:c9:e8:1e:4c:d2:3d:53:92: 18:dd:2a:ab:b9:3d:98:53:f4:32:31:b2:26:b8:e0: a9:56:1d:79:fc:ff:a6:a8:ab:85:38:28:9a:c8:b9: d2:e1:47:73:75:84:8b:ec:a3:42:7e:c9:0a:d5:5b: f7:6f:dd:74:c9:a3:49:45:a7:97:da:d7:02:23:24: c8:4a:22:43:d8:1f:84:b3:38:fd:25:0d:2a:ff:75: e5:4e:ad:69:d1:63:a6:42:aa:ef:d9:ac:3f:0c:f4: e7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:62:98:0E:50:40:DB:78:94:82:74:31:B9:CA:1A:DB:76:0E:12 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:24:53:5f:e8:2f:da:e9:b9:87:fb:c0:ee:5b:27:70:26:e8: cb:40:0b:71:3f:bd:7b:c8:d7:41:d3:cd:9f:20:17:06:b5:f6: 3b:f7:4e:39:f0:72:b0:5a:05:c6:81:e5:f4:b2:64:fd:d3:49: 7f:6b:87:5b:55:7d:5a:39:95:4c:2a:65:25:fe:71:4e:06:94: 2a:4f:4b:75:98:59:c7:fd:ea:12:9e:40:46:89:ed:8d:56:b0: 7a:4b:14:25:57:07:1d:04:9d:43:17:fa:63:1a:62:ac:07:7a: 6c:ec:c2:5c:68:ac:42:fa:9c:32:60:42:ba:ca:d6:ec:30:bb: b5:ed:c8:72:bd:4b:97:81:f4:88:54:ea:a1:84:7c:aa:54:8d: e6:f4:b2:d4:c4:23:86:c8:bb:bf:db:79:6e:47:3a:d6:75:fc: bd:fa:73:18:7d:6e:74:63:a1:6b:1d:30:82:7d:4b:da:d0:54: 8b:31:d8:0e:ad:8d:f7:4e:01:df:b5:22:e4:d2:04:6a:cf:31: f8:e3:dd:1f:f4:14:38:1c:11:30:99:db:2a:6d:5c:e9:e3:98: f0:2f:91:4a:96:e9:49:1d:88:47:d5:c5:db:08:50:25:87:0f: c9:d5:59:4f:ca:24:9e:00:80:19:6e:33:8b:89:74:65:19:b0: 06:bb:f8:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgDNdc3rGK/gzLapB/OfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUxMjExMTMwMTAzWhcNMjUxMjEyMTMwMTAzWjAzMTEwLwYDVQQD EyhhNDMyNjI5ODBlNTA0MGRiNzg5NDgyNzQzMWI5Y2ExYWRiNzYwZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnG2GNX3yheJHtckLz1WcpcOmHxc 7DeR1s0l82FEbGSCNxZ0L4DWS47wS9w6BTrZBZS+hECEDFqDCUFow869i6m0+RHL iTu+1bt06aC74P68HNXWYepilgrIrGORmc/wAe4hxgHIJ4f5kdszkjKOT4V3MwHu bGJKrb2NiSr1WyLRhTlz7J8hnALuU4EKmOkCKnw24Zo/eNGFwX5DyegeTNI9U5IY 3SqruT2YU/QyMbImuOCpVh15/P+mqKuFOCiayLnS4UdzdYSL7KNCfskK1Vv3b910 yaNJRaeX2tcCIyTISiJD2B+Eszj9JQ0q/3XlTq1p0WOmQqrv2aw/DPTnMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQyYpgOUEDbeJSCdDG5yhrbdg4SMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyRTX+gv 2um5h/vA7lsncCboy0ALcT+9e8jXQdPNnyAXBrX2O/dOOfBysFoFxoHl9LJk/dNJ f2uHW1V9WjmVTCplJf5xTgaUKk9LdZhZx/3qEp5ARontjVaweksUJVcHHQSdQxf6 YxpirAd6bOzCXGisQvqcMmBCusrW7DC7te3Icr1Ll4H0iFTqoYR8qlSN5vSy1MQj hsi7v9t5bkc61nX8vfpzGH1udGOhax0wgn1L2tBUizHYDq2N904B37Ui5NIEas8x +OPdH/QUOBwRMJnbKm1c6eOY8C+RSpbpSR2IR9XF2whQJYcPydVZT8okngCAGW4z i4l0ZRmwBrv40g== -----END CERTIFICATE-----Generated at Thu Dec 11 15:07:24 2025 by rpki-client