This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json) Hash identifier: WFfjsVjHfn3Wh1WLM+EfbOO4X/vyDuXHo2TxG6At8Ps= Subject key identifier: AB:99:8B:2E:9A:D3:AE:22:6A:44:58:45:ED:39:51:F2:85:1D:52:A3 Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50 Certificate serial: 019B36B2B247CB82C43AA3247B0444019FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft Manifest number: 1796 Signing time: Fri 19 Dec 2025 13:00:39 +0000 Manifest this update: Fri 19 Dec 2025 13:00:39 +0000 Manifest next update: Sat 20 Dec 2025 13:00:39 +0000 Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=) 2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=) 3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: 4rqbIn2++izMo6pcIBlRl8Ltk0229OA3sOlfO0OuK7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:b2:47:cb:82:c4:3a:a3:24:7b:04:44:01:9f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50 Validity Not Before: Dec 19 13:00:39 2025 GMT Not After : Dec 20 13:00:39 2025 GMT Subject: CN=ab998b2e9ad3ae226a445845ed3951f2851d52a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:7c:a8:f3:5a:9c:93:2e:f2:32:d2:57:75: af:6e:c1:d8:bb:7c:34:23:98:b6:de:68:47:95:45: 0a:ab:1e:76:d7:f0:c9:7c:15:1d:e0:4c:b3:25:6e: dc:c4:fb:04:ac:68:ea:f0:f3:cb:41:1e:9c:96:41: 86:aa:32:8d:4b:07:45:14:75:d1:ba:a5:d0:76:ed: c2:35:b5:45:56:82:0f:94:e5:13:57:96:36:55:40: 40:74:20:83:f6:b1:68:ce:d3:19:60:ca:86:e1:9a: 44:4f:2c:33:1b:e8:40:da:d8:bc:a2:03:6a:b0:89: 97:a8:39:cf:82:82:17:63:da:74:65:b3:f9:8a:2f: 0b:56:23:05:09:a2:eb:61:8f:d5:0d:e1:8a:74:c1: 45:da:4a:a7:1c:ea:0f:a9:73:b1:df:4a:d8:9f:c1: 8d:7b:3c:4f:24:65:af:81:57:a0:b0:81:18:a2:36: 2b:b0:6c:10:a0:d5:21:c6:45:6b:b6:66:da:24:25: 9a:6d:79:f1:c2:1e:d8:6a:97:6d:9d:6f:0e:09:ed: 8c:48:72:d6:f9:ac:a0:5a:4b:14:c5:e6:53:70:d4: 65:aa:5d:ac:64:64:4f:15:cf:8c:b2:15:6c:86:a4: ff:d5:7a:43:95:5e:50:90:fa:6e:a8:5d:6d:aa:1d: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:8B:2E:9A:D3:AE:22:6A:44:58:45:ED:39:51:F2:85:1D:52:A3 X509v3 Authority Key Identifier: keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f4:51:d5:4b:f3:19:64:0b:dc:a4:4e:7f:b9:16:c1:b5:94: 89:9e:64:7f:56:d6:c3:72:0f:a0:fa:f2:c6:92:bf:98:30:29: e4:ba:ec:e8:8b:ae:ad:09:17:84:4c:ae:07:8a:b4:ce:8e:4a: ad:38:67:19:7e:a0:41:a6:2f:01:26:70:64:f0:38:6e:9a:0a: 84:66:24:51:a6:61:dc:18:03:14:fa:e9:04:f3:fb:45:96:79: 74:f0:48:c4:4c:91:b6:34:7f:12:48:5b:5c:41:bb:60:af:87: 6b:18:05:47:c1:7d:cd:b5:c5:a5:98:57:66:3d:b6:8b:42:0d: dc:d6:a1:0a:45:76:bc:f6:04:16:37:05:d0:0c:b0:84:e0:11: f4:fa:7b:60:8b:5b:43:b7:39:1b:cb:db:2e:9c:9f:ce:db:70: dc:cb:dc:e8:0b:f0:21:3d:97:92:91:58:c8:19:74:92:a5:2b: d4:19:17:52:5d:73:92:ef:e2:eb:f7:90:f1:7d:d7:5d:3d:aa: 7a:05:cd:8f:a7:04:59:e9:58:96:dd:ee:8e:d6:f3:83:d3:6d: 3c:6e:24:5f:58:c1:15:af:06:a6:23:e0:d5:15:3a:3c:06:2b: 97:73:0b:92:47:21:0a:ec:15:c9:93:61:24:14:4e:be:ff:73: a8:3f:41:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2srJHy4LEOqMkewREAZ+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1 NTVjNTAwHhcNMjUxMjE5MTMwMDM5WhcNMjUxMjIwMTMwMDM5WjAzMTEwLwYDVQQD EyhhYjk5OGIyZTlhZDNhZTIyNmE0NDU4NDVlZDM5NTFmMjg1MWQ1MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArld8qPNanJMu8jLSV3WvbsHYu3w0 I5i23mhHlUUKqx521/DJfBUd4EyzJW7cxPsErGjq8PPLQR6clkGGqjKNSwdFFHXR uqXQdu3CNbVFVoIPlOUTV5Y2VUBAdCCD9rFoztMZYMqG4ZpETywzG+hA2ti8ogNq sImXqDnPgoIXY9p0ZbP5ii8LViMFCaLrYY/VDeGKdMFF2kqnHOoPqXOx30rYn8GN ezxPJGWvgVegsIEYojYrsGwQoNUhxkVrtmbaJCWabXnxwh7YapdtnW8OCe2MSHLW +aygWksUxeZTcNRlql2sZGRPFc+MshVshqT/1XpDlV5QkPpuqF1tqh3JQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuZiy6a064iakRYRe05UfKFHVKjMB8GA1UdIwQY MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3 LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/RR1Uvz GWQL3KROf7kWwbWUiZ5kf1bWw3IPoPryxpK/mDAp5Lrs6IuurQkXhEyuB4q0zo5K rThnGX6gQaYvASZwZPA4bpoKhGYkUaZh3BgDFPrpBPP7RZZ5dPBIxEyRtjR/Ekhb XEG7YK+HaxgFR8F9zbXFpZhXZj22i0IN3NahCkV2vPYEFjcF0AywhOAR9Pp7YItb Q7c5G8vbLpyfzttw3Mvc6AvwIT2XkpFYyBl0kqUr1BkXUl1zku/i6/eQ8X3XXT2q egXNj6cEWelYlt3ujtbzg9NtPG4kX1jBFa8GpiPg1RU6PAYrl3MLkkchCuwVyZNh JBROvv9zqD9B9g== -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:47 2025 by rpki-client