This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json) Hash identifier: e+UIJKScfEN8J0cDs1zuGzvnM5vUtCNW7g3XZqHGpcQ= Subject key identifier: 73:6A:6A:2A:76:A6:4B:71:85:FA:98:26:8A:F7:87:D6:76:7D:85:A2 Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Certificate serial: 019B247595031F168D27702627C1359EF593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft Manifest number: 022E Signing time: Tue 16 Dec 2025 00:00:44 +0000 Manifest this update: Tue 16 Dec 2025 00:00:44 +0000 Manifest next update: Wed 17 Dec 2025 00:00:44 +0000 Files and hashes: 1: Odu_8Z8wYQ4rAwGBZ2rfmaKWPvY.roa (hash: G+0rnOlwTF853BxAQkBgLndsmH7cjPaqnqIy5TqAej8=) 2: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: 2uYcPSR/TGeCmlasS9Lw74jCD0Ac+YYv3vKsThDlAuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:95:03:1f:16:8d:27:70:26:27:c1:35:9e:f5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Validity Not Before: Dec 16 00:00:44 2025 GMT Not After : Dec 17 00:00:44 2025 GMT Subject: CN=736a6a2a76a64b7185fa98268af787d6767d85a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:83:7d:73:63:e0:21:cd:1d:a7:04:81:5c: 9f:01:39:43:69:13:ea:f8:40:56:43:06:33:b5:30: f1:68:bc:78:c8:92:99:79:75:0d:30:c9:3b:79:b3: 1d:ab:ba:63:eb:82:53:00:2d:4e:73:76:d3:87:f7: 6f:99:ea:1f:45:e1:be:7e:62:9c:90:88:dc:3f:5d: ff:e2:49:ae:5c:29:dc:16:83:4f:2f:d3:4c:dc:16: f0:69:99:ca:a4:75:dc:a2:c1:d6:04:6d:88:3f:ed: 71:9f:b7:e4:23:b4:98:a0:33:ac:1b:e8:12:74:01: f9:3d:34:6c:a7:c1:e2:33:f5:3a:49:a7:4f:ac:f9: 7b:a0:11:07:15:3d:9a:c4:fc:73:5a:c5:15:02:52: bc:ac:73:20:ba:f6:d0:e2:fb:1f:f0:11:c1:34:de: 78:65:c7:34:c8:d7:96:53:60:db:30:d2:31:fc:5d: eb:d8:cc:84:25:11:97:ec:57:4a:fc:a8:b2:61:d4: 3d:2d:29:24:dc:f7:ae:33:92:c0:57:df:42:0f:c6: d2:0a:6b:76:20:00:00:9f:76:9f:ad:c6:83:23:d2: 26:08:ca:4c:2c:4d:bf:b6:ef:4e:7d:26:72:b4:d6: ad:d4:de:e3:de:11:bf:31:4d:07:28:8a:3c:90:c6: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6A:6A:2A:76:A6:4B:71:85:FA:98:26:8A:F7:87:D6:76:7D:85:A2 X509v3 Authority Key Identifier: keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:24:70:95:56:f7:d8:8a:3b:c0:09:0e:df:d4:cf:1f:89: 0d:32:69:83:63:01:b9:8d:fc:da:9a:ee:a2:b7:30:b9:81:bd: 71:b5:97:b0:ba:6d:0d:13:43:0f:98:b3:7b:d8:78:75:97:c0: 83:73:9c:74:c2:5a:3a:a2:70:e8:b6:80:e5:c9:32:30:ee:57: 6c:6c:ac:e0:0d:02:8e:e5:00:ec:57:99:74:07:92:29:86:64: 8d:ba:4a:78:27:01:a9:d8:d3:9a:32:54:9d:a4:89:ab:bc:60: 67:60:79:b1:cb:ae:5f:bf:25:f7:b7:8e:9f:3f:0e:3f:8e:de: 38:7b:e3:ee:da:49:e2:43:0a:ba:c9:68:1a:eb:24:89:77:27: 55:de:ea:ea:43:c8:43:e2:5b:c4:d4:08:b3:3f:88:f6:33:a0: 87:e9:4d:4e:07:2c:10:ee:42:e7:25:66:2b:84:9d:09:ac:24: b6:db:1b:84:e5:a6:16:2f:e3:2c:f2:65:a7:66:76:bf:4c:bb: 87:f6:74:38:cf:d4:0f:9e:24:8b:3c:f8:95:cb:88:53:6c:13: 6e:4b:ef:c8:2b:67:24:47:80:58:98:6b:bb:db:9c:19:e4:51: fd:65:03:d0:4b:72:33:e5:41:31:b5:35:1a:f9:97:b9:58:0d: f8:a6:52:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdZUDHxaNJ3AmJ8E1nvWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm MDkxOTYwHhcNMjUxMjE2MDAwMDQ0WhcNMjUxMjE3MDAwMDQ0WjAzMTEwLwYDVQQD Eyg3MzZhNmEyYTc2YTY0YjcxODVmYTk4MjY4YWY3ODdkNjc2N2Q4NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjuDfXNj4CHNHacEgVyfATlDaRPq +EBWQwYztTDxaLx4yJKZeXUNMMk7ebMdq7pj64JTAC1Oc3bTh/dvmeofReG+fmKc kIjcP13/4kmuXCncFoNPL9NM3BbwaZnKpHXcosHWBG2IP+1xn7fkI7SYoDOsG+gS dAH5PTRsp8HiM/U6SadPrPl7oBEHFT2axPxzWsUVAlK8rHMguvbQ4vsf8BHBNN54 Zcc0yNeWU2DbMNIx/F3r2MyEJRGX7FdK/KiyYdQ9LSkk3PeuM5LAV99CD8bSCmt2 IAAAn3afrcaDI9ImCMpMLE2/tu9OfSZytNat1N7j3hG/MU0HKIo8kMad5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNqaip2pktxhfqYJor3h9Z2fYWiMB8GA1UdIwQY MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsIkcJVW 99iKO8AJDt/Uzx+JDTJpg2MBuY382pruorcwuYG9cbWXsLptDRNDD5ize9h4dZfA g3OcdMJaOqJw6LaA5ckyMO5XbGys4A0CjuUA7FeZdAeSKYZkjbpKeCcBqdjTmjJU naSJq7xgZ2B5scuuX78l97eOnz8OP47eOHvj7tpJ4kMKusloGuskiXcnVd7q6kPI Q+JbxNQIsz+I9jOgh+lNTgcsEO5C5yVmK4SdCawkttsbhOWmFi/jLPJlp2Z2v0y7 h/Z0OM/UD54kizz4lcuIU2wTbkvvyCtnJEeAWJhru9ucGeRR/WUD0EtyM+VBMbU1 GvmXuVgN+KZSXA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:34:51 2025 by rpki-client