This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json) Hash identifier: 488tySvbHTbUf8zSQeSpp4gFJJZKLXgqhZbNkH/dk8Y= Subject key identifier: F2:91:B5:99:E1:18:2F:64:0B:19:D9:F4:96:6C:C8:96:95:3F:CB:41 Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad Certificate serial: 019B138218A21649E11EEE0948332BB1EA66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft Manifest number: 04D6 Signing time: Fri 12 Dec 2025 17:00:51 +0000 Manifest this update: Fri 12 Dec 2025 17:00:51 +0000 Manifest next update: Sat 13 Dec 2025 17:00:51 +0000 Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=) 2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: XHJaFVLlA7UuoYoh8KZfilmvZDCv2mz0rP6R+CPGoVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:18:a2:16:49:e1:1e:ee:09:48:33:2b:b1:ea:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad Validity Not Before: Dec 12 17:00:51 2025 GMT Not After : Dec 13 17:00:51 2025 GMT Subject: CN=f291b599e1182f640b19d9f4966cc896953fcb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:33:8c:fa:2b:70:75:43:b0:77:09:81:08: 25:32:5c:99:42:7b:f9:e0:30:2f:6a:17:1c:fd:06: 9b:99:34:d2:47:23:34:9d:79:a2:01:30:28:a3:2e: 22:00:d2:95:d5:98:b1:5f:bf:c6:0d:8f:12:1a:91: 69:2b:50:2f:f5:76:fa:0b:33:b4:c4:ba:db:0a:b7: 49:a9:98:e8:56:1f:61:2f:c8:83:bd:4b:d5:9e:6d: 8a:b4:4a:52:8c:41:e2:78:65:54:40:2d:69:53:67: 71:79:5b:38:d9:78:1c:c5:f1:df:3d:f2:0c:87:64: a6:8a:e5:89:d9:77:6e:63:56:2d:fa:1d:cb:a8:a4: dc:ef:3d:7d:64:5a:7f:fe:0f:de:84:e7:ff:26:7f: 9d:ad:42:d0:bd:95:71:a9:42:b8:c6:9c:c6:84:c6: 83:b9:a2:00:9f:e5:36:94:bb:2c:c8:03:31:ee:ff: a9:79:d0:61:23:92:a4:42:1b:2c:18:64:b2:68:d0: 6d:fb:eb:d0:2c:8f:6d:3a:25:0c:b4:93:c2:8c:66: 4d:ef:f9:87:d4:ec:20:da:18:1c:0b:75:4f:7f:2b: 66:6e:99:da:b0:4f:d5:5e:ac:fa:17:e0:79:46:df: e4:cf:f6:03:64:c9:d1:0e:47:3a:97:b6:45:81:87: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:B5:99:E1:18:2F:64:0B:19:D9:F4:96:6C:C8:96:95:3F:CB:41 X509v3 Authority Key Identifier: keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e0:ce:47:d7:11:cb:17:76:38:dc:b3:66:c7:7b:c2:e9:63: 37:89:dc:b9:01:bb:a2:60:ba:ab:cc:b4:00:af:e4:0a:1a:f2: 17:64:64:87:3e:15:cc:bd:a8:79:83:54:8d:78:ee:33:bd:a9: 55:8c:5d:a0:01:09:2e:b6:45:ea:eb:d4:c8:30:d1:e0:be:4e: f8:97:89:87:4e:4f:81:d2:31:52:2b:cc:a1:48:e2:63:eb:bd: 3d:0e:ae:61:ad:21:38:33:5f:85:f9:ef:56:9e:9e:15:33:35: 2c:ee:af:17:59:00:de:d6:78:c7:a9:ff:c3:65:78:63:36:e5: 22:5b:6c:0f:c9:1f:f5:e3:c8:be:f3:7c:4c:26:49:ac:71:1a: c6:04:28:f2:e6:bf:b7:0b:9e:8f:5f:d2:5e:a4:82:fd:b9:a8: 45:1f:8b:7a:a4:6b:c2:e1:3d:17:f4:bf:d0:17:e9:a9:ae:c4: 6c:d4:e5:3b:e6:e3:cd:18:01:bb:9a:51:f3:00:6a:62:be:0a: c0:e2:0a:87:cd:d8:bb:da:0a:a3:6d:38:41:b6:c2:9c:f9:fa: b8:b1:22:9d:67:c3:ff:08:5f:7f:d8:d6:c4:b4:a9:e9:25:94: f9:ae:bc:a4:01:47:df:67:5a:68:5d:b7:c0:f3:61:17:ff:74: 80:61:5a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTghiiFknhHu4JSDMrsepmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzViMTlkYjI3ZDNmMmQ3N2Q0MDgxODg0NTNiZTI2YjM0 NTUwYWQwHhcNMjUxMjEyMTcwMDUxWhcNMjUxMjEzMTcwMDUxWjAzMTEwLwYDVQQD EyhmMjkxYjU5OWUxMTgyZjY0MGIxOWQ5ZjQ5NjZjYzg5Njk1M2ZjYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun4zjPorcHVDsHcJgQglMlyZQnv5 4DAvahcc/QabmTTSRyM0nXmiATAooy4iANKV1ZixX7/GDY8SGpFpK1Av9Xb6CzO0 xLrbCrdJqZjoVh9hL8iDvUvVnm2KtEpSjEHieGVUQC1pU2dxeVs42XgcxfHfPfIM h2SmiuWJ2XduY1Yt+h3LqKTc7z19ZFp//g/ehOf/Jn+drULQvZVxqUK4xpzGhMaD uaIAn+U2lLssyAMx7v+pedBhI5KkQhssGGSyaNBt++vQLI9tOiUMtJPCjGZN7/mH 1Owg2hgcC3VPfytmbpnasE/VXqz6F+B5Rt/kz/YDZMnRDkc6l7ZFgYfgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKRtZnhGC9kCxnZ9JZsyJaVP8tBMB8GA1UdIwQY MBaAFCc1sZ2yfT8td9QIGIRTviazRVCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQt YzViMGVmNGU3YmM2LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQtYzViMGVmNGU3YmM2 LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+DOR9cR yxd2ONyzZsd7wuljN4ncuQG7omC6q8y0AK/kChryF2Rkhz4VzL2oeYNUjXjuM72p VYxdoAEJLrZF6uvUyDDR4L5O+JeJh05PgdIxUivMoUjiY+u9PQ6uYa0hODNfhfnv Vp6eFTM1LO6vF1kA3tZ4x6n/w2V4YzblIltsD8kf9ePIvvN8TCZJrHEaxgQo8ua/ twuej1/SXqSC/bmoRR+LeqRrwuE9F/S/0Bfpqa7EbNTlO+bjzRgBu5pR8wBqYr4K wOIKh83Yu9oKo204QbbCnPn6uLEinWfD/whff9jWxLSp6SWU+a68pAFH32daaF23 wPNhF/90gGFacw== -----END CERTIFICATE-----Generated at Fri Dec 12 23:27:15 2025 by rpki-client