This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json) Hash identifier: Utwj0x9qF3xlri4iaPW8KENLmRV/vQj+qiZMaPCKJsU= Subject key identifier: D7:15:09:C3:25:9F:2E:6F:55:E1:F5:E2:D0:81:03:6E:73:8D:7E:18 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B183AD1D7D5869665D10BC353DE3D1BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft Manifest number: 0FA6 Signing time: Sat 13 Dec 2025 15:01:06 +0000 Manifest this update: Sat 13 Dec 2025 15:01:06 +0000 Manifest next update: Sun 14 Dec 2025 15:01:06 +0000 Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=) 2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=) 3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: UYGAtMjQnpZbTgKLBHL04aI0DNImOUKIjgo91912+4I=) 4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=) 5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=) 6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=) 7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=) 8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=) 9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:d1:d7:d5:86:96:65:d1:0b:c3:53:de:3d:1b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Dec 13 15:01:06 2025 GMT Not After : Dec 14 15:01:06 2025 GMT Subject: CN=d71509c3259f2e6f55e1f5e2d081036e738d7e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:21:82:66:c3:da:de:6f:aa:94:83:ec:47: c2:54:6e:8c:be:57:c2:dd:9b:02:ab:56:33:34:8f: ad:72:b2:61:22:9d:b9:6d:41:45:3f:a5:e7:35:39: 52:59:ca:69:58:a8:58:59:36:e7:87:75:6f:59:18: b8:56:0c:2b:d0:8e:3b:c7:37:6e:25:55:ad:2a:b6: ac:6a:1f:80:ab:3c:36:74:a3:a1:fa:96:70:81:d2: c4:ac:3b:c9:44:15:5d:fc:28:7a:77:d7:6c:7a:32: 2f:ae:26:74:01:05:c3:9d:7c:c4:6a:93:7f:40:4e: e6:90:74:41:3f:fa:e8:f1:0b:13:a5:2f:41:6a:b6: 2b:2e:df:19:0b:59:01:61:fe:c7:c2:5c:38:26:ed: 9e:34:e1:4d:b1:4a:77:5b:b4:8b:a6:31:7c:27:f3: c8:fe:5a:5c:b6:0f:d4:3d:3d:7a:50:03:c1:07:20: af:3c:28:50:44:a1:c1:d1:dd:b2:07:f0:75:f1:38: 90:79:3d:19:d0:eb:2f:d2:64:ed:06:fd:f4:b6:a6: 9a:42:d5:59:21:86:ea:c6:59:04:2f:c5:79:bc:a5: 83:55:72:e9:2a:1e:e4:2d:6c:78:9b:bf:32:47:45: 89:92:c0:2b:d1:6a:b5:85:3d:b9:65:3c:13:b4:74: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:15:09:C3:25:9F:2E:6F:55:E1:F5:E2:D0:81:03:6E:73:8D:7E:18 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:63:fc:09:81:50:d8:3d:ad:2f:64:37:52:87:23:db:f8:f8: ae:fc:2c:4f:6e:01:78:b5:67:21:6c:fe:bf:45:cd:84:76:af: c0:e2:5f:34:f0:91:5f:48:1d:17:52:b0:af:09:eb:03:65:d1: 1c:1b:45:76:11:88:ba:65:a0:7f:eb:8f:ee:f0:9f:c7:06:93: f3:d6:69:76:bd:26:cd:a0:96:18:20:9f:69:78:21:b3:3d:2f: 9c:2a:d0:71:5b:ed:4a:cd:5e:dd:65:b9:6d:e7:bd:c9:91:4d: 31:66:c7:b9:f8:bf:2f:21:bf:5d:bd:0e:62:53:17:c2:dd:f6: 2c:df:19:d5:2d:fc:d3:17:79:3f:1c:5a:9b:02:1f:5d:2a:9b: f6:76:89:4a:e9:6d:a8:e8:21:ed:f0:36:11:09:f2:17:06:d5: 5b:82:49:5c:7a:77:cd:01:ef:ce:97:04:7a:77:39:7c:43:0d: 75:c2:5a:e4:36:88:6f:ee:da:52:00:3b:02:78:72:44:0d:82: 70:cd:cb:f0:c1:d4:66:95:05:5f:e7:fe:64:1a:da:e1:79:05: b7:01:bb:ff:08:5f:85:ab:bd:af:5e:78:44:75:68:c5:4e:43: 0a:35:22:24:98:d4:23:f7:58:16:f9:b4:68:b6:f1:21:1c:4c: 99:78:c3:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOtHX1YaWZdELw1PePRv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjUxMjEzMTUwMTA2WhcNMjUxMjE0MTUwMTA2WjAzMTEwLwYDVQQD EyhkNzE1MDljMzI1OWYyZTZmNTVlMWY1ZTJkMDgxMDM2ZTczOGQ3ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunchgmbD2t5vqpSD7EfCVG6MvlfC 3ZsCq1YzNI+tcrJhIp25bUFFP6XnNTlSWcppWKhYWTbnh3VvWRi4Vgwr0I47xzdu JVWtKrasah+Aqzw2dKOh+pZwgdLErDvJRBVd/Ch6d9dsejIvriZ0AQXDnXzEapN/ QE7mkHRBP/ro8QsTpS9BarYrLt8ZC1kBYf7Hwlw4Ju2eNOFNsUp3W7SLpjF8J/PI /lpctg/UPT16UAPBByCvPChQRKHB0d2yB/B18TiQeT0Z0Osv0mTtBv30tqaaQtVZ IYbqxlkEL8V5vKWDVXLpKh7kLWx4m78yR0WJksAr0Wq1hT25ZTwTtHRKuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcVCcMlny5vVeH14tCBA25zjX4YMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGP8CYFQ 2D2tL2Q3Uocj2/j4rvwsT24BeLVnIWz+v0XNhHavwOJfNPCRX0gdF1KwrwnrA2XR HBtFdhGIumWgf+uP7vCfxwaT89Zpdr0mzaCWGCCfaXghsz0vnCrQcVvtSs1e3WW5 bee9yZFNMWbHufi/LyG/Xb0OYlMXwt32LN8Z1S380xd5PxxamwIfXSqb9naJSult qOgh7fA2EQnyFwbVW4JJXHp3zQHvzpcEenc5fEMNdcJa5DaIb+7aUgA7AnhyRA2C cM3L8MHUZpUFX+f+ZBra4XkFtwG7/whfhau9r154RHVoxU5DCjUiJJjUI/dYFvm0 aLbxIRxMmXjDbQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:31 2025 by rpki-client