This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json) Hash identifier: 9jZTSvKS6/HIsKR2hQr/dteaOn5vCcUVm/tyOzz24Jo= Subject key identifier: 36:E4:FD:3A:BB:36:3A:F4:AC:20:AF:A6:78:FF:B6:B9:60:AE:60:91 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B0EC978F552904D9C01A2B393661F0B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft Manifest number: 158F Signing time: Thu 11 Dec 2025 19:00:43 +0000 Manifest this update: Thu 11 Dec 2025 19:00:43 +0000 Manifest next update: Fri 12 Dec 2025 19:00:43 +0000 Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=) 2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: IvzuYuTXFZryYt/35QhK8s5hxyPtJmKKfm7vwz2yNpk=) 3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=) 4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:78:f5:52:90:4d:9c:01:a2:b3:93:66:1f:0b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Dec 11 19:00:43 2025 GMT Not After : Dec 12 19:00:43 2025 GMT Subject: CN=36e4fd3abb363af4ac20afa678ffb6b960ae6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:91:35:4b:7b:d2:78:e3:d5:bc:5c:53:be: 2f:6e:38:9c:13:da:c4:e4:6c:22:64:43:bf:a3:1b: 29:fb:3c:df:91:23:bd:11:c2:64:56:8b:85:dc:c0: 12:cd:b1:1a:0e:d8:68:b5:50:d7:fc:1f:47:bf:d5: b4:6a:36:0d:19:a6:ac:38:07:9c:42:72:06:5b:f7: bb:f2:65:e4:69:44:c7:b9:ab:9b:8a:70:79:31:2f: a5:51:54:02:6b:ec:71:f2:c0:03:4e:95:f2:b5:dc: 0b:d1:ab:82:a9:98:91:8b:34:70:4e:b5:19:6b:16: a2:15:60:de:16:e6:5b:85:f5:04:d7:6d:b9:51:25: be:34:8e:2f:bb:f6:fd:00:fe:5d:c2:b8:bf:bf:cb: 1b:2e:84:38:0f:b7:16:cf:bd:24:a1:25:ad:76:1e: 28:ec:74:65:2f:82:b9:47:8c:57:33:d4:a3:51:f3: 57:e6:17:4e:bc:6a:ec:0c:78:02:b8:61:14:02:dc: dd:62:d9:95:df:ce:57:6b:af:70:3b:8e:7f:70:67: 20:68:10:55:ed:b5:07:23:39:1d:0b:e9:5b:a5:46: 5d:46:7c:6a:ab:3d:a7:a2:b0:e5:89:e0:b2:cc:2a: c1:d5:8b:8d:ca:b6:5f:9d:25:6d:13:61:13:16:30: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:FD:3A:BB:36:3A:F4:AC:20:AF:A6:78:FF:B6:B9:60:AE:60:91 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e4:84:66:3e:0f:5a:b6:84:80:0a:ee:3d:9b:c5:fd:73:8e: 14:76:54:ca:e2:11:0d:c4:11:c4:3c:7a:86:d5:1c:c1:30:aa: 1f:c9:ad:62:df:d4:4c:c6:8d:75:1e:fb:6b:5e:27:ce:45:ba: ff:46:ca:2a:48:af:62:bb:bd:5a:f9:5d:31:0c:2b:da:6a:dd: 9d:c0:01:a4:4c:16:e2:e9:84:0b:de:f6:cc:67:22:0b:0a:3d: 10:ae:a1:c3:85:a2:00:9b:5e:b4:03:31:41:54:36:85:a1:63: 26:81:56:8d:2f:ee:f9:e1:f0:4d:d6:32:68:ab:a3:77:f6:d9: 69:46:63:53:38:56:59:40:f6:4e:87:3c:26:35:e3:30:66:fb: ad:84:3b:47:9b:0f:07:f7:f0:a7:12:b1:dd:a2:0d:68:31:9f: b5:eb:10:88:1f:39:4d:c2:7b:2b:3e:5e:12:4d:aa:0a:a8:df: 36:64:69:b7:fe:fc:65:10:49:2e:22:de:b7:05:98:58:3e:e1: cc:2b:2e:b9:19:33:3b:96:ae:fa:65:0e:95:d1:ad:21:22:52: d2:54:7a:36:11:10:b3:55:fe:b6:42:b1:b8:b7:f0:fd:d1:71: 94:f4:25:87:45:7e:20:36:86:bd:0e:c2:22:aa:6e:3a:fc:70: 5d:66:97:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyXj1UpBNnAGis5NmHwsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjUxMjExMTkwMDQzWhcNMjUxMjEyMTkwMDQzWjAzMTEwLwYDVQQD EygzNmU0ZmQzYWJiMzYzYWY0YWMyMGFmYTY3OGZmYjZiOTYwYWU2MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1iRNUt70njj1bxcU74vbjicE9rE 5GwiZEO/oxsp+zzfkSO9EcJkVouF3MASzbEaDthotVDX/B9Hv9W0ajYNGaasOAec QnIGW/e78mXkaUTHuaubinB5MS+lUVQCa+xx8sADTpXytdwL0auCqZiRizRwTrUZ axaiFWDeFuZbhfUE1225USW+NI4vu/b9AP5dwri/v8sbLoQ4D7cWz70koSWtdh4o 7HRlL4K5R4xXM9SjUfNX5hdOvGrsDHgCuGEUAtzdYtmV385Xa69wO45/cGcgaBBV 7bUHIzkdC+lbpUZdRnxqqz2norDlieCyzCrB1YuNyrZfnSVtE2ETFjA6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbk/Tq7Njr0rCCvpnj/trlgrmCRMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuSEZj4P WraEgAruPZvF/XOOFHZUyuIRDcQRxDx6htUcwTCqH8mtYt/UTMaNdR77a14nzkW6 /0bKKkivYru9WvldMQwr2mrdncABpEwW4umEC972zGciCwo9EK6hw4WiAJtetAMx QVQ2haFjJoFWjS/u+eHwTdYyaKujd/bZaUZjUzhWWUD2Toc8JjXjMGb7rYQ7R5sP B/fwpxKx3aINaDGftesQiB85TcJ7Kz5eEk2qCqjfNmRpt/78ZRBJLiLetwWYWD7h zCsuuRkzO5au+mUOldGtISJS0lR6NhEQs1X+tkKxuLfw/dFxlPQlh0V+IDaGvQ7C IqpuOvxwXWaXVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:15 2025 by rpki-client