This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json) Hash identifier: SvXr6GDGxUGKT2Lv+xHDmTKd0HOPagXAlQBWajX0Ed0= Subject key identifier: 92:B6:51:DB:07:FD:C3:63:0E:ED:3D:DA:A6:2C:04:77:72:D3:C0:C2 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B337B5CDE1C6FB4F92D3F9B54915179C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft Manifest number: 15A2 Signing time: Thu 18 Dec 2025 22:01:21 +0000 Manifest this update: Thu 18 Dec 2025 22:01:21 +0000 Manifest next update: Fri 19 Dec 2025 22:01:21 +0000 Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=) 2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: vFzZv/RLlE1eXWUoPPQPgYE7tLAsH9EhZ1ixPraxcdI=) 3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=) 4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:5c:de:1c:6f:b4:f9:2d:3f:9b:54:91:51:79:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Dec 18 22:01:21 2025 GMT Not After : Dec 19 22:01:21 2025 GMT Subject: CN=92b651db07fdc3630eed3ddaa62c047772d3c0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:2b:76:2d:dc:6f:d8:05:d3:67:3c:21:c7: 37:f0:2f:0d:3f:f1:0e:10:1a:9c:f6:d1:97:70:89: f1:cb:22:a7:02:af:dd:57:c8:9a:92:35:d7:3b:f2: 11:8b:32:af:f6:54:d3:dd:ff:c9:0c:c5:db:39:57: 6a:8e:de:f3:64:a0:95:a6:e4:e8:49:c9:98:16:b6: 9f:33:5c:1d:27:ee:c9:4d:91:53:76:66:56:b5:c2: bc:11:4a:69:5f:3b:88:01:e4:b8:38:72:76:de:06: a5:cc:0c:2e:b5:07:05:b7:6b:ea:fa:85:d0:1a:2e: c0:34:77:13:c2:d2:33:0b:f4:f7:84:73:e7:ed:45: fe:c1:ee:25:ca:e6:2f:a3:bb:52:60:9e:75:2f:88: ab:7c:d5:da:9e:19:58:06:17:e1:7e:25:d6:b3:56: 37:4f:fb:12:d5:0c:08:24:11:18:8e:1e:90:70:fc: c8:60:f8:f1:a0:7f:93:d7:0a:24:7e:a8:a2:d9:23: 09:05:32:93:6c:62:03:ff:06:38:71:68:ac:62:bc: 46:2e:26:65:8d:79:c2:6e:09:98:fa:82:71:5c:a4: 2f:c9:85:70:2f:ff:51:ce:06:d3:14:96:65:47:ab: 20:fd:96:50:13:53:c5:60:43:5f:a0:d1:6c:b7:97: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:51:DB:07:FD:C3:63:0E:ED:3D:DA:A6:2C:04:77:72:D3:C0:C2 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:ae:92:06:ea:d9:5b:27:5e:9f:c1:b4:b3:a0:53:04:b1: 09:1e:e0:da:27:fd:c2:53:15:7e:54:df:2d:71:44:aa:81:b1: da:27:1f:ef:a9:f8:06:08:e0:31:cc:7e:84:fd:8c:ad:ca:06: b9:2f:70:a8:01:71:e0:99:45:12:ad:b1:ff:6e:00:0c:d6:a6: dd:09:d6:aa:8e:aa:2b:f6:0d:72:31:8f:44:5f:97:43:0b:2a: d9:dd:82:2d:41:7a:b8:79:7d:01:1d:83:e9:9b:ae:17:fa:5d: 6e:20:c7:a8:ed:55:e6:7e:91:80:4a:f1:ac:03:82:50:e4:38: 8e:1f:fb:7e:00:17:90:4c:43:cb:87:9a:34:7b:fb:0d:42:d4: 7d:cd:43:9b:cf:d5:9e:69:91:a6:be:5a:4f:ed:5c:eb:c3:be: 92:04:70:e9:aa:68:37:be:85:8f:0c:d4:c1:1a:8b:9a:10:97: 03:df:d6:be:a3:c3:e8:5f:2a:65:e8:da:cb:3b:5e:02:8f:6e: 72:f3:57:6f:3f:ae:66:96:32:a1:8d:3b:ab:51:f1:76:af:91: 98:8e:ab:71:80:5a:82:1a:9b:aa:dd:5e:f4:7f:43:8f:02:94: d7:13:52:20:92:c3:c8:e9:bc:93:e6:8a:cf:f1:db:f8:f1:d2: a3:a9:ea:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1zeHG+0+S0/m1SRUXnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjUxMjE4MjIwMTIxWhcNMjUxMjE5MjIwMTIxWjAzMTEwLwYDVQQD Eyg5MmI2NTFkYjA3ZmRjMzYzMGVlZDNkZGFhNjJjMDQ3NzcyZDNjMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBMrdi3cb9gF02c8Icc38C8NP/EO EBqc9tGXcInxyyKnAq/dV8iakjXXO/IRizKv9lTT3f/JDMXbOVdqjt7zZKCVpuTo ScmYFrafM1wdJ+7JTZFTdmZWtcK8EUppXzuIAeS4OHJ23galzAwutQcFt2vq+oXQ Gi7ANHcTwtIzC/T3hHPn7UX+we4lyuYvo7tSYJ51L4irfNXanhlYBhfhfiXWs1Y3 T/sS1QwIJBEYjh6QcPzIYPjxoH+T1wokfqii2SMJBTKTbGID/wY4cWisYrxGLiZl jXnCbgmY+oJxXKQvyYVwL/9RzgbTFJZlR6sg/ZZQE1PFYENfoNFst5eD2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK2UdsH/cNjDu092qYsBHdy08DCMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8Wukgbq 2VsnXp/BtLOgUwSxCR7g2if9wlMVflTfLXFEqoGx2icf76n4BgjgMcx+hP2MrcoG uS9wqAFx4JlFEq2x/24ADNam3QnWqo6qK/YNcjGPRF+XQwsq2d2CLUF6uHl9AR2D 6ZuuF/pdbiDHqO1V5n6RgErxrAOCUOQ4jh/7fgAXkExDy4eaNHv7DULUfc1Dm8/V nmmRpr5aT+1c68O+kgRw6apoN76FjwzUwRqLmhCXA9/WvqPD6F8qZejayzteAo9u cvNXbz+uZpYyoY07q1Hxdq+RmI6rcYBaghqbqt1e9H9DjwKU1xNSIJLDyOm8k+aK z/Hb+PHSo6nqYw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:42:39 2025 by rpki-client