This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json) Hash identifier: 6bylkbDPaUMbtfor0x5Zi+AaupfleU7yBUya/OZy2ks= Subject key identifier: F2:BF:42:D5:37:FA:A5:DE:E6:47:A4:20:D8:FA:E2:ED:8D:30:D0:15 Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Certificate serial: 019B1B3C1FDD375542F952FC24765C70E8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft Manifest number: 153F Signing time: Sun 14 Dec 2025 05:01:23 +0000 Manifest this update: Sun 14 Dec 2025 05:01:23 +0000 Manifest next update: Mon 15 Dec 2025 05:01:23 +0000 Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=) 2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: qutUDJYB4zOCqt7bu3WMV1XrIxTY3V+cqunuYJRHCXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:1f:dd:37:55:42:f9:52:fc:24:76:5c:70:e8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Validity Not Before: Dec 14 05:01:23 2025 GMT Not After : Dec 15 05:01:23 2025 GMT Subject: CN=f2bf42d537faa5dee647a420d8fae2ed8d30d015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:6c:d6:47:46:55:12:b1:b5:82:97:83:19: 4d:74:eb:1c:cd:50:75:73:18:8f:be:a1:3e:bc:d1: 2f:9e:a1:d8:5b:a7:4b:76:c4:46:3a:ca:af:df:4b: 78:53:b2:44:04:f9:21:90:51:ba:cd:2f:9a:2e:a0: 07:c0:bd:02:e8:5f:4d:5e:64:46:a7:31:7a:c3:bf: a0:82:3d:27:37:28:96:57:86:90:40:d3:67:2f:a6: c5:e7:68:cd:c1:14:1a:de:49:2e:30:85:07:71:96: 0a:06:e8:d3:9b:90:df:d2:84:a1:9f:fe:30:11:3f: 94:ba:cd:bd:67:3f:19:d5:73:cf:fa:93:1f:d2:c8: d7:22:41:7b:4f:ea:f7:65:d7:23:73:f2:04:39:0a: 81:e9:85:0c:9c:4b:6e:65:51:a0:83:4b:f1:3e:46: 3d:82:3b:ff:92:5b:fb:f3:40:97:66:c9:66:2d:33: 8c:5e:81:eb:6f:dc:c8:fc:b6:e5:93:17:7e:42:6d: c6:d0:9f:2c:46:b3:a0:e6:2b:08:c3:bf:53:df:45: 01:a5:af:79:75:0c:8f:00:e1:0d:70:fa:4d:88:d0: 96:73:be:ce:22:e4:15:b8:68:b1:a3:47:01:75:ed: d3:cb:c0:ab:1e:d6:07:72:cd:67:b6:97:ea:26:4b: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BF:42:D5:37:FA:A5:DE:E6:47:A4:20:D8:FA:E2:ED:8D:30:D0:15 X509v3 Authority Key Identifier: keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:02:c9:b5:20:36:e0:82:92:5b:fb:17:27:89:6c:86:21: 58:bb:a6:a3:59:d6:cf:60:c6:ec:17:dd:1b:f6:3d:19:4e:32: 3a:b6:75:21:95:2e:ec:79:05:86:7a:88:f5:29:31:4b:00:ff: fe:1b:db:90:64:68:0c:7a:95:c6:23:db:0b:ff:58:62:b9:ec: 55:2b:b8:f4:b0:03:12:e3:a5:80:99:fa:fa:73:eb:35:d2:87: ba:6d:01:8d:dc:17:ae:66:49:34:93:7e:1e:f1:c9:04:28:95: e3:34:48:39:08:a4:e4:ba:18:1e:b0:94:f5:0f:2b:16:f8:fb: f6:4a:b9:db:c5:f3:72:18:44:be:25:96:a1:a2:c2:6c:75:dc: 1b:58:6b:a5:49:3f:07:3f:04:23:9f:a9:dd:3f:5d:00:37:a0: 30:ed:b2:52:ea:e5:22:93:c4:7e:2f:86:37:10:90:0a:77:6b: ff:b8:69:e5:77:57:35:53:4e:b5:6f:e3:94:a6:8b:01:d3:7f: 6f:ce:a7:c2:34:e8:0c:cf:6f:13:f4:50:7c:09:b1:9d:8a:bd: dd:a4:f4:7a:81:08:81:65:d0:a7:e0:d8:cf:c7:5a:da:7e:49: f2:18:21:ba:54:4b:68:7e:64:a4:71:94:e8:24:c6:6a:c1:e5: 0e:7e:70:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPB/dN1VC+VL8JHZccOjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5 NDg5M2YwHhcNMjUxMjE0MDUwMTIzWhcNMjUxMjE1MDUwMTIzWjAzMTEwLwYDVQQD EyhmMmJmNDJkNTM3ZmFhNWRlZTY0N2E0MjBkOGZhZTJlZDhkMzBkMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAJs1kdGVRKxtYKXgxlNdOsczVB1 cxiPvqE+vNEvnqHYW6dLdsRGOsqv30t4U7JEBPkhkFG6zS+aLqAHwL0C6F9NXmRG pzF6w7+ggj0nNyiWV4aQQNNnL6bF52jNwRQa3kkuMIUHcZYKBujTm5Df0oShn/4w ET+Uus29Zz8Z1XPP+pMf0sjXIkF7T+r3Zdcjc/IEOQqB6YUMnEtuZVGgg0vxPkY9 gjv/klv780CXZslmLTOMXoHrb9zI/Lblkxd+Qm3G0J8sRrOg5isIw79T30UBpa95 dQyPAOENcPpNiNCWc77OIuQVuGixo0cBde3Ty8CrHtYHcs1ntpfqJkuDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK/QtU3+qXe5kekINj64u2NMNAVMB8GA1UdIwQY MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt YmUyYjNlYWI0ZDc0LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0 LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORQCybUg NuCCklv7FyeJbIYhWLumo1nWz2DG7BfdG/Y9GU4yOrZ1IZUu7HkFhnqI9SkxSwD/ /hvbkGRoDHqVxiPbC/9YYrnsVSu49LADEuOlgJn6+nPrNdKHum0BjdwXrmZJNJN+ HvHJBCiV4zRIOQik5LoYHrCU9Q8rFvj79kq528XzchhEviWWoaLCbHXcG1hrpUk/ Bz8EI5+p3T9dADegMO2yUurlIpPEfi+GNxCQCndr/7hp5XdXNVNOtW/jlKaLAdN/ b86nwjToDM9vE/RQfAmxnYq93aT0eoEIgWXQp+DYz8da2n5J8hghulRLaH5kpHGU 6CTGasHlDn5wRQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:00 2025 by rpki-client