This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft File: jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json) Hash identifier: IbG5YC9R4yB8CBK8j9CGCyzmoTwm6CYmBXHthUmLOBo= Subject key identifier: 12:01:22:40:22:CD:4B:94:06:FB:F6:EE:54:1D:08:A1:14:99:66:49 Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Certificate serial: 019B315623FC14467686C8E5F2186D11DF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 12:01:27 +0000 Manifest this update: Thu 18 Dec 2025 12:01:27 +0000 Manifest next update: Fri 19 Dec 2025 12:01:27 +0000 Files and hashes: 1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=) 2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: e6v8CI8MvQH3GpVs8c6z8xdw8DSpSbHTJBIMROM6SUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:23:fc:14:46:76:86:c8:e5:f2:18:6d:11:df:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Validity Not Before: Dec 18 12:01:27 2025 GMT Not After : Dec 19 12:01:27 2025 GMT Subject: CN=1201224022cd4b9406fbf6ee541d08a114996649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:1b:b3:41:9f:01:d0:7e:df:af:ed:a6:32: e4:e1:66:99:5d:4b:28:7a:03:a2:09:f1:77:89:1a: b9:fe:74:3c:18:ed:16:42:b0:2d:4c:f4:8a:31:68: 4a:ca:7c:fd:61:57:1a:46:98:38:c4:0a:12:c6:eb: 33:f4:94:5a:9f:ff:d5:93:90:fe:58:f9:9b:e2:0d: cf:ba:4d:1f:29:e2:45:3b:2a:f4:06:72:d8:7e:6c: e1:44:85:9b:88:00:ab:66:71:82:24:fb:45:b0:61: ec:9d:ad:6d:3d:29:b5:91:7d:3d:4b:a2:58:94:70: e3:89:7c:c4:90:44:93:5c:17:b5:89:9e:46:de:84: b1:ce:f4:62:84:64:1e:02:6c:41:3a:f4:a4:00:1c: a1:ff:7e:c8:d7:49:11:65:77:6e:ad:f9:50:f9:9c: 35:31:e6:8b:39:01:d8:95:86:0d:8c:f6:06:6a:bc: fc:16:68:db:63:47:80:3e:61:67:0f:1a:f1:48:71: 0d:dd:6f:b5:b3:cf:9b:32:b1:37:e5:8c:f5:70:5b: be:ea:2e:39:b1:95:a2:45:12:17:c2:27:f3:6c:7f: 9c:b2:b6:96:24:87:39:f5:8a:05:05:c8:61:0e:2a: e4:b8:7e:2b:13:1c:4b:6b:65:76:ba:55:2e:dc:88: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:22:40:22:CD:4B:94:06:FB:F6:EE:54:1D:08:A1:14:99:66:49 X509v3 Authority Key Identifier: keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:50:f0:02:6d:10:6c:48:76:5d:72:13:99:c0:ae:9f:29: bf:68:3e:b5:c0:8b:82:2c:b4:98:d2:82:50:2b:29:c9:05:df: 39:77:b9:c9:ca:b6:fc:3e:b2:4b:5d:ed:21:a7:bd:8e:44:6b: fa:40:bf:e3:6b:14:93:ec:d1:72:2c:07:d6:9f:a5:1d:d9:d3: b5:18:9f:e9:c9:b1:80:ed:39:c1:af:10:58:89:0a:45:e1:b1: f0:38:12:1b:90:db:e9:77:21:90:7e:b8:48:8e:1d:74:40:18: e1:d3:b0:8f:20:e3:8b:75:f9:17:ba:d7:de:7c:9e:5c:55:3c: 7f:43:f3:5b:2b:4a:fd:f7:fd:06:12:2d:d4:04:a0:72:51:79: d7:85:c2:f7:5e:9b:2b:3f:4e:39:e0:dc:e2:78:09:d3:82:d5: 7b:83:67:e4:21:de:28:51:e9:41:f1:4c:df:20:8e:a2:86:11: 1b:b1:e0:2c:7e:5f:98:8b:1a:c2:47:22:7f:53:a7:7a:b7:f7: 7a:84:cc:6b:68:da:ca:79:4b:22:a1:06:13:fb:6c:35:b7:3b: 2d:45:15:ac:54:ee:03:5e:4a:54:cc:97:93:d4:47:0f:03:d4: d4:6d:bd:c3:c0:6c:f7:0d:1d:35:3b:4e:4e:91:6f:2f:c6:a7: 19:95:b1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxViP8FEZ2hsjl8hhtEd9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGRiNzliZTg3YmQzODY1NWJhYjcwM2E2MGU3NzRjNGQ2 YzIzNTcwHhcNMjUxMjE4MTIwMTI3WhcNMjUxMjE5MTIwMTI3WjAzMTEwLwYDVQQD EygxMjAxMjI0MDIyY2Q0Yjk0MDZmYmY2ZWU1NDFkMDhhMTE0OTk2NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19wbs0GfAdB+36/tpjLk4WaZXUso egOiCfF3iRq5/nQ8GO0WQrAtTPSKMWhKynz9YVcaRpg4xAoSxusz9JRan//Vk5D+ WPmb4g3Puk0fKeJFOyr0BnLYfmzhRIWbiACrZnGCJPtFsGHsna1tPSm1kX09S6JY lHDjiXzEkESTXBe1iZ5G3oSxzvRihGQeAmxBOvSkAByh/37I10kRZXdurflQ+Zw1 MeaLOQHYlYYNjPYGarz8FmjbY0eAPmFnDxrxSHEN3W+1s8+bMrE35Yz1cFu+6i45 sZWiRRIXwifzbH+csraWJIc59YoFBchhDirkuH4rExxLa2V2ulUu3IjAywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIBIkAizUuUBvv27lQdCKEUmWZJMB8GA1UdIwQY MBaAFI8Nt5voe9OGVbq3A6YOd0xNbCNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMt NmQwNzgxNTMyYTQ4LzEvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMtNmQwNzgxNTMyYTQ4 LzEvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ1Q8AJt EGxIdl1yE5nArp8pv2g+tcCLgiy0mNKCUCspyQXfOXe5ycq2/D6yS13tIae9jkRr +kC/42sUk+zRciwH1p+lHdnTtRif6cmxgO05wa8QWIkKReGx8DgSG5Db6XchkH64 SI4ddEAY4dOwjyDji3X5F7rX3nyeXFU8f0PzWytK/ff9BhIt1ASgclF514XC916b Kz9OOeDc4ngJ04LVe4Nn5CHeKFHpQfFM3yCOooYRG7HgLH5fmIsawkcif1Onerf3 eoTMa2jaynlLIqEGE/tsNbc7LUUVrFTuA15KVMyXk9RHDwPU1G29w8Bs9w0dNTtO TpFvL8anGZWxyQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:05:14 2025 by rpki-client