This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json) Hash identifier: V47GpyiytoaYhml2MpspzmvSDWtssG8MmYBXMF4l53o= Subject key identifier: 3B:59:D0:F7:5E:05:71:43:B6:D2:EF:FE:26:24:EB:50:1C:0C:FB:5D Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019B112621A1A9D6CEFA54367A5DA31E0914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft Manifest number: 0C56 Signing time: Fri 12 Dec 2025 06:01:10 +0000 Manifest this update: Fri 12 Dec 2025 06:01:10 +0000 Manifest next update: Sat 13 Dec 2025 06:01:10 +0000 Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=) 2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: XX4wJCbPkr/ltlfOkJm/zc9BSLR33zTdQ/6i9q+xun0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:21:a1:a9:d6:ce:fa:54:36:7a:5d:a3:1e:09:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Dec 12 06:01:10 2025 GMT Not After : Dec 13 06:01:10 2025 GMT Subject: CN=3b59d0f75e057143b6d2effe2624eb501c0cfb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:be:00:ee:58:87:a8:95:b6:57:e2:58:9e: b0:1e:e0:0e:79:95:25:ba:d2:2c:0a:dc:f9:6b:f4: 59:0b:f6:bb:e1:a8:35:cb:75:54:d8:0b:4a:9e:42: 8a:d0:84:2b:ea:bc:7d:32:7a:d9:29:57:e5:f5:b2: 15:a9:1e:fa:8b:f5:23:ed:f0:7e:d0:a7:8a:0c:ff: 51:58:72:8c:52:66:47:3e:f7:50:9d:32:e8:aa:ba: 76:6c:41:63:b2:02:46:e5:f2:a7:73:e7:13:7d:f2: 77:6a:be:65:55:84:42:9b:7e:2f:13:8f:81:1d:df: de:63:b0:05:7e:93:c4:bb:f0:73:1f:5f:dd:ec:2f: 8d:97:f0:62:fd:49:92:5f:71:fb:bf:73:c8:9d:64: 3e:d0:d1:c9:4e:45:c9:65:32:36:4a:5b:5e:5c:0b: f4:e8:9e:79:6c:a7:06:8b:14:47:60:4b:ce:e7:b4: ab:6a:60:03:93:6b:34:c5:70:a0:ac:72:4e:fc:6b: 32:f3:67:23:68:2d:f2:32:92:d6:c3:24:ce:34:f5: f8:1a:d0:17:db:3c:89:f3:3f:13:1d:f2:9b:d2:78: 15:0e:9b:37:17:e2:84:c6:17:94:05:b4:21:19:02: f8:24:b0:d7:29:2c:7e:4c:26:27:96:22:a9:45:e5: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:D0:F7:5E:05:71:43:B6:D2:EF:FE:26:24:EB:50:1C:0C:FB:5D X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0e:ca:c6:4e:9f:0b:d6:3e:c0:1a:c0:65:6e:87:9b:db:b4: b1:f2:4c:8f:6d:22:cb:1b:9a:f6:c0:8a:a6:74:7b:0d:0e:10: 0d:ad:2a:76:2e:fa:f2:f1:25:aa:e6:0b:e4:d9:40:8f:ee:5b: a8:2c:fd:58:74:ef:5b:f3:e9:ac:69:2e:e8:79:62:44:85:ed: 4d:89:5e:f5:cb:a3:09:1d:7b:45:e0:62:55:fe:7c:d4:7f:3e: f7:94:33:c4:7c:e9:0d:5c:ba:27:09:1f:2a:23:ed:fe:94:f3: c2:96:48:c1:d1:9e:3c:be:96:38:4f:b7:e0:50:4a:1d:fc:91: ed:2a:00:7c:5b:70:07:af:e6:17:40:9f:ce:17:78:85:d9:5f: a3:c9:74:43:68:4f:e7:ea:fe:38:eb:6f:94:e5:4b:ad:c3:88: b7:65:9d:a7:54:9a:9b:3a:dd:6c:fa:e4:6e:a3:79:84:4c:3e: 5c:db:cf:8f:da:ea:ea:7d:4f:67:dd:72:a7:ec:c7:c1:53:62: cf:f2:a9:5a:bc:30:27:19:26:c1:80:85:08:9f:d0:bd:cc:a8: e5:68:f6:98:81:1a:41:49:1d:22:b9:5e:83:62:5c:42:66:fe: 46:54:15:9a:58:1b:68:7b:c3:1f:7d:81:75:e7:cc:6c:5f:19: 94:23:55:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJiGhqdbO+lQ2el2jHgkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjUxMjEyMDYwMTEwWhcNMjUxMjEzMDYwMTEwWjAzMTEwLwYDVQQD EygzYjU5ZDBmNzVlMDU3MTQzYjZkMmVmZmUyNjI0ZWI1MDFjMGNmYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPe+AO5Yh6iVtlfiWJ6wHuAOeZUl utIsCtz5a/RZC/a74ag1y3VU2AtKnkKK0IQr6rx9MnrZKVfl9bIVqR76i/Uj7fB+ 0KeKDP9RWHKMUmZHPvdQnTLoqrp2bEFjsgJG5fKnc+cTffJ3ar5lVYRCm34vE4+B Hd/eY7AFfpPEu/BzH1/d7C+Nl/Bi/UmSX3H7v3PInWQ+0NHJTkXJZTI2SlteXAv0 6J55bKcGixRHYEvO57SramADk2s0xXCgrHJO/Gsy82cjaC3yMpLWwyTONPX4GtAX 2zyJ8z8THfKb0ngVDps3F+KExheUBbQhGQL4JLDXKSx+TCYnliKpReWWFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtZ0PdeBXFDttLv/iYk61AcDPtdMB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAng7Kxk6f C9Y+wBrAZW6Hm9u0sfJMj20iyxua9sCKpnR7DQ4QDa0qdi768vElquYL5NlAj+5b qCz9WHTvW/PprGku6HliRIXtTYle9cujCR17ReBiVf581H8+95QzxHzpDVy6Jwkf KiPt/pTzwpZIwdGePL6WOE+34FBKHfyR7SoAfFtwB6/mF0Cfzhd4hdlfo8l0Q2hP 5+r+OOtvlOVLrcOIt2Wdp1SamzrdbPrkbqN5hEw+XNvPj9rq6n1PZ91yp+zHwVNi z/KpWrwwJxkmwYCFCJ/Qvcyo5Wj2mIEaQUkdIrleg2JcQmb+RlQVmlgbaHvDH32B defMbF8ZlCNVgA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:51 2025 by rpki-client