This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json) Hash identifier: Ih3VjXfdXjbR0rk/AGeVIHnJPHN005Hojicm5IBFydU= Subject key identifier: A0:A2:AE:8A:5D:22:35:BB:FC:43:AE:24:DC:9F:FE:81:1D:BD:3B:E9 Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Certificate serial: 019AF12DBA00F46DDABDDD8526ADF255C452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=) 2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: D7MclRYL8fyRFxGLTp+HNfSM6pqF1JD7FCTyCRH7Ydc=) 3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ba:00:f4:6d:da:bd:dd:85:26:ad:f2:55:c4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=a0a2ae8a5d2235bbfc43ae24dc9ffe811dbd3be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:5c:00:99:d0:1b:31:15:bd:aa:af:c1:a1: 68:be:4c:75:58:21:89:e7:a3:da:18:30:5f:c8:09: e6:c5:29:6c:b5:8c:5e:d0:39:cc:8a:d6:7d:f4:43: 0b:c4:2a:0c:09:5a:78:ce:d1:31:9c:86:12:41:80: 6a:31:c4:6c:1b:0e:78:18:59:9f:4e:90:f8:43:80: 98:c8:b2:33:63:1a:33:e7:22:b5:f8:2b:3a:d9:c9: 6a:98:81:c6:00:11:86:25:7b:c6:e6:33:b6:c8:62: 3b:6f:e1:02:39:9b:fc:59:b0:27:a9:60:53:8d:89: d9:f0:5e:dd:f6:eb:fd:9c:00:e9:a2:9c:64:49:50: c4:39:88:93:e6:41:d3:18:7e:e8:b4:e7:d5:63:53: 9f:d3:9a:af:a4:5f:39:e5:0d:9a:5b:90:b2:96:85: ad:18:fe:c4:32:15:6e:f0:9f:d9:80:9b:cd:38:e8: ff:1c:cf:9f:6c:df:6f:4c:61:97:80:4b:ab:51:3c: 12:af:17:5e:5a:ec:34:f4:0e:4a:10:f9:1a:f9:a4: d8:d9:63:9e:01:82:5d:88:b2:da:ba:f7:47:39:30: d9:38:ba:bc:e4:00:cb:e3:0d:fd:50:2c:b5:0e:77: e7:26:b4:99:86:03:3d:ca:f1:e2:0f:15:ce:eb:dd: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A2:AE:8A:5D:22:35:BB:FC:43:AE:24:DC:9F:FE:81:1D:BD:3B:E9 X509v3 Authority Key Identifier: keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d4:cc:00:33:73:1d:a7:39:41:9f:52:d9:70:01:2d:4e:af: 98:82:04:f4:d0:d7:79:6a:ac:6f:2a:9c:42:79:82:85:84:74: a7:e6:90:a2:13:2e:b5:ec:b8:11:56:43:34:06:42:61:88:a9: a3:43:4b:a1:9c:2c:70:35:55:ae:c8:e6:6b:f4:60:21:54:0c: de:15:1b:a8:89:98:1e:ed:21:53:71:bb:ba:36:ae:a4:7d:80: 94:c3:b8:41:2b:bc:bd:65:5e:f8:4e:6a:fc:ec:9b:9e:57:66: 67:62:c0:f4:bd:dc:3c:f0:78:a7:e8:bf:7e:e3:e5:54:4b:ab: a6:d5:29:f9:d7:02:23:fb:ab:3e:31:a2:44:bd:02:64:22:3c: f1:b1:b8:1f:aa:c8:5a:b0:2f:87:99:6f:1f:6a:71:ef:0c:44: 7c:a9:a7:d6:64:2d:4c:d4:78:6b:43:51:e8:72:8d:4b:57:3c: 54:7b:4d:64:50:a3:a6:8a:78:bd:50:5b:06:e9:77:98:c5:dc: 78:7e:94:4a:8a:48:07:c5:ec:84:99:4a:90:93:4d:b3:02:85: d7:95:73:68:d0:ae:1d:dd:c4:d7:91:4c:85:38:1b:ed:fe:54: 3e:44:4e:d3:01:46:f7:1a:2e:f7:3c:a3:9d:3f:b4:05:07:ff: 0b:9e:fa:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLboA9G3avd2FJq3yVcRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj ZGQ5ZDAwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD EyhhMGEyYWU4YTVkMjIzNWJiZmM0M2FlMjRkYzlmZmU4MTFkYmQzYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJcAJnQGzEVvaqvwaFovkx1WCGJ 56PaGDBfyAnmxSlstYxe0DnMitZ99EMLxCoMCVp4ztExnIYSQYBqMcRsGw54GFmf TpD4Q4CYyLIzYxoz5yK1+Cs62clqmIHGABGGJXvG5jO2yGI7b+ECOZv8WbAnqWBT jYnZ8F7d9uv9nADpopxkSVDEOYiT5kHTGH7otOfVY1Of05qvpF855Q2aW5CyloWt GP7EMhVu8J/ZgJvNOOj/HM+fbN9vTGGXgEurUTwSrxdeWuw09A5KEPka+aTY2WOe AYJdiLLauvdHOTDZOLq85ADL4w39UCy1DnfnJrSZhgM9yvHiDxXO691k7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCiropdIjW7/EOuJNyf/oEdvTvpMB8GA1UdIwQY MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2 LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNTMADNz Hac5QZ9S2XABLU6vmIIE9NDXeWqsbyqcQnmChYR0p+aQohMutey4EVZDNAZCYYip o0NLoZwscDVVrsjma/RgIVQM3hUbqImYHu0hU3G7ujaupH2AlMO4QSu8vWVe+E5q /OybnldmZ2LA9L3cPPB4p+i/fuPlVEurptUp+dcCI/urPjGiRL0CZCI88bG4H6rI WrAvh5lvH2px7wxEfKmn1mQtTNR4a0NR6HKNS1c8VHtNZFCjpop4vVBbBul3mMXc eH6USopIB8XshJlKkJNNswKF15VzaNCuHd3E15FMhTgb7f5UPkRO0wFG9xou9zyj nT+0BQf/C576Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:56 2025 by rpki-client