This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json) Hash identifier: D7v5H4E9gUCrvu86ELitoHrgbgFgkH9c07RAsOBk2bU= Subject key identifier: C4:6E:8F:8B:52:19:74:EF:DD:0F:52:2D:DD:D6:1E:61:64:56:91:1D Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Certificate serial: 019AF19B3B1BFAF3918946A43B310B9FBAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: K153rEfGSz6O9qJcXawuQH1CA14lJy4FzExd+lat1EE=) 2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3b:1b:fa:f3:91:89:46:a4:3b:31:0b:9f:ba:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=c46e8f8b521974efdd0f522dddd61e616456911d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:0e:e2:27:64:13:e9:3c:b8:b5:2b:26:ad: ff:90:92:4e:d7:1e:16:6e:2f:56:c1:55:88:3e:84: cc:ea:8c:30:53:79:62:2e:a4:69:e4:4e:5c:48:d6: ea:b8:72:60:d8:23:0b:bd:7c:bd:5b:da:fe:0b:19: 3b:b0:25:35:8a:5d:de:83:8a:21:3f:fe:bc:59:d8: a4:46:74:fe:7f:14:9a:95:2d:1f:17:02:ec:5c:a9: 12:3f:c7:5e:b9:1a:65:b7:20:e5:fa:a4:ba:87:fa: dd:4f:0b:39:e8:56:67:7a:f6:c6:3b:64:91:e4:a6: 5a:4a:f2:59:8d:6b:39:06:4a:f3:e0:eb:a4:f1:10: 60:74:45:d6:ab:ec:5a:01:84:e5:47:b8:0b:8d:c4: 86:1a:35:78:de:73:70:41:35:3e:db:a0:92:53:be: 71:ae:87:e2:1f:b4:a3:37:95:56:15:74:2d:b1:29: 1f:0e:5e:ea:79:21:7f:f0:06:cd:68:f7:b7:0a:48: 2a:d2:44:9a:e6:2c:96:8c:5c:8d:eb:b9:cf:ae:0e: 07:80:9f:6c:84:db:36:1b:90:56:f7:2c:d2:6e:e2: 48:08:f6:e9:d3:c3:38:98:7a:d9:15:60:5b:bb:29: b7:89:cd:f3:ff:f7:62:0a:c0:87:0a:e1:ab:e2:4f: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6E:8F:8B:52:19:74:EF:DD:0F:52:2D:DD:D6:1E:61:64:56:91:1D X509v3 Authority Key Identifier: keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bc:fb:10:32:fc:29:9a:ec:a5:6f:fb:21:e5:98:86:fd:2f: 9a:a3:74:45:13:9b:b9:89:71:3e:41:b3:21:03:ce:33:82:2d: 97:6a:4f:ba:55:c0:2f:9a:e7:11:64:bd:80:e7:fd:e9:bf:b5: 53:a5:a3:2d:68:60:db:9c:7e:85:73:b4:4b:48:a5:7d:82:26: 69:74:c5:3f:f9:cb:2f:cd:d3:1e:e3:d0:c5:67:73:c2:ce:59: 47:31:84:33:ea:35:0c:1d:69:92:d2:4a:d7:2c:db:f1:e3:e8: 56:0d:fd:ef:db:9d:0d:4c:2f:e2:d7:05:de:cf:5b:25:b9:0b: 76:1b:43:3a:d2:d0:d8:28:7e:ef:ce:2a:0c:42:b6:c6:16:74: a0:59:96:25:69:82:b8:db:1c:02:0e:1c:d1:4c:31:01:1f:0b: af:27:1a:c0:2b:26:79:3d:ac:a0:6a:5d:b3:0c:ad:34:29:7d: 5f:65:2f:0b:75:ed:75:a3:42:a7:47:4b:56:fc:ff:89:27:7b: f0:97:26:b4:38:7c:c1:94:96:ef:df:92:6b:27:e5:a3:0a:83: f6:e1:89:60:31:c2:19:2c:e6:e5:d1:ba:93:47:1c:90:11:ff: e0:d3:59:aa:78:13:c0:8b:ea:32:86:c4:18:30:27:7b:69:3a: c8:5b:54:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzsb+vORiUakOzELn7rzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2 YWU3YzgwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EyhjNDZlOGY4YjUyMTk3NGVmZGQwZjUyMmRkZGQ2MWU2MTY0NTY5MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAracO4idkE+k8uLUrJq3/kJJO1x4W bi9WwVWIPoTM6owwU3liLqRp5E5cSNbquHJg2CMLvXy9W9r+Cxk7sCU1il3eg4oh P/68WdikRnT+fxSalS0fFwLsXKkSP8deuRpltyDl+qS6h/rdTws56FZnevbGO2SR 5KZaSvJZjWs5Bkrz4Ouk8RBgdEXWq+xaAYTlR7gLjcSGGjV43nNwQTU+26CSU75x rofiH7SjN5VWFXQtsSkfDl7qeSF/8AbNaPe3Ckgq0kSa5iyWjFyN67nPrg4HgJ9s hNs2G5BW9yzSbuJICPbp08M4mHrZFWBbuym3ic3z//diCsCHCuGr4k8j+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRuj4tSGXTv3Q9SLd3WHmFkVpEdMB8GA1UdIwQY MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5 LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrz7EDL8 KZrspW/7IeWYhv0vmqN0RRObuYlxPkGzIQPOM4Itl2pPulXAL5rnEWS9gOf96b+1 U6WjLWhg25x+hXO0S0ilfYImaXTFP/nLL83THuPQxWdzws5ZRzGEM+o1DB1pktJK 1yzb8ePoVg3979udDUwv4tcF3s9bJbkLdhtDOtLQ2Ch+784qDEK2xhZ0oFmWJWmC uNscAg4c0UwxAR8LrycawCsmeT2soGpdswytNCl9X2UvC3XtdaNCp0dLVvz/iSd7 8JcmtDh8wZSW79+SayflowqD9uGJYDHCGSzm5dG6k0cckBH/4NNZqngTwIvqMobE GDAne2k6yFtUSw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:04 2025 by rpki-client