This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: VPwV+u1Gdfh/OQaH8OcpDRQp8uiG6UTvr1q6Z67Vk0c=
Subject key identifier: 4C:7F:00:4C:61:A2:EF:40:D4:C6:C0:ED:33:AC:85:9C:55:A1:B3:96
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019AF19ACDF0805B449A2EA167E33CEDE116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1772
Signing time: Sat 06 Dec 2025 03:00:45 +0000
Manifest this update: Sat 06 Dec 2025 03:00:45 +0000
Manifest next update: Sun 07 Dec 2025 03:00:45 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: IOzN71KKqn0D78G6g3dbxSWBFFAwCTNeXWrVaC2oj4o=)
2: g5O-sJkZnNA68mGJtGD2tO2hre0.roa (hash: w9zj7kKoXrvbGgUWDgKatfpf3enPGG2iU/OVqfPxOKA=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:cd:f0:80:5b:44:9a:2e:a1:67:e3:3c:ed:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Dec 6 03:00:45 2025 GMT
Not After : Dec 7 03:00:45 2025 GMT
Subject: CN=4c7f004c61a2ef40d4c6c0ed33ac859c55a1b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:71:1d:c9:60:44:c5:a6:32:c1:68:d2:df:
31:9e:d7:31:56:f6:86:5f:51:8c:23:b4:99:cc:fd:
1f:aa:68:c3:b8:ed:53:e7:ef:a0:c2:ac:9a:da:4e:
ac:53:c8:54:a7:77:0c:90:69:50:d8:22:f5:0f:7a:
30:1f:c5:27:f3:f7:51:4b:75:2a:1b:0b:98:07:c2:
7c:88:9f:26:ba:21:65:9b:1f:4a:d6:09:0d:eb:07:
38:c3:40:bb:26:ce:9f:07:01:87:db:6c:85:14:8a:
e0:a3:87:51:b3:5e:dc:cd:bb:de:73:13:50:75:63:
9d:f0:ee:cc:49:32:81:1e:55:79:4d:50:6f:7e:8b:
1f:b0:60:1a:9b:05:02:f6:31:3b:f4:bf:c0:11:6e:
a3:79:6e:c2:7f:30:da:48:0c:86:62:69:44:4e:7e:
e6:72:08:65:81:3d:64:03:fe:bb:63:c9:da:49:20:
c8:62:ea:e5:00:19:1a:b9:80:14:ae:0b:d0:2f:e5:
36:62:3a:b1:a5:fa:0b:b8:f1:52:ca:75:d7:f4:dd:
97:97:cc:f5:ef:23:1d:97:43:71:12:bc:25:f2:1c:
71:07:05:c7:ba:6b:0d:54:64:ee:14:15:ce:54:cf:
d8:b6:7e:82:04:36:c2:08:2e:70:c3:d1:29:23:a8:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:00:4C:61:A2:EF:40:D4:C6:C0:ED:33:AC:85:9C:55:A1:B3:96
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:85:2d:73:55:bd:e1:a6:41:fb:62:1c:24:88:b1:81:59:
6e:d3:73:46:ca:a0:7d:1d:91:7d:3b:f9:d5:bf:da:86:64:1f:
0d:ac:e6:4a:e5:21:3a:48:b3:31:2f:41:42:96:66:e7:11:ce:
b5:2d:56:1e:fc:b5:d0:cc:7d:d8:b0:05:0b:b2:6e:80:2a:b1:
05:01:c5:dc:ca:ba:dc:47:ca:47:5a:06:62:f1:e2:85:e5:47:
1d:1e:c0:e1:15:97:46:d3:bc:b2:d8:7a:09:13:bb:62:c2:31:
60:53:cc:d9:14:46:a8:da:38:7a:77:2d:da:c2:a7:6d:9d:1d:
13:68:1a:3b:97:48:7b:19:1c:c6:c7:c9:cc:84:eb:fb:2f:70:
a0:e5:1a:19:aa:0d:77:a5:76:09:1e:d5:70:d5:77:92:aa:e0:
12:62:fc:97:05:3e:91:bc:d0:65:f4:f3:b0:0b:aa:85:24:78:
0e:64:28:81:01:0d:83:b8:90:b1:99:f2:ea:8b:e2:84:c3:4c:
26:61:d8:80:b2:23:6d:74:e4:36:4e:69:72:ef:f4:18:3c:ec:
9a:ad:24:e3:18:a3:11:21:c7:6e:17:84:22:0d:af:6e:df:91:
fb:4e:cc:21:23:bc:3a:75:1e:b8:d8:30:92:1d:24:2c:ac:e0:
26:13:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:59:55 2025 by rpki-client