This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json) Hash identifier: v9kVWL+f153thnN8NDgsk+RfYcZM01tacxgqM0xaLh4= Subject key identifier: B8:EB:40:1E:D5:10:12:2E:7C:6F:05:53:FA:64:96:A1:ED:2A:A5:1E Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd Certificate serial: 019AF509D259C6D3C24CE8F55503F7291AC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:00:52 +0000 Manifest this update: Sat 06 Dec 2025 19:00:52 +0000 Manifest next update: Sun 07 Dec 2025 19:00:52 +0000 Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: FpTxU+BxU2jUGMqIw6x34Xioze1jogqpW2mb0Uc3o7U=) 2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d2:59:c6:d3:c2:4c:e8:f5:55:03:f7:29:1a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd Validity Not Before: Dec 6 19:00:52 2025 GMT Not After : Dec 7 19:00:52 2025 GMT Subject: CN=b8eb401ed510122e7c6f0553fa6496a1ed2aa51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:66:b0:51:5c:35:8b:1c:f6:73:f4:2a:f9: 26:95:b4:9b:dd:92:74:7d:85:19:2d:73:e1:72:2f: d0:a4:0c:eb:51:ac:06:e9:a6:5b:67:b6:16:31:8b: 9e:55:59:45:00:44:83:5c:52:c9:d7:35:66:18:55: 55:92:9e:1f:32:0a:12:6a:b7:1d:87:75:32:7d:e0: bd:a0:9d:0c:c8:b2:44:2f:6a:a5:39:54:96:5a:5a: e8:e5:a4:22:b3:46:45:32:11:89:de:53:aa:c1:d3: 65:04:77:bf:70:b1:5b:2f:6d:5a:b9:c9:c3:97:dd: e9:63:fd:1e:52:da:78:da:0e:b0:67:a1:0e:9e:7c: db:66:04:bc:a6:5c:07:39:3d:00:84:b0:08:ce:f1: 21:7b:84:cb:be:ac:da:f7:26:d5:c8:3e:70:40:30: 2b:c6:ee:71:7a:35:79:74:cd:4d:ab:bb:0c:59:cf: 8f:dc:d0:d5:3e:b1:69:83:21:77:c9:a6:01:b5:e5: 2c:7b:61:47:30:95:85:0b:1a:b8:bb:27:40:9c:97: d2:c0:47:06:b6:1c:cc:3e:ff:ce:b7:d1:56:e3:58: 4b:1b:bb:d9:6f:ec:ac:14:bc:61:32:37:6d:d3:cd: 3c:9e:ab:ac:b3:13:4c:dd:26:f7:6c:bd:8d:84:e0: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:40:1E:D5:10:12:2E:7C:6F:05:53:FA:64:96:A1:ED:2A:A5:1E X509v3 Authority Key Identifier: keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:66:89:fc:c3:d9:8e:e6:f2:7c:b6:9b:0c:50:5a:3e:e4:3f: 38:75:b8:2f:df:3e:28:df:a1:49:7c:47:b8:02:c1:1c:9f:b3: a6:e7:c5:51:3e:46:70:75:07:78:c0:99:80:d0:81:c6:14:06: 62:d1:12:15:58:b1:7a:8b:00:67:61:9a:90:e7:c0:9c:e6:1d: 38:b5:4f:3e:16:b1:99:8b:d9:87:09:3b:b6:18:d3:38:21:4f: de:e9:4c:be:d9:b3:75:94:d4:a3:5a:34:8d:79:95:bf:06:71: 57:68:57:a0:f8:98:35:df:69:39:1e:4d:3a:ae:10:00:eb:ee: 54:e5:0b:4a:44:ea:ac:73:90:dd:c0:31:e0:5a:00:7c:5f:bf: 77:5a:f4:81:08:34:13:9e:b9:d3:3f:e4:8c:db:e2:d6:58:62: 76:71:7d:ca:72:10:e3:4c:d4:22:2a:22:4b:9f:dc:50:c3:c5: 6d:6f:fd:53:82:f8:f9:ca:1d:2d:c7:38:62:84:53:6f:b4:3f: f7:33:bf:2b:35:53:68:58:58:62:45:cf:1e:f7:4a:cb:42:43: 72:a0:1d:63:b6:f2:f9:65:2d:6c:f5:93:b3:e3:a4:51:a0:19: 63:42:c9:f8:c4:63:97:2a:2b:29:af:4f:a8:7d:b0:a1:ee:82: 3a:77:f1:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdJZxtPCTOj1VQP3KRrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3 NDhlYmQwHhcNMjUxMjA2MTkwMDUyWhcNMjUxMjA3MTkwMDUyWjAzMTEwLwYDVQQD EyhiOGViNDAxZWQ1MTAxMjJlN2M2ZjA1NTNmYTY0OTZhMWVkMmFhNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAtmsFFcNYsc9nP0KvkmlbSb3ZJ0 fYUZLXPhci/QpAzrUawG6aZbZ7YWMYueVVlFAESDXFLJ1zVmGFVVkp4fMgoSarcd h3UyfeC9oJ0MyLJEL2qlOVSWWlro5aQis0ZFMhGJ3lOqwdNlBHe/cLFbL21aucnD l93pY/0eUtp42g6wZ6EOnnzbZgS8plwHOT0AhLAIzvEhe4TLvqza9ybVyD5wQDAr xu5xejV5dM1Nq7sMWc+P3NDVPrFpgyF3yaYBteUse2FHMJWFCxq4uydAnJfSwEcG thzMPv/Ot9FW41hLG7vZb+ysFLxhMjdt0808nqussxNM3Sb3bL2NhOA2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjrQB7VEBIufG8FU/pklqHtKqUeMB8GA1UdIwQY MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt Njc5Y2YwMjEwZDQ5LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5 LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWaJ/MPZ jubyfLabDFBaPuQ/OHW4L98+KN+hSXxHuALBHJ+zpufFUT5GcHUHeMCZgNCBxhQG YtESFVixeosAZ2GakOfAnOYdOLVPPhaxmYvZhwk7thjTOCFP3ulMvtmzdZTUo1o0 jXmVvwZxV2hXoPiYNd9pOR5NOq4QAOvuVOULSkTqrHOQ3cAx4FoAfF+/d1r0gQg0 E5650z/kjNvi1lhidnF9ynIQ40zUIioiS5/cUMPFbW/9U4L4+codLcc4YoRTb7Q/ 9zO/KzVTaFhYYkXPHvdKy0JDcqAdY7by+WUtbPWTs+OkUaAZY0LJ+MRjlyorKa9P qH2woe6COnfxKg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:42 2025 by rpki-client