This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json) Hash identifier: DS97JlSR6etEAUNAgvAqPSRGNDwJnTMTVy/LNrbK6ao= Subject key identifier: 50:41:33:6C:E5:98:F1:4E:E2:00:F5:EE:C0:4D:2D:5F:3F:DC:91:CD Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e Certificate serial: 019AF50B097B21DC63D557F122577968819D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft Manifest number: 03B0 Signing time: Sat 06 Dec 2025 19:02:12 +0000 Manifest this update: Sat 06 Dec 2025 19:02:12 +0000 Manifest next update: Sun 07 Dec 2025 19:02:12 +0000 Files and hashes: 1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=) 2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: lpsMwDU8xVaKFeQce0OISOQq6KpvrF2RDxCMPs5l1Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:09:7b:21:dc:63:d5:57:f1:22:57:79:68:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e Validity Not Before: Dec 6 19:02:12 2025 GMT Not After : Dec 7 19:02:12 2025 GMT Subject: CN=5041336ce598f14ee200f5eec04d2d5f3fdc91cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:d2:d8:5b:0f:76:4d:8b:d9:f1:38:ef:28: 52:38:ce:d1:9a:10:36:b6:ea:02:07:7b:da:8a:c4: 60:0e:92:95:83:b4:2f:b1:fe:ff:2e:d7:12:ff:61: e8:3b:5a:a4:9b:63:b2:82:94:12:6e:34:ac:2a:47: 35:9d:3c:97:3c:c1:08:66:7d:80:64:b2:12:70:38: d3:01:cf:23:cf:7b:00:50:c7:eb:16:f3:81:d8:21: 29:0f:c7:d3:22:30:f2:13:ef:3d:e9:98:1c:71:71: 7c:49:35:9f:3d:97:da:2b:8f:d7:c6:97:1d:c3:91: 8d:30:79:ac:07:85:a7:ab:76:e0:3b:fd:b4:65:fe: 9f:19:e4:91:d1:08:41:75:33:17:3e:3e:8e:49:3d: f7:ee:7a:72:19:6b:9f:45:94:4b:59:6e:e8:20:30: 1d:e8:af:15:c7:d5:4a:b4:8a:53:6c:c5:fe:d2:5c: 9e:de:5b:15:d9:81:e5:cf:77:e0:92:0c:51:05:4d: b0:ee:8d:a2:0c:55:66:6b:37:53:1f:66:15:f3:2e: 7c:72:2b:60:2a:c6:ea:c1:9c:44:1c:0f:d7:1f:6f: a9:a6:18:56:6a:f3:56:81:5a:89:61:61:53:b2:8e: b8:df:c1:b5:54:da:f1:63:63:04:e3:57:28:d4:b7: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:33:6C:E5:98:F1:4E:E2:00:F5:EE:C0:4D:2D:5F:3F:DC:91:CD X509v3 Authority Key Identifier: keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:5f:21:6e:24:c3:1d:0f:cb:01:72:f7:52:f3:58:e6:49: 41:fa:2e:b4:89:dc:ea:3d:91:48:9f:92:c5:4d:ca:cb:0b:f4: 12:2a:9b:c8:dd:d2:9a:0e:d6:82:fb:6f:b6:fa:bd:92:6d:c3: bc:bc:87:67:c8:49:df:78:2f:d0:b4:2a:ce:99:25:04:59:bf: 4e:45:52:1b:a2:d6:e1:05:ac:24:da:19:93:a4:61:e9:cb:34: 88:f4:bd:07:35:48:40:9c:4b:35:35:ce:c6:6c:ab:36:1a:6d: 69:91:1c:e6:1e:05:f5:d1:d0:51:c9:81:6c:1c:7c:2e:1a:92: 33:51:de:97:59:4c:46:ed:3e:d3:1a:89:96:93:c6:f7:ff:06: 92:a6:63:a6:45:c6:37:1f:16:ca:e8:37:86:23:43:13:9c:7f: 25:bf:fb:15:bc:13:4c:b0:b9:0f:b3:1c:43:49:23:e9:6f:2e: 65:a4:26:48:be:db:de:21:29:e6:fa:e7:05:b8:8f:e7:5e:25: 1f:48:5d:88:7e:bd:9f:13:89:5a:5c:96:83:cc:3d:ca:73:5a: 89:b7:35:7f:53:53:70:80:54:9c:d8:e8:d5:da:fe:21:17:40: 8f:00:f1:1b:63:5e:6a:91:6f:38:44:ca:9f:09:79:18:2b:95: 7b:bb:32:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cwl7Idxj1VfxIld5aIGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzhhOTgzY2Y0MzczYWE0OTc0OTg1YWIyMmQ1MTRjMGY0 ODFkMmUwHhcNMjUxMjA2MTkwMjEyWhcNMjUxMjA3MTkwMjEyWjAzMTEwLwYDVQQD Eyg1MDQxMzM2Y2U1OThmMTRlZTIwMGY1ZWVjMDRkMmQ1ZjNmZGM5MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKrS2FsPdk2L2fE47yhSOM7RmhA2 tuoCB3vaisRgDpKVg7Qvsf7/LtcS/2HoO1qkm2OygpQSbjSsKkc1nTyXPMEIZn2A ZLIScDjTAc8jz3sAUMfrFvOB2CEpD8fTIjDyE+896ZgccXF8STWfPZfaK4/Xxpcd w5GNMHmsB4Wnq3bgO/20Zf6fGeSR0QhBdTMXPj6OST337npyGWufRZRLWW7oIDAd 6K8Vx9VKtIpTbMX+0lye3lsV2YHlz3fgkgxRBU2w7o2iDFVmazdTH2YV8y58citg KsbqwZxEHA/XH2+pphhWavNWgVqJYWFTso6438G1VNrxY2ME41co1LfNlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBBM2zlmPFO4gD17sBNLV8/3JHNMB8GA1UdIwQY MBaAFG84qYPPQ3OqSXSYWrItUUwPSB0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQt YWY1YTU2NzczMmVmLzEvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQtYWY1YTU2NzczMmVm LzEvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwdfIW4k wx0PywFy91LzWOZJQfoutInc6j2RSJ+SxU3Kywv0EiqbyN3Smg7Wgvtvtvq9km3D vLyHZ8hJ33gv0LQqzpklBFm/TkVSG6LW4QWsJNoZk6Rh6cs0iPS9BzVIQJxLNTXO xmyrNhptaZEc5h4F9dHQUcmBbBx8LhqSM1Hel1lMRu0+0xqJlpPG9/8GkqZjpkXG Nx8Wyug3hiNDE5x/Jb/7FbwTTLC5D7McQ0kj6W8uZaQmSL7b3iEp5vrnBbiP514l H0hdiH69nxOJWlyWg8w9ynNaibc1f1NTcIBUnNjo1dr+IRdAjwDxG2NeapFvOETK nwl5GCuVe7syTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:55 2025 by rpki-client