This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json) Hash identifier: vAJNsYRQQFLKwrmqynqL/ZVoji3mjE1z5003LsHwmJc= Subject key identifier: 16:17:C3:B8:A3:38:E8:F9:DB:4D:EE:E9:EE:1D:24:3F:8D:95:C2:E1 Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Certificate serial: 019AF16472425C6B481A93431807A760EF80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: hWr2aIav7nIz6WbdFxcvkojjyEa2klR2K93LNSmQsLg=) 2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:72:42:5c:6b:48:1a:93:43:18:07:a7:60:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=1617c3b8a338e8f9db4deee9ee1d243f8d95c2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:50:cc:2a:ab:be:ef:8b:a0:26:b3:19:c8: d2:1e:a3:70:e7:37:d3:fa:35:75:2b:f3:fa:cc:68: 5f:5b:79:37:6e:f5:7e:c6:b4:3a:7c:c4:12:62:35: 37:4a:1b:18:8b:78:e7:2a:48:f0:d5:46:ac:87:fd: 74:e3:21:78:9d:b9:76:4a:b4:74:ec:47:43:16:f9: 40:8e:06:2c:40:88:cd:b8:93:22:f6:fa:c0:c8:62: f7:c3:9b:be:19:6f:c3:e3:03:4b:a1:60:dd:56:6e: a9:7e:0d:62:d5:1d:6b:57:43:1e:68:00:13:2a:85: 56:c2:dc:b4:4d:5f:65:ba:74:28:68:42:3a:15:95: bc:b1:8a:4c:7a:c2:75:84:98:84:89:de:64:6f:3e: d4:4e:41:cf:cd:07:03:e4:e4:9c:bd:47:c5:04:eb: 35:80:09:92:4d:6f:63:8c:f4:51:77:a3:86:c5:de: e1:00:31:13:65:60:8a:8c:81:8d:62:ee:e4:49:2d: df:59:20:fa:60:24:6e:d1:da:05:be:5a:28:47:50: 5e:42:35:13:fa:68:82:86:f0:35:88:3f:e7:2d:7e: ca:9a:3e:ed:80:ca:fc:fc:e7:55:2f:eb:63:6f:9c: 69:a9:e8:56:dd:77:e6:e5:00:d0:e0:85:48:6b:ea: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:C3:B8:A3:38:E8:F9:DB:4D:EE:E9:EE:1D:24:3F:8D:95:C2:E1 X509v3 Authority Key Identifier: keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c2:1f:3b:bc:d6:ae:d6:be:f2:d9:28:97:bb:82:0e:d3:f5: 1e:1a:22:ed:e8:2a:3b:12:3d:57:a1:ea:e7:14:7b:2a:4c:a8: 60:95:c3:5a:08:bf:95:b1:e7:8e:b2:18:92:2e:f5:ce:d2:0d: e1:f4:f8:11:4f:61:a7:1a:76:65:03:37:68:4e:4b:4b:ea:44: b8:5b:18:08:85:c3:57:d1:ae:2c:fa:42:e2:65:51:f4:11:66: b3:10:d1:29:90:21:71:99:98:cc:12:42:cd:8c:68:b4:85:fd: 2f:9e:db:ba:5b:3b:73:a0:4e:17:32:ca:47:9e:65:f9:a0:a3: a4:42:20:4f:4c:22:f8:79:26:2c:45:ff:67:b1:64:f4:3c:48: 79:a1:80:e4:fe:84:92:7e:54:63:99:b2:2b:ff:77:0d:cc:e9: 16:75:6b:4e:1c:a3:a2:ff:b5:14:e8:9c:fd:15:b0:b4:3a:44: a0:4a:05:c4:68:54:80:13:d7:88:27:72:bb:3b:d7:58:8c:be: 3d:03:8f:45:b6:52:8f:be:52:c4:7d:47:a6:c7:f4:05:d2:45: 06:11:b8:56:0c:8d:c6:5b:a0:f0:61:ac:45:6a:95:94:98:af: 4c:59:8f:8f:ef:4a:b2:0f:f7:99:ba:73:30:7d:57:2b:b2:50: d9:ea:e8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHJCXGtIGpNDGAenYO+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz NDdmZDEwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD EygxNjE3YzNiOGEzMzhlOGY5ZGI0ZGVlZTllZTFkMjQzZjhkOTVjMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1BQzCqrvu+LoCazGcjSHqNw5zfT +jV1K/P6zGhfW3k3bvV+xrQ6fMQSYjU3ShsYi3jnKkjw1Uash/104yF4nbl2SrR0 7EdDFvlAjgYsQIjNuJMi9vrAyGL3w5u+GW/D4wNLoWDdVm6pfg1i1R1rV0MeaAAT KoVWwty0TV9lunQoaEI6FZW8sYpMesJ1hJiEid5kbz7UTkHPzQcD5OScvUfFBOs1 gAmSTW9jjPRRd6OGxd7hADETZWCKjIGNYu7kSS3fWSD6YCRu0doFvlooR1BeQjUT +miChvA1iD/nLX7Kmj7tgMr8/OdVL+tjb5xpqehW3Xfm5QDQ4IVIa+riuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYXw7ijOOj5203u6e4dJD+NlcLhMB8GA1UdIwQY MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt YjZjYzRkNTcxMTdlLzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8IfO7zW rta+8tkol7uCDtP1Hhoi7egqOxI9V6Hq5xR7KkyoYJXDWgi/lbHnjrIYki71ztIN 4fT4EU9hpxp2ZQM3aE5LS+pEuFsYCIXDV9GuLPpC4mVR9BFmsxDRKZAhcZmYzBJC zYxotIX9L57buls7c6BOFzLKR55l+aCjpEIgT0wi+HkmLEX/Z7Fk9DxIeaGA5P6E kn5UY5myK/93DczpFnVrThyjov+1FOic/RWwtDpEoEoFxGhUgBPXiCdyuzvXWIy+ PQOPRbZSj75SxH1Hpsf0BdJFBhG4VgyNxlug8GGsRWqVlJivTFmPj+9Ksg/3mbpz MH1XK7JQ2ero6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:01 2025 by rpki-client