This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json) Hash identifier: iyVRm1Z/xt8jcSUwR2OGGQpil1Vq+ygxzJUt7vO0nho= Subject key identifier: BB:A2:E3:54:64:DF:F2:FF:76:9E:E7:AE:38:A7:C5:E6:7B:51:DC:54 Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019AF23FF288E0908585EF24DEF3DC08A1D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft Manifest number: 30 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: A_0P_wYc_OEllR0zbsxJlPKyFvw.roa (hash: msjGR0Il4I4n4cOz691q2AapFwK62zADiANHUiiJFWI=) 2: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: 0M5WES9O9NCz8robtEXUo6vPWPfiVbnbdrMTHtFoOBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f2:88:e0:90:85:85:ef:24:de:f3:dc:08:a1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=bba2e35464dff2ff769ee7ae38a7c5e67b51dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:3e:6e:99:a5:8f:14:21:d1:1a:a7:5c:77: 16:c0:27:75:3d:d6:0d:04:31:5d:4a:ec:f5:3d:69: bb:bd:9e:1a:6a:20:29:63:e1:5a:7a:e3:a8:55:82: 2b:42:91:4b:cb:3e:51:00:c9:2f:e5:6c:44:c9:b6: 3c:ab:5f:1f:f1:d2:91:bb:d1:1f:ea:fc:74:d4:2c: 9c:70:61:37:8c:79:d2:36:8b:03:54:9a:df:4f:f7: dd:01:66:17:11:d7:1f:0d:5d:e4:d6:8f:fb:f1:c7: dd:02:4a:19:f7:34:fa:b6:2c:44:f0:a9:d7:85:6b: b9:67:69:43:32:46:c0:1a:e1:c7:02:bc:4c:91:d1: 6a:7f:fe:f1:e8:14:ac:99:e7:3f:05:c8:03:b9:13: c2:ac:48:52:2a:93:be:af:05:77:c8:92:c1:84:17: 44:6e:b6:3d:1e:cf:db:ce:6d:bf:fe:b3:a3:4d:0d: 57:8c:4e:ee:fc:2f:c6:f5:c5:bb:5b:2d:56:4f:44: 0d:50:f1:f1:6f:5d:67:81:bf:95:db:63:d4:40:ec: 11:f4:f9:ed:24:ba:3e:36:28:e3:73:79:99:c8:33: 90:4e:cd:bd:92:57:74:5e:26:60:f9:3b:da:45:3d: 77:56:9c:80:70:95:6d:79:b3:7c:ce:53:e7:5a:d7: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A2:E3:54:64:DF:F2:FF:76:9E:E7:AE:38:A7:C5:E6:7B:51:DC:54 X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9e:19:78:7f:f5:ac:68:8a:20:31:11:20:74:40:65:0e:fa: a7:a5:be:54:07:4d:9d:2b:69:ac:a4:95:84:32:0e:b9:40:19: ef:4f:0f:41:09:51:ad:25:6a:fb:35:81:f0:36:f9:37:23:ba: cf:d3:ff:3e:53:d6:8c:47:cd:08:54:8c:8b:65:ab:b9:fc:17: f2:50:a9:18:d7:35:26:8b:9f:d9:b8:21:a7:0e:af:e8:8c:e3: 02:f7:fe:05:ec:e0:83:93:e6:6f:88:ab:c6:0e:3c:e9:14:41: 55:e2:91:12:e8:06:12:e0:d5:73:fd:4d:39:d8:ec:14:ae:7a: 64:7f:9b:cb:58:3e:6a:8c:1f:26:82:c6:76:95:c1:50:e1:c0: 7a:11:7b:f5:85:24:04:8e:ca:54:bf:42:d3:5f:1f:e0:08:71: 58:81:c2:c7:e9:72:45:57:4d:fe:95:8a:41:41:00:51:33:15: cd:54:18:38:b0:6c:60:d7:7e:bf:35:bf:82:1d:02:8c:cc:fd: 59:d7:54:e2:4b:41:fb:22:eb:84:6e:16:44:ab:61:33:6c:24: bf:be:27:9a:91:f6:ae:f1:68:2e:de:df:3d:7a:43:7a:96:79: ef:9b:84:b1:ed:30:72:23:bc:f3:91:2a:df:9b:f4:d2:6a:a4: 8b:41:b2:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/KI4JCFhe8k3vPcCKHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhiYmEyZTM1NDY0ZGZmMmZmNzY5ZWU3YWUzOGE3YzVlNjdiNTFkYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJY+bpmljxQh0RqnXHcWwCd1PdYN BDFdSuz1PWm7vZ4aaiApY+FaeuOoVYIrQpFLyz5RAMkv5WxEybY8q18f8dKRu9Ef 6vx01CyccGE3jHnSNosDVJrfT/fdAWYXEdcfDV3k1o/78cfdAkoZ9zT6tixE8KnX hWu5Z2lDMkbAGuHHArxMkdFqf/7x6BSsmec/BcgDuRPCrEhSKpO+rwV3yJLBhBdE brY9Hs/bzm2//rOjTQ1XjE7u/C/G9cW7Wy1WT0QNUPHxb11ngb+V22PUQOwR9Pnt JLo+Nijjc3mZyDOQTs29kld0XiZg+TvaRT13VpyAcJVtebN8zlPnWtdd4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLui41Rk3/L/dp7nrjinxeZ7UdxUMB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq54ZeH/1 rGiKIDERIHRAZQ76p6W+VAdNnStprKSVhDIOuUAZ708PQQlRrSVq+zWB8Db5NyO6 z9P/PlPWjEfNCFSMi2WrufwX8lCpGNc1Jouf2bghpw6v6IzjAvf+Bezgg5Pmb4ir xg486RRBVeKREugGEuDVc/1NOdjsFK56ZH+by1g+aowfJoLGdpXBUOHAehF79YUk BI7KVL9C018f4AhxWIHCx+lyRVdN/pWKQUEAUTMVzVQYOLBsYNd+vzW/gh0CjMz9 WddU4ktB+yLrhG4WRKthM2wkv74nmpH2rvFoLt7fPXpDepZ575uEse0wciO885Eq 35v00mqki0GyJg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:50 2025 by rpki-client