This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json) Hash identifier: TGCjIrjPCWs8ZMDyr012L/+itZ4CuxuBTk1k4af+rY0= Subject key identifier: 44:CD:D7:51:01:3B:C4:58:34:0E:3C:13:C8:85:48:22:4F:C6:06:42 Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Certificate serial: 019AF0BF794001400D719F9477E63C55993E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=) 2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: YnyBu8SEU1+O+lcUbqP3UGZlrlcGChzTiKE4F13ZuNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:79:40:01:40:0d:71:9f:94:77:e6:3c:55:99:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=44cdd751013bc458340e3c13c88548224fc60642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:22:a9:0d:ad:22:d1:96:d5:b1:c3:90:bd: ef:15:ba:1a:cd:f1:5c:1c:00:af:da:ad:3e:84:05: 6f:16:0a:60:69:52:02:4f:b7:8d:0d:7e:92:b0:d8: 26:57:dc:8d:82:38:0e:f3:43:5a:a3:6a:a0:3d:78: 28:b0:05:cb:66:37:ba:a7:f6:0b:a2:3f:53:53:d2: ba:0f:e1:3a:1f:67:e0:6d:69:58:f1:a4:7d:6b:f9: 0c:80:d0:e5:96:43:53:96:d5:05:cf:8c:6d:74:dd: 06:32:7c:f4:6e:1f:b4:c6:bd:e6:5b:2e:e6:a0:17: 96:ce:64:e1:0b:b0:b8:51:f7:4c:b2:16:5c:58:e5: c5:70:a8:6a:b6:d3:60:9f:28:7f:6b:2e:b2:c5:bd: a5:e9:45:fc:d1:00:c6:73:7e:ca:9b:e5:97:d4:c2: c6:2e:27:89:a9:06:24:67:ae:4a:a9:ca:f9:32:78: 50:d8:14:87:22:aa:4c:e1:da:02:88:8b:18:ed:bd: df:1c:11:bc:6a:14:6e:cc:0e:5b:c1:56:ab:1b:76: c6:06:fa:5c:de:3d:b5:25:74:ca:5e:08:9b:ab:6e: 13:ec:07:f1:d9:8f:1a:0b:e8:d7:78:39:06:ef:e9: ce:0e:b0:c3:2a:be:7f:c5:f8:5a:32:1d:b7:02:da: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CD:D7:51:01:3B:C4:58:34:0E:3C:13:C8:85:48:22:4F:C6:06:42 X509v3 Authority Key Identifier: keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:63:89:10:33:b2:fe:8a:32:86:d0:be:06:87:6b:93:cd:1f: c8:25:4f:6f:f9:2e:c1:fc:41:9d:a3:80:15:a6:ef:2f:8f:d3: c2:53:45:aa:ff:5a:42:e6:3b:5b:7a:d7:51:80:6c:b8:31:f8: a3:7d:f9:eb:50:61:5c:99:45:60:b3:2d:a2:49:ea:7b:aa:b3: 04:c4:7c:7d:39:c3:5c:bd:9a:22:b9:4c:06:2c:12:46:f1:9c: 82:64:a9:0c:43:1c:7f:0c:9f:32:a9:1b:2d:82:93:e1:18:b2: f2:a0:3f:2c:a7:6c:a3:56:3f:43:c3:c6:fc:c9:79:e0:d7:7a: 1e:57:f2:a7:f5:7d:e9:0c:6f:fe:83:bd:81:58:7b:b0:0c:ab: ce:3b:be:06:eb:a8:0f:8b:17:64:0a:31:66:ea:29:12:bd:a9: d5:21:ad:34:83:86:ed:77:db:d0:7c:62:9e:13:d3:f8:8e:f1: 1b:be:f4:ca:3e:09:2a:db:7b:c0:8f:f0:ad:f7:a9:07:3a:e6: 8c:2d:55:af:ff:70:f8:34:f9:9e:7d:64:3a:a1:9a:cb:8a:c0: 05:ab:ef:8f:39:e5:f9:8e:6f:c6:fd:c2:73:14:ac:f4:db:b1: 95:58:ae:a6:e4:da:1b:df:4d:bc:7f:d1:a5:de:f5:b2:27:16: 74:67:a4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3lAAUANcZ+Ud+Y8VZk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2 OTkwZjcwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD Eyg0NGNkZDc1MTAxM2JjNDU4MzQwZTNjMTNjODg1NDgyMjRmYzYwNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hgiqQ2tItGW1bHDkL3vFboazfFc HACv2q0+hAVvFgpgaVICT7eNDX6SsNgmV9yNgjgO80Nao2qgPXgosAXLZje6p/YL oj9TU9K6D+E6H2fgbWlY8aR9a/kMgNDllkNTltUFz4xtdN0GMnz0bh+0xr3mWy7m oBeWzmThC7C4UfdMshZcWOXFcKhqttNgnyh/ay6yxb2l6UX80QDGc37Km+WX1MLG LieJqQYkZ65Kqcr5MnhQ2BSHIqpM4doCiIsY7b3fHBG8ahRuzA5bwVarG3bGBvpc 3j21JXTKXgibq24T7Afx2Y8aC+jXeDkG7+nODrDDKr5/xfhaMh23AtrEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETN11EBO8RYNA48E8iFSCJPxgZCMB8GA1UdIwQY MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamOJEDOy /ooyhtC+Bodrk80fyCVPb/kuwfxBnaOAFabvL4/TwlNFqv9aQuY7W3rXUYBsuDH4 o33561BhXJlFYLMtoknqe6qzBMR8fTnDXL2aIrlMBiwSRvGcgmSpDEMcfwyfMqkb LYKT4Riy8qA/LKdso1Y/Q8PG/Ml54Nd6Hlfyp/V96Qxv/oO9gVh7sAyrzju+Buuo D4sXZAoxZuopEr2p1SGtNIOG7Xfb0HxinhPT+I7xG770yj4JKtt7wI/wrfepBzrm jC1Vr/9w+DT5nn1kOqGay4rABavvjznl+Y5vxv3CcxSs9NuxlViupuTaG99NvH/R pd71sicWdGekzw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:55 2025 by rpki-client