This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json) Hash identifier: +vZTj8jNXiTHuijifaVL6lLQjzmyeFWGouuYKSQfmB4= Subject key identifier: 3D:D6:A0:59:C4:DD:9C:7A:79:D4:16:14:56:05:B3:9C:D9:E4:59:99 Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Certificate serial: 019AF20916DA69B20685DA60E39C6AB6F83A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft Manifest number: 0B9A Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: CtvN8FwLM1Ka1fZFbg+qMdWQYHhoRjsgSPApIoWS2Wk=) 2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:da:69:b2:06:85:da:60:e3:9c:6a:b6:f8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=3dd6a059c4dd9c7a79d416145605b39cd9e45999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:cd:8f:a2:41:f6:e5:36:32:c8:f6:75:76: 00:76:98:62:b6:22:bf:39:55:f2:e6:e1:75:80:ec: a8:73:63:cd:de:a4:a7:72:1d:2b:b2:5f:c9:9d:34: 6d:ec:80:6c:98:a8:5f:d6:67:01:03:8f:fd:c3:93: 2b:02:e5:89:5c:79:74:cc:d3:77:12:14:dd:ae:19: 37:8d:64:76:29:37:1e:4c:20:7b:cd:d6:ec:be:43: 22:00:37:27:5d:f3:ee:b9:d1:fb:f2:d6:77:3a:18: fd:8f:c0:2c:6a:72:ee:75:34:9b:c5:4d:19:94:47: 8a:5a:89:52:7f:dd:c7:f0:07:21:3c:2a:0c:b4:3b: 7e:26:7f:76:7f:19:04:32:c9:6f:47:d7:fd:04:ca: 81:4b:ca:c6:46:a5:b0:e3:08:c2:74:ac:dc:2e:2b: ea:97:63:43:1f:45:03:cb:3f:e7:f6:d2:e1:35:4a: 13:55:cb:be:ae:91:3e:a6:6b:f1:93:4a:fe:25:bc: 6d:3e:2e:c1:ca:d9:47:57:9e:45:c2:a4:0a:21:f4: 0d:0a:fa:4b:d5:fd:5e:29:ba:66:7f:cb:12:43:db: d7:9b:f4:1b:55:1f:8d:57:5e:a7:5d:43:c6:5c:88: 2a:6d:9b:c0:97:6e:44:5f:0e:fe:79:f7:16:1e:7c: 23:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D6:A0:59:C4:DD:9C:7A:79:D4:16:14:56:05:B3:9C:D9:E4:59:99 X509v3 Authority Key Identifier: keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:29:24:6f:d8:28:cd:ba:01:57:f4:63:2e:fc:cb:0a:0b:32: 51:fd:44:d3:32:36:61:a9:48:c9:4f:fa:5a:89:e7:43:27:2a: b2:d4:da:2e:eb:6e:fa:57:25:b2:6a:9f:6d:5b:8c:fb:9a:7c: b7:c1:6c:1b:46:ae:61:13:d7:ab:aa:f8:6b:c8:1f:83:02:2c: 7b:f2:68:84:2e:fa:6a:59:63:00:87:1d:4a:e2:31:eb:18:61: 50:96:0e:56:e7:9b:4a:e8:c8:2b:bf:6e:72:eb:ff:8d:e4:9f: d1:6e:d7:4d:a4:7d:65:c5:59:f3:e3:16:18:71:fe:3c:98:b6: 6b:c1:7d:60:65:fe:2c:14:91:52:de:94:41:49:10:9c:28:70: e8:59:8c:2a:03:ba:bf:37:2e:e1:b7:6c:25:69:1d:98:5a:29: 17:96:5e:e2:9f:57:9c:ec:80:5d:d4:10:28:36:36:a3:d9:26: c1:42:37:ed:c2:57:73:3d:e2:fa:0f:e9:f0:61:d0:49:46:90: 7b:3b:f2:62:ba:05:be:64:5e:fe:14:9c:3b:bc:34:f2:36:f0: 45:76:9b:a3:ac:1f:e4:4b:4f:f1:33:e3:53:71:39:56:87:67: a6:45:ee:34:e9:fa:76:4f:8d:36:98:e0:bf:3f:47:bc:34:8a: 9d:92:ce:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRbaabIGhdpg45xqtvg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3 ZDFlMTcwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD EygzZGQ2YTA1OWM0ZGQ5YzdhNzlkNDE2MTQ1NjA1YjM5Y2Q5ZTQ1OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKrNj6JB9uU2Msj2dXYAdphitiK/ OVXy5uF1gOyoc2PN3qSnch0rsl/JnTRt7IBsmKhf1mcBA4/9w5MrAuWJXHl0zNN3 EhTdrhk3jWR2KTceTCB7zdbsvkMiADcnXfPuudH78tZ3Ohj9j8AsanLudTSbxU0Z lEeKWolSf93H8AchPCoMtDt+Jn92fxkEMslvR9f9BMqBS8rGRqWw4wjCdKzcLivq l2NDH0UDyz/n9tLhNUoTVcu+rpE+pmvxk0r+JbxtPi7BytlHV55FwqQKIfQNCvpL 1f1eKbpmf8sSQ9vXm/QbVR+NV16nXUPGXIgqbZvAl25EXw7+efcWHnwjUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3WoFnE3Zx6edQWFFYFs5zZ5FmZMB8GA1UdIwQY MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZykkb9go zboBV/RjLvzLCgsyUf1E0zI2YalIyU/6WonnQycqstTaLutu+lclsmqfbVuM+5p8 t8FsG0auYRPXq6r4a8gfgwIse/JohC76alljAIcdSuIx6xhhUJYOVuebSujIK79u cuv/jeSf0W7XTaR9ZcVZ8+MWGHH+PJi2a8F9YGX+LBSRUt6UQUkQnChw6FmMKgO6 vzcu4bdsJWkdmFopF5Ze4p9XnOyAXdQQKDY2o9kmwUI37cJXcz3i+g/p8GHQSUaQ ezvyYroFvmRe/hScO7w08jbwRXabo6wf5EtP8TPjU3E5VodnpkXuNOn6dk+NNpjg vz9HvDSKnZLOYg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:21 2025 by rpki-client