This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json) Hash identifier: nXXo5hBabwxwxd2Giq0yH1PPOYWprEDmBHIfZYq2D/w= Subject key identifier: A7:78:68:34:26:FB:92:FF:A0:00:BD:C0:06:51:C6:E9:C3:DD:32:3B Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Certificate serial: 019B262D4CF88DA91B1CA3003E88C35B7BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft Manifest number: 0BB5 Signing time: Tue 16 Dec 2025 08:01:01 +0000 Manifest this update: Tue 16 Dec 2025 08:01:01 +0000 Manifest next update: Wed 17 Dec 2025 08:01:01 +0000 Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: dmyBRLlYhUleUNkhP8rT8rYja8OQYDV9EG8oGpYjq8g=) 2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:4c:f8:8d:a9:1b:1c:a3:00:3e:88:c3:5b:7b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Validity Not Before: Dec 16 08:01:01 2025 GMT Not After : Dec 17 08:01:01 2025 GMT Subject: CN=a778683426fb92ffa000bdc00651c6e9c3dd323b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:5b:7c:e3:39:d0:9c:82:4d:10:39:91:35: 10:6a:9f:e4:86:52:73:f4:26:d3:e5:16:24:60:f6: eb:09:63:30:96:22:28:ed:47:cb:2e:a4:ae:d3:5e: 2a:e5:08:01:7e:14:8b:af:f3:a3:b0:d5:f6:9b:6f: f4:90:db:75:7c:a9:ef:4a:47:d6:0a:20:e5:bb:6a: 83:1c:43:b2:b0:c5:b1:dd:36:b1:4e:fa:92:40:34: f5:a5:e8:d0:5a:e5:b6:3e:70:7e:ec:21:bc:bf:ce: 48:7c:9b:92:16:97:ff:17:80:a6:be:aa:29:d7:08: b2:23:b6:5c:ac:0b:f2:0e:dc:9e:b9:85:df:dd:f7: cc:28:26:a1:44:f7:29:21:95:90:58:31:80:a7:eb: 94:33:14:35:d5:9d:f2:e8:15:43:c4:5e:39:93:76: 85:db:8b:e3:4b:dc:f0:93:a9:ac:48:1c:5a:6d:08: 2d:8a:50:b4:4b:fa:df:7e:b7:73:64:20:76:df:ef: e4:da:ef:2a:73:22:ea:91:d7:b5:a3:e6:66:03:7c: 99:b3:4e:00:93:a4:bd:b5:57:fc:1e:43:ba:82:eb: cd:63:a4:87:70:ce:ac:30:c4:09:02:5b:73:63:73: ec:8e:77:c3:06:a5:19:9f:af:7b:6f:03:8f:c5:26: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:78:68:34:26:FB:92:FF:A0:00:BD:C0:06:51:C6:E9:C3:DD:32:3B X509v3 Authority Key Identifier: keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:da:66:96:37:d1:83:0b:fe:76:51:da:51:ee:ce:25:e8:79: 2a:08:a1:48:6a:6a:c0:9e:64:65:67:8d:ef:27:9d:f1:58:17: 1e:04:5a:a8:5e:e4:90:2a:cc:50:e0:92:08:bb:e8:46:65:0e: e7:48:0e:49:07:19:23:ce:72:12:71:ee:11:23:61:41:29:d2: 35:3a:de:1c:2d:f6:d4:67:37:ea:bd:14:5d:eb:d1:c4:a7:00: cb:a0:72:cc:11:5f:f1:38:65:b0:46:b7:f1:8a:71:5a:e3:fb: e8:94:6e:b1:d5:74:a3:93:2d:a8:e3:4e:11:e5:a6:6e:94:c7: 89:b5:0f:02:2c:c4:a7:3a:17:c8:74:c6:43:c1:e1:d0:a8:be: 8f:ad:62:6d:20:50:60:20:25:11:de:f2:40:94:37:d1:51:c2: 5d:cf:2b:b8:75:b1:ed:3f:d1:7c:68:23:5c:05:c9:33:bb:b3: 83:3f:8d:cf:48:cc:59:c9:71:19:46:84:c4:2a:84:01:5e:62: 13:69:83:84:5d:fa:b9:27:be:3a:1f:c3:a5:e8:06:4d:0c:d4: bb:dc:ba:e0:49:91:e9:14:66:e3:7f:c9:89:ed:47:19:a3:5d: 10:f0:0c:10:cb:ff:f8:93:7b:32:3d:ba:00:ca:00:5c:e7:01: 8c:86:23:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLUz4jakbHKMAPojDW3upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3 ZDFlMTcwHhcNMjUxMjE2MDgwMTAxWhcNMjUxMjE3MDgwMTAxWjAzMTEwLwYDVQQD EyhhNzc4NjgzNDI2ZmI5MmZmYTAwMGJkYzAwNjUxYzZlOWMzZGQzMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJbfOM50JyCTRA5kTUQap/khlJz 9CbT5RYkYPbrCWMwliIo7UfLLqSu014q5QgBfhSLr/OjsNX2m2/0kNt1fKnvSkfW CiDlu2qDHEOysMWx3TaxTvqSQDT1pejQWuW2PnB+7CG8v85IfJuSFpf/F4Cmvqop 1wiyI7ZcrAvyDtyeuYXf3ffMKCahRPcpIZWQWDGAp+uUMxQ11Z3y6BVDxF45k3aF 24vjS9zwk6msSBxabQgtilC0S/rffrdzZCB23+/k2u8qcyLqkde1o+ZmA3yZs04A k6S9tVf8HkO6guvNY6SHcM6sMMQJAltzY3PsjnfDBqUZn697bwOPxSaCLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd4aDQm+5L/oAC9wAZRxunD3TI7MB8GA1UdIwQY MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNpmljfR gwv+dlHaUe7OJeh5KgihSGpqwJ5kZWeN7yed8VgXHgRaqF7kkCrMUOCSCLvoRmUO 50gOSQcZI85yEnHuESNhQSnSNTreHC321Gc36r0UXevRxKcAy6ByzBFf8ThlsEa3 8YpxWuP76JRusdV0o5MtqONOEeWmbpTHibUPAizEpzoXyHTGQ8Hh0Ki+j61ibSBQ YCAlEd7yQJQ30VHCXc8ruHWx7T/RfGgjXAXJM7uzgz+Nz0jMWclxGUaExCqEAV5i E2mDhF36uSe+Oh/DpegGTQzUu9y64EmR6RRm43/Jie1HGaNdEPAMEMv/+JN7Mj26 AMoAXOcBjIYj/Q== -----END CERTIFICATE-----Generated at Tue Dec 16 11:02:17 2025 by rpki-client