This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft File: bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json) Hash identifier: VftM2nrr7DkiCycetStaAN4OntAroqr7/czSED5v/QU= Subject key identifier: 63:31:B7:5B:C1:3C:C8:82:B0:C0:78:27:6D:50:89:D3:18:6B:15:7D Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8 Certificate issuer: /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8 Certificate serial: 019AF23FDFB67A89691893717E3C909D2B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=) 2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: YPbEfzToAKudp3kgKoEy7dqdr0/kL0jsmcKSDP5Dwdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:df:b6:7a:89:69:18:93:71:7e:3c:90:9d:2b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=6331b75bc13cc882b0c078276d5089d3186b157d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:d2:9f:09:30:57:b1:89:fe:60:8e:d2:58: 83:a1:ee:86:a3:5a:cb:f2:41:31:95:e0:b6:52:9d: 3e:8c:14:b7:de:c6:9d:c6:eb:81:4e:24:b5:fc:b0: ed:ad:0d:31:f0:8f:70:db:d1:d8:ca:29:ce:7e:84: 8a:8e:82:06:a6:a9:8d:22:14:30:1d:7a:5e:d8:d4: d7:8d:08:d4:05:c5:1e:27:a2:76:5a:22:61:d1:43: 87:ee:c0:8c:22:39:6f:71:a5:d8:aa:b3:da:21:e8: d6:2f:6b:db:ee:62:c5:20:0b:6e:dd:2f:1d:17:78: 7d:3a:58:8d:d5:ab:42:24:98:49:e9:01:11:41:ef: b6:48:12:52:66:bd:8f:07:9e:1a:2a:d2:65:47:8e: 8b:78:41:c7:9e:82:c1:4f:ae:6b:c1:0c:98:e6:88: 5d:5f:96:d5:8f:ae:63:7b:4f:6f:63:fc:df:46:7c: 48:68:de:87:6c:2a:20:a1:06:2b:b0:b9:1a:47:d2: f7:7e:c5:45:fe:e3:6b:58:a2:9e:df:02:52:c6:35: bf:bd:39:cd:e6:81:28:58:ba:52:c6:91:90:d1:f1: fb:53:da:78:0a:8d:ec:75:54:1d:2f:c1:33:22:e2: d1:55:94:69:90:1c:e5:54:e2:85:f0:95:09:ce:f7: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:B7:5B:C1:3C:C8:82:B0:C0:78:27:6D:50:89:D3:18:6B:15:7D X509v3 Authority Key Identifier: keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:0f:f2:79:99:ca:a0:f9:c6:fa:e5:f6:22:70:3b:4b:32:7e: be:48:b6:40:21:72:2c:b1:bb:dd:4a:69:0d:f6:85:0b:79:35: 21:30:51:3c:74:17:6e:48:81:35:85:de:76:7c:9a:6e:1c:96: e2:9a:fe:53:a7:da:73:29:71:f9:89:3a:25:1d:cf:a8:ed:8a: 2d:c7:dc:d8:ec:06:c9:96:4f:e6:0c:0a:a7:d4:70:bb:58:81: 1b:01:78:c8:3a:0e:ca:74:42:1b:78:70:08:06:81:76:f1:ca: 19:24:ed:dd:e6:81:45:8b:16:98:15:c7:69:f8:9b:17:10:83: fb:78:ae:15:33:16:c6:65:96:7a:87:66:01:38:b4:a8:f1:b0: ec:93:4d:2c:58:02:d9:23:59:05:49:51:24:d9:f2:27:a3:15: f1:d7:f6:cf:68:01:91:66:82:36:53:00:8e:f5:36:85:bd:a3: 3c:e7:da:7b:af:c9:81:8f:21:bb:8d:56:4b:7e:32:fb:da:6f: 87:be:d7:9a:15:42:e2:31:cf:a3:6a:3e:ac:66:ea:cf:45:0e: 38:c4:6a:23:6b:40:6f:40:1c:d2:7f:df:ec:38:d0:bc:ec:1c: 92:c0:68:13:67:70:84:8f:a7:10:44:0a:2d:b5:57:28:b1:67: 39:a3:24:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9+2eolpGJNxfjyQnSs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOWZmNGE1M2EzZGIwZjQzMjgyMGNkNzM3ZDU0M2Y4Njdh OTcyZDgwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg2MzMxYjc1YmMxM2NjODgyYjBjMDc4Mjc2ZDUwODlkMzE4NmIxNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxjSnwkwV7GJ/mCO0liDoe6Go1rL 8kExleC2Up0+jBS33sadxuuBTiS1/LDtrQ0x8I9w29HYyinOfoSKjoIGpqmNIhQw HXpe2NTXjQjUBcUeJ6J2WiJh0UOH7sCMIjlvcaXYqrPaIejWL2vb7mLFIAtu3S8d F3h9OliN1atCJJhJ6QERQe+2SBJSZr2PB54aKtJlR46LeEHHnoLBT65rwQyY5ohd X5bVj65je09vY/zfRnxIaN6HbCogoQYrsLkaR9L3fsVF/uNrWKKe3wJSxjW/vTnN 5oEoWLpSxpGQ0fH7U9p4Co3sdVQdL8EzIuLRVZRpkBzlVOKF8JUJzveEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMxt1vBPMiCsMB4J21QidMYaxV9MB8GA1UdIwQY MBaAFG2f9KU6PbD0MoIM1zfVQ/hnqXLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3Zjct ZTE2OGRiMmM1NGI0LzEvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3ZjctZTE2OGRiMmM1NGI0 LzEvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeA/yeZnK oPnG+uX2InA7SzJ+vki2QCFyLLG73UppDfaFC3k1ITBRPHQXbkiBNYXednyabhyW 4pr+U6facylx+Yk6JR3PqO2KLcfc2OwGyZZP5gwKp9Rwu1iBGwF4yDoOynRCG3hw CAaBdvHKGSTt3eaBRYsWmBXHafibFxCD+3iuFTMWxmWWeodmATi0qPGw7JNNLFgC 2SNZBUlRJNnyJ6MV8df2z2gBkWaCNlMAjvU2hb2jPOfae6/JgY8hu41WS34y+9pv h77XmhVC4jHPo2o+rGbqz0UOOMRqI2tAb0Ac0n/f7DjQvOwcksBoE2dwhI+nEEQK LbVXKLFnOaMkwA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:16 2025 by rpki-client