This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json) Hash identifier: T5j9DoGncIf3UPAO8K1xOVuvNEsyFxb2Z8hmU7bi6y0= Subject key identifier: 60:00:2B:DC:AB:0D:28:7B:38:86:D1:BA:DB:E4:69:50:80:94:3F:D1 Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65 Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65 Certificate serial: 019AF465AF1F6D696789B1F172DE6CD7E993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 16:01:35 +0000 Manifest this update: Sat 06 Dec 2025 16:01:35 +0000 Manifest next update: Sun 07 Dec 2025 16:01:35 +0000 Files and hashes: 1: AfI7_Ngl828Ma-uzXTP8gExiXq8.roa (hash: 2GrTkt1tl/1H5BmPCuw0ZwhZ1/F3yEqgFPzDs8+22Qk=) 2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: dztTEU2j8ZoCnzcrxD5oF0sf3YlMAKxsK4kGwQEC6sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:af:1f:6d:69:67:89:b1:f1:72:de:6c:d7:e9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65 Validity Not Before: Dec 6 16:01:35 2025 GMT Not After : Dec 7 16:01:35 2025 GMT Subject: CN=60002bdcab0d287b3886d1badbe4695080943fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e3:ab:ea:71:d9:26:42:81:17:84:e0:af:0a: 5d:3c:d0:dc:5f:e1:aa:e1:af:03:3d:0a:7e:29:e6: c8:9d:62:a1:43:d2:da:f5:ee:17:26:03:55:d6:c3: 85:17:2f:5a:ea:40:0e:af:7f:71:a6:8b:d5:65:98: 0b:62:b0:3a:e0:9c:34:fa:3d:62:3f:19:65:4c:90: 6e:4e:69:17:ce:bc:77:29:a4:66:59:2f:66:c9:ea: e0:95:10:23:f1:94:3c:9a:ac:b4:03:56:cb:c7:87: 2c:c3:54:c7:02:a9:5f:77:f5:e4:ce:de:3b:e5:60: c8:9d:3a:bc:0b:62:3f:76:f4:bc:d8:73:c7:6f:ae: 62:1f:44:ff:8d:18:5b:65:c9:40:c0:00:72:b7:4d: 1b:c6:7e:0d:92:93:87:e9:22:dc:ac:09:eb:3f:ea: 76:8e:17:fe:0d:be:73:4c:df:b8:ea:d1:0b:fe:64: 11:4a:32:bb:f3:6b:d3:7e:2b:76:7e:64:49:39:7e: 83:9f:fd:fc:be:f6:27:75:6a:1b:2e:b3:d9:1f:8f: 58:fd:63:89:8a:cc:8f:c2:1f:51:2f:22:e6:e1:08: 1b:ff:5e:15:d9:bb:f8:34:df:73:dc:b1:24:c4:2a: 5a:d3:5b:06:30:06:ec:0b:e8:09:5a:7d:70:53:48: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:2B:DC:AB:0D:28:7B:38:86:D1:BA:DB:E4:69:50:80:94:3F:D1 X509v3 Authority Key Identifier: keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:37:df:a8:f7:4d:fa:05:3e:e6:c6:ba:9f:db:c6:ee:8a:6f: ae:16:fc:02:f3:78:9b:db:ad:5d:fc:79:56:56:91:10:32:8d: 8f:e6:56:89:fd:52:09:c4:3f:e2:94:62:64:0a:9b:a0:2a:5c: a3:a8:0a:33:76:b8:bb:d2:35:eb:8b:48:fe:e3:d7:95:a3:5b: 20:d7:ae:dd:61:15:2f:61:5c:e1:9e:fd:ad:60:a3:da:63:f1: 4b:d3:da:81:fc:63:cf:0d:80:6b:63:9e:26:bd:ed:0d:bf:8b: e2:1f:08:87:4b:bc:3a:a8:99:c9:e3:9b:ef:92:35:31:c9:d0: cd:6f:2d:82:dc:b2:cf:44:8f:ef:e8:09:e2:d3:f8:35:d7:68: 3b:bd:63:9d:20:a8:bc:c6:ed:91:20:6e:87:c0:3b:7f:69:4d: cd:ad:55:75:e2:06:49:91:09:b6:14:f7:9e:fe:cd:f4:a4:26: 6f:10:a8:d2:4a:73:61:27:97:d0:46:45:db:94:d0:06:89:ae: ce:22:bc:5d:fd:8a:0b:75:1b:14:93:39:49:40:e6:60:ad:b5: 13:f1:89:af:f0:7a:2b:bc:8e:56:ea:f9:3c:8a:a9:a1:dd:b5: 7b:48:27:18:2a:2e:73:a6:ac:6d:27:37:47:0e:6e:7f:61:e1: d3:4e:4a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Za8fbWlnibHxct5s1+mTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmM2Q4OWE4MWZjMjk5ZjM5YzA5MmU0ZjZkMDE3M2E5YTlj ZmJjNjUwHhcNMjUxMjA2MTYwMTM1WhcNMjUxMjA3MTYwMTM1WjAzMTEwLwYDVQQD Eyg2MDAwMmJkY2FiMGQyODdiMzg4NmQxYmFkYmU0Njk1MDgwOTQzZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eOr6nHZJkKBF4TgrwpdPNDcX+Gq 4a8DPQp+KebInWKhQ9La9e4XJgNV1sOFFy9a6kAOr39xpovVZZgLYrA64Jw0+j1i PxllTJBuTmkXzrx3KaRmWS9myerglRAj8ZQ8mqy0A1bLx4csw1THAqlfd/Xkzt47 5WDInTq8C2I/dvS82HPHb65iH0T/jRhbZclAwAByt00bxn4NkpOH6SLcrAnrP+p2 jhf+Db5zTN+46tEL/mQRSjK782vTfit2fmRJOX6Dn/38vvYndWobLrPZH49Y/WOJ isyPwh9RLyLm4Qgb/14V2bv4NN9z3LEkxCpa01sGMAbsC+gJWn1wU0hZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAAK9yrDSh7OIbRutvkaVCAlD/RMB8GA1UdIwQY MBaAFG89iagfwpnznAkuT20Bc6mpz7xlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAt MzA5YjdiOTYwZDE0LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAtMzA5YjdiOTYwZDE0 LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzffqPdN +gU+5sa6n9vG7opvrhb8AvN4m9utXfx5VlaREDKNj+ZWif1SCcQ/4pRiZAqboCpc o6gKM3a4u9I164tI/uPXlaNbINeu3WEVL2Fc4Z79rWCj2mPxS9Pagfxjzw2Aa2Oe Jr3tDb+L4h8Ih0u8OqiZyeOb75I1McnQzW8tgtyyz0SP7+gJ4tP4NddoO71jnSCo vMbtkSBuh8A7f2lNza1VdeIGSZEJthT3nv7N9KQmbxCo0kpzYSeX0EZF25TQBomu ziK8Xf2KC3UbFJM5SUDmYK21E/GJr/B6K7yOVur5PIqpod21e0gnGCouc6asbSc3 Rw5uf2Hh005KUw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:50 2025 by rpki-client