This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: ovU1c3WYmHJXTLiChbIRiKaQLrXNNTq/392hAM6MnOk= Subject key identifier: 87:D4:D5:1F:BF:95:7C:7A:35:3A:00:73:47:A7:AB:2F:2A:65:36:00 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019AF2AD6A581573CB5A505D43D3BD1DEC6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 17E6 Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: z/luCq0xJxIa3TxzEAUhWK6uUMsyWj6DJnkgPhXJ0cU=) 8: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 9: q_FsPd3Tl5Cz-O68NO2yoI9kfds.roa (hash: tWp2QQlkC3Hu7JeoDpAabZOYOqG89g7KH5Hr/xI/c2Q=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6a:58:15:73:cb:5a:50:5d:43:d3:bd:1d:ec:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=87d4d51fbf957c7a353a007347a7ab2f2a653600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:ff:69:52:4d:29:fc:e0:aa:6a:fe:7d:c2: 2c:61:54:4f:74:c4:ae:b2:61:f4:a0:7d:e3:93:22: 5f:49:1e:dd:f8:46:a8:cb:5a:cd:cb:23:fb:32:ca: 69:54:ee:54:c4:98:d5:68:03:c4:2e:c2:22:9d:92: b8:b8:71:06:aa:60:8e:39:07:cd:bb:74:ec:67:dd: ff:56:21:74:80:fb:1e:70:e3:cf:d0:f9:92:b0:6c: 1f:5d:e6:7d:01:19:7a:9a:ae:cf:bf:12:b8:8c:0b: c8:3c:e5:ce:9d:97:2c:3d:f0:eb:07:dd:7c:71:8a: 05:d4:ea:2c:1c:1d:79:fc:7f:d4:ba:fc:ee:f0:d2: 67:17:91:ff:4f:a6:f5:46:5b:f9:74:c7:b2:9f:dd: 1c:c4:42:13:fa:21:36:c9:5d:c0:0d:da:0b:19:84: ab:f9:af:d8:8d:d7:fa:09:f0:ff:ee:d3:52:37:a2: 0e:fb:12:4c:78:3f:85:e8:62:54:4e:6c:56:6c:1a: 8e:e6:f8:3f:34:4e:3c:18:63:c9:e7:db:ee:54:f1: 68:d7:7f:af:f0:69:35:25:40:49:1a:1f:1a:2e:97: 20:ad:f9:00:b0:95:8d:fc:45:c0:b7:12:23:14:2b: e1:27:1d:60:1f:5e:41:84:79:1e:42:07:c8:3b:44: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:D5:1F:BF:95:7C:7A:35:3A:00:73:47:A7:AB:2F:2A:65:36:00 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9a:24:a5:c7:6b:5b:9d:dd:7b:d2:db:17:9f:f8:48:63:d0: 69:84:a7:9f:48:d1:63:db:04:eb:18:b3:33:88:63:f8:03:a7: 5b:cc:9e:ec:5b:ac:a9:b8:b2:17:c5:51:24:48:dc:2f:83:40: 3c:61:ea:c6:1d:ac:8f:d2:9e:cb:d9:3c:a8:f8:85:91:c7:79: 51:e2:ba:e0:51:66:85:2e:06:62:3e:67:a8:79:f7:2e:b2:d3: cb:a4:2f:d8:93:a0:85:c2:46:9a:be:93:9f:f2:05:e4:42:4b: 04:52:a6:f9:3e:a7:c5:4b:72:42:9e:52:c0:96:2a:be:2d:b6: ce:09:90:70:58:0e:57:8d:6d:ad:5f:47:2a:65:3f:65:61:99: 6a:11:48:90:46:c0:98:82:f2:3d:b8:e2:f5:97:93:d9:aa:a5: c7:75:f8:9a:42:2d:13:3b:75:f9:4c:41:01:7a:63:87:bc:3f: 63:64:06:79:96:ea:49:ed:c6:9d:8d:3a:6a:d5:fa:37:45:4d: 20:4a:6c:78:70:d2:08:22:9a:12:ac:d0:44:59:70:74:01:59: 63:ee:ad:df:54:1e:e5:15:41:ab:4b:52:02:6e:ef:ea:a0:ed: 48:50:db:d7:b5:9d:84:f3:27:4a:ec:46:85:a5:b8:5d:a0:80: 40:2b:ae:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWpYFXPLWlBdQ9O9HexrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg4N2Q0ZDUxZmJmOTU3YzdhMzUzYTAwNzM0N2E3YWIyZjJhNjUzNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZP/aVJNKfzgqmr+fcIsYVRPdMSu smH0oH3jkyJfSR7d+Eaoy1rNyyP7MsppVO5UxJjVaAPELsIinZK4uHEGqmCOOQfN u3TsZ93/ViF0gPsecOPP0PmSsGwfXeZ9ARl6mq7PvxK4jAvIPOXOnZcsPfDrB918 cYoF1OosHB15/H/Uuvzu8NJnF5H/T6b1Rlv5dMeyn90cxEIT+iE2yV3ADdoLGYSr +a/Yjdf6CfD/7tNSN6IO+xJMeD+F6GJUTmxWbBqO5vg/NE48GGPJ59vuVPFo13+v 8Gk1JUBJGh8aLpcgrfkAsJWN/EXAtxIjFCvhJx1gH15BhHkeQgfIO0SzrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfU1R+/lXx6NToAc0enqy8qZTYAMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJokpcdr W53de9LbF5/4SGPQaYSnn0jRY9sE6xizM4hj+AOnW8ye7FusqbiyF8VRJEjcL4NA PGHqxh2sj9Key9k8qPiFkcd5UeK64FFmhS4GYj5nqHn3LrLTy6Qv2JOghcJGmr6T n/IF5EJLBFKm+T6nxUtyQp5SwJYqvi22zgmQcFgOV41trV9HKmU/ZWGZahFIkEbA mILyPbji9ZeT2aqlx3X4mkItEzt1+UxBAXpjh7w/Y2QGeZbqSe3GnY06atX6N0VN IEpseHDSCCKaEqzQRFlwdAFZY+6t31Qe5RVBq0tSAm7v6qDtSFDb17WdhPMnSuxG haW4XaCAQCuuEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:58 2025 by rpki-client