This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json) Hash identifier: GH/hgtQzwKJBs726A6aZLgpZBp6BovDAuVTG2BQ3WFU= Subject key identifier: 45:43:62:6E:B4:E8:3E:FC:FF:A5:33:3A:C8:02:C1:E0:33:A7:40:8F Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Certificate serial: 019AF352A393C999B650E6E1A3A15BE2F316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:01:10 +0000 Manifest this update: Sat 06 Dec 2025 11:01:10 +0000 Manifest next update: Sun 07 Dec 2025 11:01:10 +0000 Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: 4mAIdztsS0BiTnd7E+WkKX/NUWMrQSPyelfDQ6vZQR0=) 2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a3:93:c9:99:b6:50:e6:e1:a3:a1:5b:e2:f3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Validity Not Before: Dec 6 11:01:10 2025 GMT Not After : Dec 7 11:01:10 2025 GMT Subject: CN=4543626eb4e83efcffa5333ac802c1e033a7408f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:38:4b:02:09:d7:87:80:4a:e6:04:37:39: de:74:6c:3d:6c:25:8d:ae:93:cf:fc:72:9a:29:d0: c4:c4:08:8b:99:6e:3f:a8:8e:7d:61:d7:e5:36:92: 42:b7:ae:8e:a5:82:86:7e:a4:d1:33:a9:f5:6e:35: ca:9d:bb:3e:41:48:9c:10:c4:eb:f5:9d:9f:a1:a6: 6a:53:a0:8f:e4:76:bf:f3:7d:2b:8f:ca:dd:f9:c1: c8:11:4d:0d:59:0a:ff:7e:e1:6e:e0:06:ca:b5:dc: 0e:05:aa:21:1e:c3:0e:75:09:9d:c8:f5:be:c6:4f: db:de:a3:8e:3d:86:14:0d:a9:22:56:42:2b:38:71: 84:6b:50:da:46:59:5f:c8:74:d8:41:47:d4:7d:c1: d5:01:2a:71:20:4e:98:d0:a4:d1:0a:1d:bc:a1:5c: e8:37:ea:66:8f:e9:f2:d5:f2:6e:10:9c:94:cc:c4: 38:b8:d9:4a:e4:85:60:c7:48:46:d6:c7:8f:f6:f8: be:2f:93:4d:74:a6:65:fa:e5:a5:a1:64:f9:24:58: 3c:9c:e0:b2:19:70:8b:a5:0f:4c:86:c6:44:39:0b: 24:24:c8:fb:44:51:c6:bf:4e:6d:da:c3:9a:6c:5d: d6:57:a7:79:be:2e:e1:92:af:c7:02:72:d6:4e:c3: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:62:6E:B4:E8:3E:FC:FF:A5:33:3A:C8:02:C1:E0:33:A7:40:8F X509v3 Authority Key Identifier: keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:db:0c:1e:ac:0a:4a:38:69:0d:38:e4:61:4c:1b:8f:9f: b7:2a:a9:8a:2d:c0:e3:f3:74:b2:f3:3f:99:c4:7e:29:6c:09: 13:70:79:92:c2:0c:f7:db:5a:00:04:c4:dd:e3:ed:61:93:26: 74:61:f4:43:e5:58:d5:eb:8a:93:03:12:5b:d0:d6:41:68:11: 75:b4:78:bd:f4:25:3e:64:9b:91:33:a2:c7:85:28:9e:a0:e8: 01:dc:80:50:5b:19:79:98:6d:ab:0e:0e:1e:f3:85:db:66:4e: b1:e9:3e:ea:9d:9c:39:24:1e:2b:2e:bb:5c:f3:88:26:07:a6: 60:3e:9b:f4:2d:1a:2c:71:96:7a:0d:24:1a:97:6d:0f:df:e0: 74:7b:dc:a8:c4:25:a0:42:23:27:b0:de:85:57:2f:ac:5a:4e: 6d:cf:0b:d0:40:d1:a7:88:76:c5:8a:62:0c:3a:3a:71:32:5f: ae:0f:a4:d5:37:88:76:f0:1a:9a:32:e3:74:f6:0a:85:16:cf: 54:f6:b6:c0:58:a9:77:12:d0:87:e8:cd:e4:97:a5:64:a1:a5: 22:17:e8:bc:47:1d:b4:8c:f6:e0:d2:46:e9:47:c2:46:b8:87: 09:16:b5:59:a0:6f:ea:e9:28:ff:4e:01:29:cd:37:06:ef:82: 28:b6:b6:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqOTyZm2UObho6Fb4vMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl ZDFkNDYwHhcNMjUxMjA2MTEwMTEwWhcNMjUxMjA3MTEwMTEwWjAzMTEwLwYDVQQD Eyg0NTQzNjI2ZWI0ZTgzZWZjZmZhNTMzM2FjODAyYzFlMDMzYTc0MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/w4SwIJ14eASuYENznedGw9bCWN rpPP/HKaKdDExAiLmW4/qI59YdflNpJCt66OpYKGfqTRM6n1bjXKnbs+QUicEMTr 9Z2foaZqU6CP5Ha/830rj8rd+cHIEU0NWQr/fuFu4AbKtdwOBaohHsMOdQmdyPW+ xk/b3qOOPYYUDakiVkIrOHGEa1DaRllfyHTYQUfUfcHVASpxIE6Y0KTRCh28oVzo N+pmj+ny1fJuEJyUzMQ4uNlK5IVgx0hG1seP9vi+L5NNdKZl+uWloWT5JFg8nOCy GXCLpQ9MhsZEOQskJMj7RFHGv05t2sOabF3WV6d5vi7hkq/HAnLWTsMRkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVDYm606D78/6UzOsgCweAzp0CPMB8GA1UdIwQY MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB7bDB6s Cko4aQ045GFMG4+ftyqpii3A4/N0svM/mcR+KWwJE3B5ksIM99taAATE3ePtYZMm dGH0Q+VY1euKkwMSW9DWQWgRdbR4vfQlPmSbkTOix4UonqDoAdyAUFsZeZhtqw4O HvOF22ZOsek+6p2cOSQeKy67XPOIJgemYD6b9C0aLHGWeg0kGpdtD9/gdHvcqMQl oEIjJ7DehVcvrFpObc8L0EDRp4h2xYpiDDo6cTJfrg+k1TeIdvAamjLjdPYKhRbP VPa2wFipdxLQh+jN5JelZKGlIhfovEcdtIz24NJG6UfCRriHCRa1WaBv6uko/04B Kc03Bu+CKLa2tA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:37 2025 by rpki-client