This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json) Hash identifier: BjcVa4ckHKI2fRP7csq72189zBRs2wc2NJJktNUgaRk= Subject key identifier: 13:C1:BD:0A:56:3C:5F:19:FC:C7:C4:23:B8:62:6A:27:E3:D0:41:49 Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Certificate serial: 019B318C9077444CACBFA84BCEAF3C89965C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 13:00:54 +0000 Manifest this update: Thu 18 Dec 2025 13:00:54 +0000 Manifest next update: Fri 19 Dec 2025 13:00:54 +0000 Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: 1C5pC7mwoX7Mh6afxUrdeHshMJ0Yen+kUZ8d60TigMg=) 2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:90:77:44:4c:ac:bf:a8:4b:ce:af:3c:89:96:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Validity Not Before: Dec 18 13:00:54 2025 GMT Not After : Dec 19 13:00:54 2025 GMT Subject: CN=13c1bd0a563c5f19fcc7c423b8626a27e3d04149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:e3:98:51:e1:f6:1d:c3:9c:7f:bc:ed:d4: a4:71:b8:99:80:2c:7c:88:78:b0:b9:12:32:b8:52: ef:24:7a:6b:69:81:d8:9c:76:7d:dc:40:71:7a:27: 86:ff:90:56:e7:74:16:5b:7c:2d:a6:dc:4f:04:eb: 1a:64:fa:ba:3b:bd:65:ca:f2:1a:8a:db:bb:6d:51: 52:4f:f6:5e:8b:58:50:fd:32:fd:9a:ed:d6:6e:b6: 8e:67:2f:a1:13:b6:e1:cf:d2:d8:f3:35:6f:f5:27: 6d:2b:df:41:48:e3:0a:18:89:43:e0:7e:ce:13:ef: 84:82:10:e3:7a:e8:e6:6d:89:0d:2c:e0:dd:21:d1: a5:53:2e:1e:b6:70:18:1d:0a:2e:5d:f6:d8:50:b1: 39:c5:84:8d:6a:df:cf:29:d0:ae:cb:b5:df:db:c4: ad:da:d0:fb:7d:f7:25:fa:ce:68:be:ef:74:ba:16: 43:4b:e2:56:46:9d:19:35:e4:4e:15:86:28:7b:30: df:98:3c:06:74:06:fc:2b:8d:7b:dc:6c:b6:04:e9: 34:c1:68:aa:83:91:eb:24:e3:2d:c8:d0:92:2b:01: 4e:c7:1b:0d:70:71:0f:17:6b:60:31:47:ee:f7:a5: 23:13:6b:84:d4:d1:bb:a7:eb:8c:ec:c9:d3:ed:22: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:BD:0A:56:3C:5F:19:FC:C7:C4:23:B8:62:6A:27:E3:D0:41:49 X509v3 Authority Key Identifier: keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:04:43:c9:95:4f:bc:14:45:30:06:42:55:d2:92:e5:b4:c0: f2:95:98:15:a1:4f:2a:25:b1:90:43:67:d7:85:90:88:ae:98: 24:84:c8:df:b0:cf:88:f7:ac:ce:98:3e:9a:68:2c:9b:26:29: 96:d8:c2:97:de:aa:b3:2d:ca:6e:b8:c8:ee:1b:70:9c:26:82: 41:e8:d9:1c:e1:1c:68:3e:c3:07:55:24:15:a7:37:0c:dd:57: 5c:0b:04:bb:e8:d6:4f:0f:19:6b:f4:bf:68:c9:db:c6:e9:ab: f8:b6:e6:31:65:ea:11:87:f6:e7:66:97:06:5e:6c:fc:ad:da: 0a:57:bd:81:ff:35:ff:5c:21:13:79:27:93:d5:a4:92:01:2d: 92:64:58:64:a0:4d:5d:ac:94:3d:a2:39:c0:59:53:5f:45:c8: e4:71:df:2d:58:18:40:d5:4b:81:95:1b:3f:49:52:14:97:12: 85:c4:66:84:6f:c0:2d:5e:09:ca:0c:e9:2a:b3:e5:f7:f0:4b: 7f:62:19:35:e1:ad:3d:3e:02:42:cd:42:af:d7:76:d5:4e:4e: 24:f4:c6:43:60:49:bf:3d:56:e4:7f:68:b9:ba:6e:22:3a:29: 77:60:1e:17:a3:29:39:92:c0:ed:a1:9f:47:5d:b7:c2:fa:0b: 71:24:40:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjJB3REysv6hLzq88iZZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy NjEzMTEwHhcNMjUxMjE4MTMwMDU0WhcNMjUxMjE5MTMwMDU0WjAzMTEwLwYDVQQD EygxM2MxYmQwYTU2M2M1ZjE5ZmNjN2M0MjNiODYyNmEyN2UzZDA0MTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2injmFHh9h3DnH+87dSkcbiZgCx8 iHiwuRIyuFLvJHpraYHYnHZ93EBxeieG/5BW53QWW3wtptxPBOsaZPq6O71lyvIa itu7bVFST/Zei1hQ/TL9mu3WbraOZy+hE7bhz9LY8zVv9SdtK99BSOMKGIlD4H7O E++EghDjeujmbYkNLODdIdGlUy4etnAYHQouXfbYULE5xYSNat/PKdCuy7Xf28St 2tD7ffcl+s5ovu90uhZDS+JWRp0ZNeROFYYoezDfmDwGdAb8K4173Gy2BOk0wWiq g5HrJOMtyNCSKwFOxxsNcHEPF2tgMUfu96UjE2uE1NG7p+uM7MnT7SLqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPBvQpWPF8Z/MfEI7hiaifj0EFJMB8GA1UdIwQY MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQRDyZVP vBRFMAZCVdKS5bTA8pWYFaFPKiWxkENn14WQiK6YJITI37DPiPeszpg+mmgsmyYp ltjCl96qsy3KbrjI7htwnCaCQejZHOEcaD7DB1UkFac3DN1XXAsEu+jWTw8Za/S/ aMnbxumr+LbmMWXqEYf252aXBl5s/K3aCle9gf81/1whE3knk9WkkgEtkmRYZKBN XayUPaI5wFlTX0XI5HHfLVgYQNVLgZUbP0lSFJcShcRmhG/ALV4JygzpKrPl9/BL f2IZNeGtPT4CQs1Cr9d21U5OJPTGQ2BJvz1W5H9oubpuIjopd2AeF6MpOZLA7aGf R123wvoLcSRAcw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:24 2025 by rpki-client