This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json) Hash identifier: bOlYE/MXow+cnut4xd8i8Dm58oQEHHxD86YceboGNIw= Subject key identifier: A1:1A:4E:B5:81:9A:62:47:81:0C:50:9A:41:B2:A5:F9:E2:DF:EB:B5 Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Certificate serial: 019AF1D1F7D28F11DAEB4635102CF08BC1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: whejNTnvXRJbZOXEfBA5QYp6THDDe4jlcnZ0TUR1Pa4=) 2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f7:d2:8f:11:da:eb:46:35:10:2c:f0:8b:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=a11a4eb5819a6247810c509a41b2a5f9e2dfebb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:13:db:53:97:34:35:f5:ea:63:5c:37:aa: 27:6c:c8:c6:70:06:d0:a7:fd:49:22:c5:40:f0:8f: 7f:55:08:0d:6d:3d:27:c2:f5:af:40:53:11:02:ad: 31:65:f7:b9:b0:51:69:02:b4:dd:c7:c2:b3:5b:47: 16:53:53:64:ff:4d:78:35:de:a8:10:cc:13:84:85: bf:65:ae:e9:09:d3:8a:50:8f:60:d4:bf:5b:5e:ad: b3:72:8f:a7:83:e3:cc:18:aa:b8:e9:3a:2b:dc:f1: 9d:d7:f3:51:7f:f4:d3:81:39:65:f6:cb:ec:19:67: ff:9a:c5:c8:fe:c4:bd:c5:34:0a:05:88:35:53:df: 11:20:a0:16:47:71:d1:27:6e:11:70:78:d7:43:3f: 22:6b:fe:eb:b2:77:56:91:c1:87:c2:54:a7:53:5c: 3e:bf:6b:7c:0f:ae:31:d5:d9:d7:30:d0:b0:22:fa: 7c:72:da:5f:dc:e0:62:46:6d:80:dc:61:12:ce:80: fb:47:6a:fe:82:2b:88:cd:aa:3d:2c:cf:75:93:3e: ae:fa:af:9a:21:e0:64:13:e2:7d:f1:e8:a5:de:02: 0a:69:13:e7:a7:58:ba:c1:eb:ab:c9:74:64:b9:87: b7:a5:ed:88:e3:61:4d:4c:f5:41:95:ee:b9:28:91: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1A:4E:B5:81:9A:62:47:81:0C:50:9A:41:B2:A5:F9:E2:DF:EB:B5 X509v3 Authority Key Identifier: keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:01:95:4d:19:43:88:14:00:ac:f3:1e:4d:c1:9b:70:f3:a6: cf:0d:a7:9d:00:a8:40:d7:52:50:39:0a:86:55:fd:fb:43:9a: a0:c8:6d:77:11:a7:16:7c:d6:8a:9f:fb:d3:f4:1b:64:d5:8a: 83:cc:3a:b7:89:59:ee:20:23:bc:5b:21:af:70:f7:0c:8e:58: 7f:6a:b0:f2:08:4f:3e:85:de:e6:75:78:37:0c:68:81:d0:5f: 56:ca:df:24:61:e8:c9:15:03:7c:da:04:f3:92:fe:60:b0:01: 8b:a6:e6:86:49:ea:60:ea:1d:84:a8:1e:b7:02:9b:68:d8:e5: cc:77:ae:c9:bd:6f:05:cb:2a:37:c0:77:d9:b6:f2:81:73:cf: b8:88:e8:be:f9:7f:e0:a0:e1:fb:08:a3:5d:e6:1e:97:38:84: b6:23:69:89:d6:3b:32:b1:b2:b3:a9:19:68:cf:43:fd:40:a4: 9f:94:a6:c4:ae:3d:fa:19:3a:27:05:4a:75:1a:96:ab:c8:72: 56:95:53:0f:c4:57:da:2d:bc:c7:e5:19:45:1e:44:33:56:93: 8d:fa:2c:17:17:d8:ed:40:47:6c:31:0a:37:9e:8f:79:6e:fa: e9:95:46:e7:45:d8:be:31:a3:c0:78:00:da:e0:74:10:74:8d: bf:e8:a3:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ffSjxHa60Y1ECzwi8HHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy NjEzMTEwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EyhhMTFhNGViNTgxOWE2MjQ3ODEwYzUwOWE0MWIyYTVmOWUyZGZlYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDkT21OXNDX16mNcN6onbMjGcAbQ p/1JIsVA8I9/VQgNbT0nwvWvQFMRAq0xZfe5sFFpArTdx8KzW0cWU1Nk/014Nd6o EMwThIW/Za7pCdOKUI9g1L9bXq2zco+ng+PMGKq46Tor3PGd1/NRf/TTgTll9svs GWf/msXI/sS9xTQKBYg1U98RIKAWR3HRJ24RcHjXQz8ia/7rsndWkcGHwlSnU1w+ v2t8D64x1dnXMNCwIvp8ctpf3OBiRm2A3GESzoD7R2r+giuIzao9LM91kz6u+q+a IeBkE+J98eil3gIKaRPnp1i6weuryXRkuYe3pe2I42FNTPVBle65KJG8ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEaTrWBmmJHgQxQmkGypfni3+u1MB8GA1UdIwQY MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwGVTRlD iBQArPMeTcGbcPOmzw2nnQCoQNdSUDkKhlX9+0OaoMhtdxGnFnzWip/70/QbZNWK g8w6t4lZ7iAjvFshr3D3DI5Yf2qw8ghPPoXe5nV4NwxogdBfVsrfJGHoyRUDfNoE 85L+YLABi6bmhknqYOodhKgetwKbaNjlzHeuyb1vBcsqN8B32bbygXPPuIjovvl/ 4KDh+wijXeYelziEtiNpidY7MrGys6kZaM9D/UCkn5SmxK49+hk6JwVKdRqWq8hy VpVTD8RX2i28x+UZRR5EM1aTjfosFxfY7UBHbDEKN56PeW766ZVG50XYvjGjwHgA 2uB0EHSNv+ij2g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:40 2025 by rpki-client