This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json) Hash identifier: Yq6qgx5kNDkzp/1bLfxtOqancRUVZqRzq4+oUTtX9zY= Subject key identifier: A0:DF:7B:C0:05:7A:88:53:ED:E5:4D:D6:43:D6:25:39:4E:C5:B9:F5 Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Certificate serial: 019AF31CD737026E42B694C17CF665F1843B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft Manifest number: 0234 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: qxfe9uzuNzkaBH/+hqThGX4NEt1IATRhiHveP9f08dY=) 2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d7:37:02:6e:42:b6:94:c1:7c:f6:65:f1:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=a0df7bc0057a8853ede54dd643d625394ec5b9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:54:f3:c0:75:b9:ca:87:cb:6c:7c:cd:22: 07:63:e0:5c:a1:6c:b9:44:c7:bd:77:e6:88:9c:91: ee:c4:6d:b3:64:c0:92:79:48:b0:4f:2d:24:ff:66: 6d:9a:f0:50:e1:23:53:1a:d2:69:f0:d0:d6:d3:19: 5a:a1:74:97:5f:4e:f5:22:42:8d:4e:37:66:54:22: 7e:ab:07:ec:71:05:8e:90:dd:a5:a8:58:54:5d:be: ec:cb:3c:86:97:2f:b0:4a:2a:21:60:69:8f:be:89: 87:72:a1:bc:ce:7e:b3:de:06:69:6d:7e:72:7b:13: 5c:07:3a:a1:0c:60:89:ed:1f:5e:46:c9:4e:ca:2b: f7:57:c0:7d:e3:c5:94:be:a4:8b:2b:08:f3:dd:a7: fd:38:aa:1f:70:08:c4:da:a3:3e:51:ca:67:59:01: cb:a6:01:d1:5a:28:68:3d:1a:eb:da:4f:81:13:fb: 92:fe:69:9c:0d:86:fb:56:03:99:d5:60:4a:b9:02: 14:f2:0e:00:f3:82:1c:1e:0a:60:e5:e1:d0:f5:8d: ac:e4:e5:04:3a:ee:82:be:99:31:6a:77:cf:70:7f: d4:b9:cd:c4:ab:51:77:18:63:97:73:20:f7:a0:c6: f0:4c:a5:1c:54:ef:a5:a2:c3:ab:38:80:39:b6:dc: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DF:7B:C0:05:7A:88:53:ED:E5:4D:D6:43:D6:25:39:4E:C5:B9:F5 X509v3 Authority Key Identifier: keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:12:a0:f0:be:c6:d9:b4:fb:6b:42:63:1d:96:b5:ba:7a: 4b:a3:f5:34:1c:76:23:0e:6e:d1:05:6e:50:cc:b2:36:9d:9c: 97:f6:47:ac:7e:28:40:e3:38:d7:23:7d:7e:d4:2d:98:f1:0c: 89:48:b7:58:2d:b5:9b:38:34:c7:94:d3:7a:35:12:72:09:a2: 50:5f:7b:b9:44:a5:75:ac:da:67:ed:0b:07:5d:90:b7:04:fa: 4f:c8:30:3a:14:cf:0f:36:37:15:5e:08:3f:f2:88:cc:8a:27: cd:4c:a3:9f:5b:2d:16:90:95:5e:41:41:5d:39:60:4e:61:0d: bd:95:da:f4:18:11:28:2d:0a:16:78:69:04:42:b4:3c:50:f7: 51:28:3b:72:9f:0a:b7:b7:ca:c9:32:50:30:46:1c:24:d5:7e: 66:4a:83:25:65:f8:e0:93:58:64:e7:19:77:a9:05:7f:3c:67: 9a:de:5c:17:8f:af:31:3a:7e:01:fc:34:0b:83:0d:63:6f:76: 38:24:dd:87:26:78:77:55:dd:0b:86:b7:53:09:54:47:da:7d: 13:f4:95:0b:d9:ca:01:ab:44:cb:4e:6f:cd:2b:1d:71:67:fb: b7:d3:e1:2a:5d:99:b5:21:f5:20:dd:c0:00:06:bc:69:e3:7f: 53:5d:e5:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNc3Am5CtpTBfPZl8YQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy ZTM2ZWYwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD EyhhMGRmN2JjMDA1N2E4ODUzZWRlNTRkZDY0M2Q2MjUzOTRlYzViOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2NU88B1ucqHy2x8zSIHY+BcoWy5 RMe9d+aInJHuxG2zZMCSeUiwTy0k/2ZtmvBQ4SNTGtJp8NDW0xlaoXSXX071IkKN TjdmVCJ+qwfscQWOkN2lqFhUXb7syzyGly+wSiohYGmPvomHcqG8zn6z3gZpbX5y exNcBzqhDGCJ7R9eRslOyiv3V8B948WUvqSLKwjz3af9OKofcAjE2qM+UcpnWQHL pgHRWihoPRrr2k+BE/uS/mmcDYb7VgOZ1WBKuQIU8g4A84IcHgpg5eHQ9Y2s5OUE Ou6CvpkxanfPcH/Uuc3Eq1F3GGOXcyD3oMbwTKUcVO+losOrOIA5ttwf0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDfe8AFeohT7eVN1kPWJTlOxbn1MB8GA1UdIwQY MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4 LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7ESoPC+ xtm0+2tCYx2Wtbp6S6P1NBx2Iw5u0QVuUMyyNp2cl/ZHrH4oQOM41yN9ftQtmPEM iUi3WC21mzg0x5TTejUScgmiUF97uUSldazaZ+0LB12QtwT6T8gwOhTPDzY3FV4I P/KIzIonzUyjn1stFpCVXkFBXTlgTmENvZXa9BgRKC0KFnhpBEK0PFD3USg7cp8K t7fKyTJQMEYcJNV+ZkqDJWX44JNYZOcZd6kFfzxnmt5cF4+vMTp+Afw0C4MNY292 OCTdhyZ4d1XdC4a3UwlUR9p9E/SVC9nKAatEy05vzSsdcWf7t9PhKl2ZtSH1IN3A AAa8aeN/U13lCA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:12 2025 by rpki-client