This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json) Hash identifier: umKfZTc2xqcDwXKK4zBp/vqz12F1i7E3JHDOOHqb1CU= Subject key identifier: 0F:ED:5C:C2:C1:16:71:A7:11:13:B8:FD:64:3F:22:B2:5A:A3:91:6F Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Certificate serial: 019B40C91E061284AC96BDB21C62062CD9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft Manifest number: 179B Signing time: Sun 21 Dec 2025 12:01:20 +0000 Manifest this update: Sun 21 Dec 2025 12:01:20 +0000 Manifest next update: Mon 22 Dec 2025 12:01:20 +0000 Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: XqZ2d0GvFQVsOWUaW0K9BD3JcAZsFk6hdmvsonaMDdI=) 2: g5O-sJkZnNA68mGJtGD2tO2hre0.roa (hash: w9zj7kKoXrvbGgUWDgKatfpf3enPGG2iU/OVqfPxOKA=) 3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:1e:06:12:84:ac:96:bd:b2:1c:62:06:2c:d9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Validity Not Before: Dec 21 12:01:20 2025 GMT Not After : Dec 22 12:01:20 2025 GMT Subject: CN=0fed5cc2c11671a71113b8fd643f22b25aa3916f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:a7:82:21:da:1a:d0:e9:0a:35:d5:f0:91: e1:50:e3:2e:23:ee:59:e6:2c:4d:74:5f:b3:9a:e5: 9c:86:fd:e0:94:55:d2:3d:dc:8f:8a:c6:0b:0f:52: 4b:1d:82:4d:f1:3f:c8:7e:49:f8:3a:ab:c9:3e:63: 1a:26:62:11:4e:43:9a:4d:26:f1:38:75:43:87:bd: d7:f7:55:e9:77:f4:3f:12:b0:64:20:ac:7b:cc:32: f2:be:cd:46:ff:8b:f1:0b:36:96:a2:ba:b6:61:f7: 51:15:ff:68:8d:c0:7f:f9:bc:e4:26:cd:7d:9c:5e: 8d:1b:e3:27:b9:23:47:6a:e3:48:b5:83:3f:a4:9d: 2f:3c:da:b9:c2:a2:8d:ef:b7:ef:5a:f6:19:72:9b: 22:fe:ef:a3:d2:d0:ce:93:9e:dd:2c:8d:15:6f:fc: 7c:7e:57:38:18:0c:4b:86:52:85:f9:37:5d:1b:43: a7:57:c8:a6:a8:bb:53:28:04:0e:d5:7b:9e:31:c1: 2c:2f:05:7c:75:83:6a:6d:78:10:75:24:07:26:e0: 94:51:5a:cf:47:d2:f1:a8:71:21:7f:e4:64:d2:f1: 62:22:5e:7c:8e:0d:5f:96:80:82:d9:5f:c4:ae:16: fe:ba:e9:d3:d3:06:56:1e:c9:94:7a:f6:cd:e6:e7: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:5C:C2:C1:16:71:A7:11:13:B8:FD:64:3F:22:B2:5A:A3:91:6F X509v3 Authority Key Identifier: keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:98:07:2a:e8:85:3a:ac:9d:3e:4a:1f:66:44:48:3e:1b:af: e6:f4:6c:24:fc:43:35:08:79:40:25:72:46:f3:23:9e:bf:f6: d7:6e:81:eb:24:44:3e:2a:d4:9b:66:f5:66:76:a9:d5:dd:b2: 0b:7a:99:ab:d6:d0:1e:01:4f:a1:f9:1f:a0:75:f6:55:f6:57: cd:0f:bf:68:a8:d0:a9:e1:ca:2a:43:81:35:d4:9c:6e:56:1d: a0:dd:6c:b1:c1:94:1f:e7:b0:fd:3d:6e:53:da:86:12:39:20: 5b:4e:5a:00:59:49:79:87:53:7c:0a:f8:ed:c0:05:63:6f:f6: 3d:b9:0a:f8:4f:a6:96:40:07:c7:e1:af:27:37:d7:83:07:5b: 32:96:cc:0d:53:20:17:16:3b:7b:60:cb:33:b3:a8:32:70:50: e2:cc:93:e4:f9:a3:c1:e4:7b:e7:aa:31:19:8e:3e:1c:a0:22: 98:0a:76:c1:c3:9f:e1:75:f4:3a:49:94:95:fd:7f:e6:81:d0: 43:f2:4f:33:c5:6f:aa:97:a2:74:7a:4a:53:57:7e:20:8f:a8: 49:18:9f:55:07:31:54:e3:22:b9:e8:b8:19:b6:66:49:0b:1b: 50:88:d8:d3:03:03:4b:ce:61:dc:c7:76:d4:c7:c5:e2:78:f0: 2f:fc:77:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyR4GEoSslr2yHGIGLNn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri OWJkZWEwHhcNMjUxMjIxMTIwMTIwWhcNMjUxMjIyMTIwMTIwWjAzMTEwLwYDVQQD EygwZmVkNWNjMmMxMTY3MWE3MTExM2I4ZmQ2NDNmMjJiMjVhYTM5MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm2ngiHaGtDpCjXV8JHhUOMuI+5Z 5ixNdF+zmuWchv3glFXSPdyPisYLD1JLHYJN8T/Ifkn4OqvJPmMaJmIRTkOaTSbx OHVDh73X91Xpd/Q/ErBkIKx7zDLyvs1G/4vxCzaWorq2YfdRFf9ojcB/+bzkJs19 nF6NG+MnuSNHauNItYM/pJ0vPNq5wqKN77fvWvYZcpsi/u+j0tDOk57dLI0Vb/x8 flc4GAxLhlKF+TddG0OnV8imqLtTKAQO1XueMcEsLwV8dYNqbXgQdSQHJuCUUVrP R9LxqHEhf+Rk0vFiIl58jg1floCC2V/Erhb+uunT0wZWHsmUevbN5ueWawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/tXMLBFnGnERO4/WQ/IrJao5FvMB8GA1UdIwQY MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpgHKuiF OqydPkofZkRIPhuv5vRsJPxDNQh5QCVyRvMjnr/2126B6yREPirUm2b1Znap1d2y C3qZq9bQHgFPofkfoHX2VfZXzQ+/aKjQqeHKKkOBNdScblYdoN1sscGUH+ew/T1u U9qGEjkgW05aAFlJeYdTfAr47cAFY2/2PbkK+E+mlkAHx+GvJzfXgwdbMpbMDVMg FxY7e2DLM7OoMnBQ4syT5PmjweR756oxGY4+HKAimAp2wcOf4XX0OkmUlf1/5oHQ Q/JPM8VvqpeidHpKU1d+II+oSRifVQcxVOMiuei4GbZmSQsbUIjY0wMDS85h3Md2 1MfF4njwL/x3YA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:09 2025 by rpki-client