This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json) Hash identifier: YpWO5Bh9iDkZtLIsKUwzzEa73fXDN2t+MzF32rmIX3U= Subject key identifier: 05:F8:51:49:F3:4F:16:36:CA:FD:8B:CC:4E:82:89:5C:63:5B:9C:4F Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Certificate serial: 019AABA70E95AF21F84DAE80A22DEEDA245E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft Manifest number: 0563 Signing time: Sat 22 Nov 2025 13:00:43 +0000 Manifest this update: Sat 22 Nov 2025 13:00:43 +0000 Manifest next update: Sun 23 Nov 2025 13:00:43 +0000 Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=) 2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: U5nSOmum4GVkg/2pbSRy8rLoicZI39VSQ1iJWWcipSs=) 3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:0e:95:af:21:f8:4d:ae:80:a2:2d:ee:da:24:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Validity Not Before: Nov 22 13:00:43 2025 GMT Not After : Nov 23 13:00:43 2025 GMT Subject: CN=05f85149f34f1636cafd8bcc4e82895c635b9c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:2e:ce:b3:e6:49:27:1c:4c:f6:d1:bf:58: dc:2d:0e:15:f3:a7:06:72:bb:b7:f1:4c:75:5e:8d: 8d:b9:9a:93:09:bf:16:37:07:26:af:3c:04:80:a4: d7:b4:f5:7e:93:79:d8:8d:da:7c:86:36:df:96:d0: 98:3d:06:0f:c8:56:74:b1:a2:b4:7e:5b:5d:c5:69: f1:94:d3:9a:e4:d3:17:62:03:ed:ef:ef:c1:7b:2f: 38:9e:3e:a5:37:69:92:5c:79:d3:90:7b:68:f3:cd: 63:85:b8:22:51:85:9c:5c:f7:18:c4:d8:83:48:55: b4:0d:f6:b8:5b:ba:39:57:db:6f:cd:29:92:39:1d: fd:eb:8a:4c:1a:9a:46:4c:9b:6d:f2:84:1c:7e:20: a5:99:59:fb:a6:7d:be:57:53:bc:e2:e6:e1:45:ff: d5:4c:a5:ce:f0:4e:28:87:d4:02:6a:e4:38:c3:3a: 75:0b:0c:50:f6:18:b9:75:ee:2e:7d:fe:10:b2:49: b3:7a:d7:18:2a:d1:92:f4:99:d9:2e:3d:ef:09:83: 6f:ec:66:0c:7e:7d:6d:8c:68:d8:31:83:2a:4e:bf: a1:a9:17:04:5d:0c:03:46:01:86:cf:d2:49:12:e7: 79:f4:fd:e9:c4:ad:8e:d5:14:3f:df:8b:32:84:08: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F8:51:49:F3:4F:16:36:CA:FD:8B:CC:4E:82:89:5C:63:5B:9C:4F X509v3 Authority Key Identifier: keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e5:7f:e7:d6:17:c1:bf:6e:48:f5:e7:4d:72:42:f6:a9:df: ff:32:52:0d:d6:78:b4:95:10:15:3d:a9:1d:33:15:c3:6d:ba: ba:8d:d7:8b:9d:52:10:7f:ec:73:d1:eb:2b:26:5b:c6:90:37: 0f:6f:77:c9:da:d7:19:2f:57:8d:52:b0:99:97:be:31:4b:b0: c4:58:dc:55:51:9e:bd:2b:43:6d:6f:88:9a:7b:25:e0:b9:75: f3:35:99:b4:67:31:c5:39:8c:02:1c:1d:af:05:55:00:0a:6f: 54:0f:e0:75:73:f6:a5:25:7d:4c:da:a9:dd:bb:b8:d0:c1:01: 41:f4:33:e1:27:27:65:9b:f1:67:66:7e:5d:6b:ca:2a:b2:77: 27:ee:9c:c1:4c:1d:46:c8:09:23:4a:2d:54:17:20:6a:c5:e4: 86:25:6c:15:1b:80:f5:7c:1d:61:c6:93:73:30:7c:fd:18:88: 6e:be:4e:ce:c8:19:bd:7e:ab:5e:b4:2e:9e:46:0b:a5:58:24: 96:a9:42:bd:3d:e9:1c:26:1b:81:67:00:ba:e7:cc:b5:cd:4d: 9c:10:92:e4:75:da:9d:ab:47:ad:99:80:76:b1:54:8c:23:44: 48:08:16:a9:73:01:b1:a8:f1:04:19:1d:de:13:90:1a:bf:b2: 19:ef:b2:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpw6VryH4Ta6Aoi3u2iReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj ZGQ5ZDAwHhcNMjUxMTIyMTMwMDQzWhcNMjUxMTIzMTMwMDQzWjAzMTEwLwYDVQQD EygwNWY4NTE0OWYzNGYxNjM2Y2FmZDhiY2M0ZTgyODk1YzYzNWI5YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkMuzrPmSSccTPbRv1jcLQ4V86cG cru38Ux1Xo2NuZqTCb8WNwcmrzwEgKTXtPV+k3nYjdp8hjbfltCYPQYPyFZ0saK0 fltdxWnxlNOa5NMXYgPt7+/Bey84nj6lN2mSXHnTkHto881jhbgiUYWcXPcYxNiD SFW0Dfa4W7o5V9tvzSmSOR3964pMGppGTJtt8oQcfiClmVn7pn2+V1O84ubhRf/V TKXO8E4oh9QCauQ4wzp1CwxQ9hi5de4uff4QskmzetcYKtGS9JnZLj3vCYNv7GYM fn1tjGjYMYMqTr+hqRcEXQwDRgGGz9JJEud59P3pxK2O1RQ/34syhAjgAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX4UUnzTxY2yv2LzE6CiVxjW5xPMB8GA1UdIwQY MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2 LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+V/59YX wb9uSPXnTXJC9qnf/zJSDdZ4tJUQFT2pHTMVw226uo3Xi51SEH/sc9HrKyZbxpA3 D293ydrXGS9XjVKwmZe+MUuwxFjcVVGevStDbW+Imnsl4Ll18zWZtGcxxTmMAhwd rwVVAApvVA/gdXP2pSV9TNqp3bu40MEBQfQz4ScnZZvxZ2Z+XWvKKrJ3J+6cwUwd RsgJI0otVBcgasXkhiVsFRuA9XwdYcaTczB8/RiIbr5OzsgZvX6rXrQunkYLpVgk lqlCvT3pHCYbgWcAuufMtc1NnBCS5HXanatHrZmAdrFUjCNESAgWqXMBsajxBBkd 3hOQGr+yGe+y8w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:47:14 2025 by rpki-client