This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json) Hash identifier: ULvUg3csDcLrpfWLVty5xgtTtuNPkjUzhgfxu5n55BU= Subject key identifier: 70:11:34:FD:B0:29:01:AB:58:ED:26:2C:51:0A:B7:7D:4C:0F:3D:9C Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019B4B1513A04528E09ED49F35CE3EE6481B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft Manifest number: 5E Signing time: Tue 23 Dec 2025 12:00:30 +0000 Manifest this update: Tue 23 Dec 2025 12:00:30 +0000 Manifest next update: Wed 24 Dec 2025 12:00:30 +0000 Files and hashes: 1: A_0P_wYc_OEllR0zbsxJlPKyFvw.roa (hash: msjGR0Il4I4n4cOz691q2AapFwK62zADiANHUiiJFWI=) 2: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: 0MHygY7x/GYRYdIy0d9Hf7P8kO5RJ+CeAY7CBHlKkqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:13:a0:45:28:e0:9e:d4:9f:35:ce:3e:e6:48:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Dec 23 12:00:30 2025 GMT Not After : Dec 24 12:00:30 2025 GMT Subject: CN=701134fdb02901ab58ed262c510ab77d4c0f3d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:63:04:9b:ea:7a:54:e0:d2:e7:db:7c:c0: eb:fa:8f:20:a1:06:c6:14:b9:74:35:88:8b:1d:99: a8:c4:23:30:0b:cf:8b:13:46:f4:d6:94:3b:a1:51: 64:35:00:69:07:cd:20:60:55:bb:b8:45:96:5a:1c: 04:6f:65:8d:76:fb:20:e7:2d:4c:42:e7:e1:1b:a9: 63:10:5e:ef:6f:74:08:71:76:74:b3:b7:4b:d9:5a: 40:f9:12:87:4f:16:78:bb:d4:36:5c:47:e6:6c:56: 3c:34:c1:85:20:7a:ae:90:7c:47:82:6f:40:b5:97: 32:6d:0a:39:32:fb:88:2b:d4:ab:5f:21:00:f4:60: d3:cf:60:cc:7f:a9:b9:81:3f:44:cf:dd:42:51:cf: f4:a1:24:da:f8:0d:be:54:fa:86:bd:26:6c:2f:f5: 39:fc:54:92:5c:ed:41:af:1b:7d:88:dc:10:af:f9: b6:53:67:3a:62:80:46:ec:df:d7:ec:9c:39:b0:36: d5:1c:06:33:fb:e6:da:47:e6:23:a9:06:b9:24:31: 0a:54:ef:b4:66:4c:81:40:3b:38:74:80:04:ae:53: 5a:a2:43:c5:05:c4:23:13:61:0d:4b:ce:8f:8d:f3: 8d:65:67:22:26:aa:cd:e1:10:13:cd:9b:fa:92:c5: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:11:34:FD:B0:29:01:AB:58:ED:26:2C:51:0A:B7:7D:4C:0F:3D:9C X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f3:8b:d3:dd:4a:6c:45:64:47:d9:cf:9f:3b:ce:66:f3:8d: 67:78:c9:3a:a6:f9:ca:da:62:97:97:7e:4f:f9:47:8a:00:c5: ca:f3:14:36:bf:d2:41:a8:65:c9:02:ba:a7:c4:3a:6e:a5:76: 20:32:17:68:b3:48:5c:cb:ee:35:a1:d6:e5:2b:86:34:06:02: 3f:d1:ab:0b:da:60:50:d7:97:e8:51:32:05:89:1d:60:3a:2a: de:58:43:25:16:4e:b7:2a:86:b5:77:6d:c9:a5:32:6a:08:6a: 61:1f:36:79:31:3b:e3:08:cd:76:84:a9:1d:2e:7f:7d:7b:95: f7:2a:21:6d:59:36:ba:10:84:4a:34:06:47:0e:29:47:37:15: de:23:31:0c:f8:e0:33:f5:97:15:0c:2b:7b:37:7f:14:93:9d: c6:69:13:c4:43:11:d6:c0:0f:35:ca:e6:c1:f6:15:cd:4f:d7: b9:d6:60:0a:5f:0f:c7:55:96:3d:23:51:42:41:98:84:0b:bb: 40:b3:4f:81:84:a8:24:89:06:7f:70:27:e0:97:29:70:8c:58: 86:2a:df:ba:8e:4b:03:8d:d8:7c:d0:de:8d:9c:31:ba:79:33: e7:1f:15:49:88:39:59:12:b1:df:e6:06:9e:c7:8c:56:b7:07: 59:c7:f4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFROgRSjgntSfNc4+5kgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjUxMjIzMTIwMDMwWhcNMjUxMjI0MTIwMDMwWjAzMTEwLwYDVQQD Eyg3MDExMzRmZGIwMjkwMWFiNThlZDI2MmM1MTBhYjc3ZDRjMGYzZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5jBJvqelTg0ufbfMDr+o8goQbG FLl0NYiLHZmoxCMwC8+LE0b01pQ7oVFkNQBpB80gYFW7uEWWWhwEb2WNdvsg5y1M QufhG6ljEF7vb3QIcXZ0s7dL2VpA+RKHTxZ4u9Q2XEfmbFY8NMGFIHqukHxHgm9A tZcybQo5MvuIK9SrXyEA9GDTz2DMf6m5gT9Ez91CUc/0oSTa+A2+VPqGvSZsL/U5 /FSSXO1Brxt9iNwQr/m2U2c6YoBG7N/X7Jw5sDbVHAYz++baR+YjqQa5JDEKVO+0 ZkyBQDs4dIAErlNaokPFBcQjE2ENS86PjfONZWciJqrN4RATzZv6ksUf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHARNP2wKQGrWO0mLFEKt31MDz2cMB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/OL091K bEVkR9nPnzvOZvONZ3jJOqb5ytpil5d+T/lHigDFyvMUNr/SQahlyQK6p8Q6bqV2 IDIXaLNIXMvuNaHW5SuGNAYCP9GrC9pgUNeX6FEyBYkdYDoq3lhDJRZOtyqGtXdt yaUyaghqYR82eTE74wjNdoSpHS5/fXuV9yohbVk2uhCESjQGRw4pRzcV3iMxDPjg M/WXFQwrezd/FJOdxmkTxEMR1sAPNcrmwfYVzU/XudZgCl8Px1WWPSNRQkGYhAu7 QLNPgYSoJIkGf3An4JcpcIxYhirfuo5LA43YfNDejZwxunkz5x8VSYg5WRKx3+YG nseMVrcHWcf0/A== -----END CERTIFICATE-----Generated at Tue Dec 23 18:15:41 2025 by rpki-client