This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json) Hash identifier: klPSnar+AMWFaBXfZDZ2SeDAt8DqtkIvVjG7d2cap2k= Subject key identifier: 74:D5:13:2D:5C:04:38:62:5A:1A:BD:1F:D3:27:B2:EE:80:3E:27:03 Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Certificate serial: 019B5CE4930022F4552CC6DC05EBAA73B084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 23:00:42 +0000 Manifest this update: Fri 26 Dec 2025 23:00:42 +0000 Manifest next update: Sat 27 Dec 2025 23:00:42 +0000 Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=) 2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: OtsCEtcVVrpaFxrpbirumYCSnyyzqs1f0bxldBIePOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:93:00:22:f4:55:2c:c6:dc:05:eb:aa:73:b0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Validity Not Before: Dec 26 23:00:42 2025 GMT Not After : Dec 27 23:00:42 2025 GMT Subject: CN=74d5132d5c0438625a1abd1fd327b2ee803e2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:c2:11:d5:98:07:3f:2d:8e:ce:a4:bb:f8: 24:82:b1:cf:c9:2a:ec:37:db:b5:0b:50:e8:7a:d5: 94:dd:90:87:5e:16:25:1c:1a:34:f4:05:11:05:0c: fb:18:77:03:07:54:56:7b:82:ee:d3:2c:83:26:dc: 79:62:31:c3:0f:05:4b:ca:cf:8d:d8:ad:c2:d8:dc: 42:7f:59:c9:f7:c0:70:9e:39:8b:df:f8:05:1f:67: 7f:7f:d3:11:1a:3a:25:7e:6a:0e:11:55:3f:3c:04: 0e:06:7d:1d:02:6d:b1:e7:95:21:d8:d8:67:9c:91: 6b:f3:3b:fa:db:65:2a:9a:b3:af:34:1e:2d:45:32: 8a:f7:db:af:62:7a:f4:5e:1e:be:00:d0:59:13:b8: 7a:0a:21:19:85:db:90:6d:99:4e:4d:3c:e3:29:e2: 59:b8:08:d0:20:ab:c6:e7:b9:c4:2c:03:4a:ed:d5: 2b:48:54:7a:ba:cb:d1:90:4e:b5:0c:94:d6:35:b7: 8c:32:7e:4c:f6:27:3e:0e:36:a2:e7:a7:f3:86:9d: af:f3:81:d8:b7:aa:b0:08:46:d1:a3:92:d4:1d:9f: 7b:67:b9:0c:ed:bd:d7:a8:a5:64:8a:bb:f7:f6:5b: 04:86:d6:03:b3:f0:10:4e:00:a5:52:f9:a7:45:ab: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:13:2D:5C:04:38:62:5A:1A:BD:1F:D3:27:B2:EE:80:3E:27:03 X509v3 Authority Key Identifier: keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e8:e4:c6:3c:7e:3f:24:02:be:b3:6c:75:84:85:e5:0e:7b: f6:41:72:c5:19:e9:58:3f:a1:9c:93:22:11:fa:84:9f:4a:a7: f4:06:22:af:b6:4e:21:2e:4b:a6:d9:5e:eb:aa:25:99:70:18: e6:69:aa:15:6d:96:27:fa:60:2e:f8:c7:7e:44:3f:d0:f0:d2: 6f:1f:01:71:10:5c:fd:01:be:dc:dc:5d:08:83:68:be:b6:49: 73:16:61:64:66:77:fe:a9:09:e7:3b:6d:41:43:74:c8:79:98: a9:4b:ed:4a:7f:1f:20:17:d4:e3:b3:99:9a:0c:2d:31:d3:17: d1:54:df:0c:d6:4c:4f:3f:26:b1:65:14:08:0d:84:2f:ed:c2: 95:0e:35:cc:76:46:ae:0a:4f:13:ca:fb:17:9b:a6:17:fe:1b: 3e:bf:71:cd:71:66:fa:c0:53:41:9a:b9:6f:20:0f:39:1c:1e: a7:89:38:66:fb:5f:04:d6:9e:9c:d3:13:42:bb:7d:cf:2f:6e: 52:3b:70:c0:d5:7f:5b:73:4e:7f:cd:c5:92:2a:5a:30:e1:e5: ef:05:19:e9:ec:10:ac:f4:0b:63:b1:e3:df:48:ec:e2:d2:b0: 1f:6b:fa:45:4d:42:c0:82:61:b0:db:47:e9:ab:15:cf:30:15: 6d:6b:fd:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5JMAIvRVLMbcBeuqc7CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2 OTkwZjcwHhcNMjUxMjI2MjMwMDQyWhcNMjUxMjI3MjMwMDQyWjAzMTEwLwYDVQQD Eyg3NGQ1MTMyZDVjMDQzODYyNWExYWJkMWZkMzI3YjJlZTgwM2UyNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqLCEdWYBz8tjs6ku/gkgrHPySrs N9u1C1DoetWU3ZCHXhYlHBo09AURBQz7GHcDB1RWe4Lu0yyDJtx5YjHDDwVLys+N 2K3C2NxCf1nJ98BwnjmL3/gFH2d/f9MRGjolfmoOEVU/PAQOBn0dAm2x55Uh2Nhn nJFr8zv622UqmrOvNB4tRTKK99uvYnr0Xh6+ANBZE7h6CiEZhduQbZlOTTzjKeJZ uAjQIKvG57nELANK7dUrSFR6usvRkE61DJTWNbeMMn5M9ic+Djai56fzhp2v84HY t6qwCEbRo5LUHZ97Z7kM7b3XqKVkirv39lsEhtYDs/AQTgClUvmnRavJTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTVEy1cBDhiWhq9H9Mnsu6APicDMB8GA1UdIwQY MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtujkxjx+ PyQCvrNsdYSF5Q579kFyxRnpWD+hnJMiEfqEn0qn9AYir7ZOIS5Lptle66olmXAY 5mmqFW2WJ/pgLvjHfkQ/0PDSbx8BcRBc/QG+3NxdCINovrZJcxZhZGZ3/qkJ5ztt QUN0yHmYqUvtSn8fIBfU47OZmgwtMdMX0VTfDNZMTz8msWUUCA2EL+3ClQ41zHZG rgpPE8r7F5umF/4bPr9xzXFm+sBTQZq5byAPORwep4k4ZvtfBNaenNMTQrt9zy9u UjtwwNV/W3NOf83FkipaMOHl7wUZ6ewQrPQLY7Hj30js4tKwH2v6RU1CwIJhsNtH 6asVzzAVbWv9Dg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:23:19 2025 by rpki-client