This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json) Hash identifier: aiYxaBUFrHH2Az0cdARNTe2LZTaUDWza4cHBqOt+9kY= Subject key identifier: 0D:50:EA:D5:BC:00:8E:DF:A8:AD:3E:94:C7:63:3C:BD:B7:5D:06:04 Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4 Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4 Certificate serial: 019B4A035DD57A0AC04EAA402410606DDBC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft Manifest number: 0BF3 Signing time: Tue 23 Dec 2025 07:01:33 +0000 Manifest this update: Tue 23 Dec 2025 07:01:33 +0000 Manifest next update: Wed 24 Dec 2025 07:01:33 +0000 Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: F0F4cotNYPrwHyC8BPWsvD3GSerY/ppeSkU6FI1m9MM=) 2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:5d:d5:7a:0a:c0:4e:aa:40:24:10:60:6d:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4 Validity Not Before: Dec 23 07:01:33 2025 GMT Not After : Dec 24 07:01:33 2025 GMT Subject: CN=0d50ead5bc008edfa8ad3e94c7633cbdb75d0604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:8b:c9:dc:a3:c2:c3:b4:22:48:98:c8:59: 74:18:c5:ec:8e:27:8c:ff:18:9b:38:fb:3e:9c:4b: 82:c4:12:53:77:b4:3c:7a:03:87:f0:48:62:d1:e4: 47:71:ee:ba:db:43:7f:6d:3c:d0:21:8e:f9:e5:43: fc:1a:f8:fc:21:27:61:eb:2a:99:0a:2f:89:83:f5: cf:97:7f:2f:8a:50:15:33:23:2c:6a:39:ac:82:b3: f3:1f:2a:f1:d3:18:86:24:d0:c0:51:7a:a6:61:e1: 2b:41:d5:42:9b:9b:80:44:6e:85:bf:a7:cb:fa:7a: 42:67:0d:a1:85:59:74:49:4c:af:61:8d:c9:ed:0d: 0f:0b:90:86:b5:6e:17:9e:58:2d:49:89:20:b9:07: f0:bd:3f:70:75:1d:f8:6e:d7:17:b8:c8:6b:2f:09: 81:5c:0d:ac:8b:25:8c:75:6e:ac:89:18:d7:f3:d6: 16:d2:2a:70:b9:0e:af:3c:7a:07:0f:b4:72:c3:8e: c2:50:61:e6:43:73:75:09:b2:5c:9c:79:9e:86:74: 9d:a7:6a:46:94:1d:74:3f:1d:35:c9:d2:15:51:76: 46:8a:9d:c8:ce:98:71:b9:a5:a3:f1:51:65:aa:c3: ab:31:38:fa:4f:89:b8:59:36:23:21:f2:82:4d:5d: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:EA:D5:BC:00:8E:DF:A8:AD:3E:94:C7:63:3C:BD:B7:5D:06:04 X509v3 Authority Key Identifier: keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:d5:1b:fe:e4:3d:2e:52:54:4b:e6:da:9d:12:eb:14:cf: f9:79:2d:be:f2:f5:ad:8d:ac:a6:cc:45:8e:35:7d:01:41:8e: db:0c:68:d5:27:2b:92:ea:cd:5f:76:5b:7d:e1:dc:c3:b7:53: 4e:3d:ba:01:ee:48:06:01:cd:d1:b4:cd:f8:3e:5a:83:21:76: 7d:07:7e:6d:ef:18:3a:7c:59:cc:da:68:8f:68:47:19:a8:19: 1a:b2:ff:1e:d2:37:d8:4d:2b:6a:12:4a:94:0d:3d:5c:ce:0e: 49:b5:79:67:b7:f4:e8:29:10:44:be:93:67:69:fb:fd:92:52: 48:18:0f:b0:f5:23:1a:14:93:11:0f:41:09:2c:f8:73:b5:69: ad:1d:28:31:93:c7:71:63:9c:d8:95:43:6d:6f:be:ce:ac:d9: c6:37:3b:c3:d4:a1:f3:0e:76:ca:de:41:25:2b:18:4e:b0:50: e4:a8:02:b9:0a:40:48:e8:b3:8e:fb:d3:45:05:c6:c7:f4:9d: e8:ab:34:38:8e:ce:62:32:8a:6a:e7:0b:54:81:21:bd:f4:92: 30:d2:5e:3a:8d:e3:f4:34:22:03:21:f8:fb:b7:ab:a3:bd:31: 3b:11:46:85:51:24:64:4e:ad:96:92:33:51:3f:bf:38:b9:8d: 41:29:bf:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA13VegrATqpAJBBgbdvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmNjNDg2NzQ5YWIzYWI4MDRjZjExOThjYmY1NzVhODQw NWE4ZDQwHhcNMjUxMjIzMDcwMTMzWhcNMjUxMjI0MDcwMTMzWjAzMTEwLwYDVQQD EygwZDUwZWFkNWJjMDA4ZWRmYThhZDNlOTRjNzYzM2NiZGI3NWQwNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5yLydyjwsO0IkiYyFl0GMXsjieM /xibOPs+nEuCxBJTd7Q8egOH8Ehi0eRHce6620N/bTzQIY755UP8Gvj8ISdh6yqZ Ci+Jg/XPl38vilAVMyMsajmsgrPzHyrx0xiGJNDAUXqmYeErQdVCm5uARG6Fv6fL +npCZw2hhVl0SUyvYY3J7Q0PC5CGtW4XnlgtSYkguQfwvT9wdR34btcXuMhrLwmB XA2siyWMdW6siRjX89YW0ipwuQ6vPHoHD7Ryw47CUGHmQ3N1CbJcnHmehnSdp2pG lB10Px01ydIVUXZGip3IzphxuaWj8VFlqsOrMTj6T4m4WTYjIfKCTV3vZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1Q6tW8AI7fqK0+lMdjPL23XQYEMB8GA1UdIwQY MBaAFAW8xIZ0mrOrgEzxGYy/V1qEBajUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEt N2Y2OTlhODNiYjBjLzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEtN2Y2OTlhODNiYjBj LzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH7VG/7k PS5SVEvm2p0S6xTP+XktvvL1rY2spsxFjjV9AUGO2wxo1ScrkurNX3ZbfeHcw7dT Tj26Ae5IBgHN0bTN+D5agyF2fQd+be8YOnxZzNpoj2hHGagZGrL/HtI32E0rahJK lA09XM4OSbV5Z7f06CkQRL6TZ2n7/ZJSSBgPsPUjGhSTEQ9BCSz4c7VprR0oMZPH cWOc2JVDbW++zqzZxjc7w9Sh8w52yt5BJSsYTrBQ5KgCuQpASOizjvvTRQXGx/Sd 6Ks0OI7OYjKKaucLVIEhvfSSMNJeOo3j9DQiAyH4+7ero70xOxFGhVEkZE6tlpIz UT+/OLmNQSm/KQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:20:15 2025 by rpki-client