This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json) Hash identifier: keV/BvzibBDnUSLpA7n1qxOY6ySvY853DEbh1tvvF9k= Subject key identifier: C9:A1:2F:D6:01:80:CE:B5:A8:39:AE:E8:D7:6A:83:A3:F1:B4:77:8B Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Certificate serial: 019B0E26249531F3AE2045B84B8539DFEDBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:02:19 +0000 Manifest this update: Thu 11 Dec 2025 16:02:19 +0000 Manifest next update: Fri 12 Dec 2025 16:02:19 +0000 Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=) 2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=) 3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: TSQ5xIYUVa70kzZ+7eWfi9fUucsIfkIMQ/aX+4xRb0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:24:95:31:f3:ae:20:45:b8:4b:85:39:df:ed:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Validity Not Before: Dec 11 16:02:19 2025 GMT Not After : Dec 12 16:02:19 2025 GMT Subject: CN=c9a12fd60180ceb5a839aee8d76a83a3f1b4778b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:ee:a7:98:31:fa:3f:b3:ad:55:a3:b3:54: c2:44:f3:f5:26:de:0f:4a:24:77:24:3c:40:06:74: 7b:ae:0c:72:e2:78:d1:bf:f3:a8:26:48:67:1a:80: c0:f1:d9:ae:7f:0f:68:27:32:ba:db:95:96:88:59: fa:13:fc:b9:6c:15:f2:1d:23:11:82:ac:ce:90:e1: b4:1c:2d:96:9b:50:d7:f3:09:86:4f:03:08:d4:b0: 4c:64:ff:a0:73:02:36:84:f1:d1:1f:57:1b:cf:d6: 34:8f:e6:01:05:b5:44:93:23:37:90:6a:cc:e1:ba: a2:f4:70:b5:11:73:ed:8a:eb:f1:cb:4e:0a:36:2b: 4e:fb:35:3b:a3:09:ac:44:f2:83:49:aa:33:75:d8: ad:b9:8c:92:c2:a1:48:eb:e9:b6:a1:c6:a1:95:21: 3e:5a:0a:58:d8:38:21:fb:0f:f4:b5:a3:a3:bc:d3: 76:f1:de:ce:52:f5:5d:c9:03:5f:e8:c9:7d:52:a3: bb:21:d0:6c:80:58:d6:11:a2:88:df:ab:46:83:6a: f2:d6:13:80:79:75:e8:77:e3:de:77:96:bd:e6:1d: 33:40:e7:e4:c3:2b:f3:74:ba:ac:14:36:71:14:94: f9:95:5f:16:a0:83:22:36:79:3d:dd:1a:7a:73:59: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:2F:D6:01:80:CE:B5:A8:39:AE:E8:D7:6A:83:A3:F1:B4:77:8B X509v3 Authority Key Identifier: keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f7:eb:c3:59:02:a0:74:01:1e:e8:77:4b:f0:a2:b5:06:f8: 1e:45:7b:5a:ae:df:52:73:0a:70:49:2d:e9:69:30:20:1b:01: 6c:67:04:f7:b9:7a:85:04:aa:65:6d:bf:e6:68:2d:1d:59:f0: e7:99:5b:58:ee:68:a8:cd:88:ea:60:4e:a2:fb:02:d4:f9:9b: 75:77:a5:35:f6:53:14:8b:c9:0a:15:d2:14:b5:8e:eb:4a:19: fc:83:b6:d3:df:05:00:e3:d8:3b:fc:a4:6a:8f:2c:4e:dc:07: 91:77:5b:76:a4:df:65:b9:b7:7d:90:fb:43:1c:26:1b:ac:a7: ef:14:df:ac:c2:3f:f8:52:77:73:c2:3c:af:20:94:d9:8b:9e: 81:e5:04:92:d5:18:38:2e:1a:7c:c1:f1:a2:9c:6a:0a:4a:1c: 43:77:56:90:4b:a6:c0:3e:f0:5d:f3:38:3f:6a:f0:45:dd:9d: e5:39:78:05:3f:41:43:c1:dc:d2:94:34:64:29:be:ea:db:58: 90:e3:8b:37:3d:4c:6b:5b:e9:29:c8:dc:74:19:43:d3:a1:30: c4:94:7b:7f:3c:f5:00:77:e9:68:fc:20:07:6c:8d:72:e3:c5: 78:c1:78:63:26:b9:fe:80:b8:69:2a:e4:33:d9:e7:97:d4:0b: ed:22:f6:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJiSVMfOuIEW4S4U53+29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5 ZTViM2UwHhcNMjUxMjExMTYwMjE5WhcNMjUxMjEyMTYwMjE5WjAzMTEwLwYDVQQD EyhjOWExMmZkNjAxODBjZWI1YTgzOWFlZThkNzZhODNhM2YxYjQ3NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzup5gx+j+zrVWjs1TCRPP1Jt4P SiR3JDxABnR7rgxy4njRv/OoJkhnGoDA8dmufw9oJzK625WWiFn6E/y5bBXyHSMR gqzOkOG0HC2Wm1DX8wmGTwMI1LBMZP+gcwI2hPHRH1cbz9Y0j+YBBbVEkyM3kGrM 4bqi9HC1EXPtiuvxy04KNitO+zU7owmsRPKDSaozddituYySwqFI6+m2ocahlSE+ WgpY2Dgh+w/0taOjvNN28d7OUvVdyQNf6Ml9UqO7IdBsgFjWEaKI36tGg2ry1hOA eXXod+Ped5a95h0zQOfkwyvzdLqsFDZxFJT5lV8WoIMiNnk93Rp6c1nRLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmhL9YBgM61qDmu6Ndqg6PxtHeLMB8GA1UdIwQY MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5 LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/frw1kC oHQBHuh3S/CitQb4HkV7Wq7fUnMKcEkt6WkwIBsBbGcE97l6hQSqZW2/5mgtHVnw 55lbWO5oqM2I6mBOovsC1PmbdXelNfZTFIvJChXSFLWO60oZ/IO2098FAOPYO/yk ao8sTtwHkXdbdqTfZbm3fZD7QxwmG6yn7xTfrMI/+FJ3c8I8ryCU2YuegeUEktUY OC4afMHxopxqCkocQ3dWkEumwD7wXfM4P2rwRd2d5Tl4BT9BQ8Hc0pQ0ZCm+6ttY kOOLNz1Ma1vpKcjcdBlD06EwxJR7fzz1AHfpaPwgB2yNcuPFeMF4Yya5/oC4aSrk M9nnl9QL7SL25w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:14 2025 by rpki-client