This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json) Hash identifier: CHMpRkG9SP8s56POJaHsfmLDVH9QkaTerasLw/ut628= Subject key identifier: 70:CA:91:F4:E9:A3:11:4A:18:59:E1:92:6A:FF:63:AE:41:9E:D2:91 Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Certificate serial: 019B405C3C6321B3301DBE9E6395E25C78FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft Manifest number: 025C Signing time: Sun 21 Dec 2025 10:02:25 +0000 Manifest this update: Sun 21 Dec 2025 10:02:25 +0000 Manifest next update: Mon 22 Dec 2025 10:02:25 +0000 Files and hashes: 1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: 8xtWPXPmV3oEInMc9klhfqSkYOidS0e2htP+ydXoj00=) 2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:3c:63:21:b3:30:1d:be:9e:63:95:e2:5c:78:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Validity Not Before: Dec 21 10:02:25 2025 GMT Not After : Dec 22 10:02:25 2025 GMT Subject: CN=70ca91f4e9a3114a1859e1926aff63ae419ed291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:26:d6:a8:3f:5b:74:81:b5:d3:df:91:18: be:6e:18:4c:13:93:8c:8e:eb:43:4d:74:f6:89:b7: a4:9a:c7:77:21:f4:7b:0b:8b:31:11:4a:b1:21:bb: 1a:73:56:d9:6d:5d:90:6f:e0:14:1f:90:47:a7:b3: b9:a6:af:34:7a:ab:30:f6:b9:b6:e1:57:a8:2f:0f: f4:aa:a7:df:2e:78:20:23:90:98:33:18:cf:ad:df: 8e:46:c4:0c:7f:01:3c:4c:c7:f0:3c:69:3f:76:16: c6:78:f7:bf:6e:9d:b8:e1:f8:cb:72:70:bb:03:91: c6:dd:0f:4d:8d:e9:50:d0:38:29:a1:ba:d8:bf:9f: 98:23:21:cf:59:23:57:3a:e5:8c:61:ec:46:fb:87: 89:93:dc:35:56:b4:17:2c:5b:7e:7f:42:e1:89:96: 08:53:15:77:a4:6e:b8:4e:61:fb:ed:e6:19:c9:6e: 65:ff:d0:8d:fb:27:90:6d:cb:9b:22:cd:69:9e:f9: ab:9b:ca:a5:2b:46:3a:17:47:3a:42:7b:e4:11:52: c1:93:a9:5c:bc:1c:38:7c:3e:0c:08:43:ac:74:0a: ae:81:d4:ad:39:17:e5:51:cf:8a:88:c5:75:d7:a2: 92:02:a1:a8:4f:90:29:87:d9:a0:bb:91:2f:de:fe: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CA:91:F4:E9:A3:11:4A:18:59:E1:92:6A:FF:63:AE:41:9E:D2:91 X509v3 Authority Key Identifier: keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:5f:30:26:19:b3:8e:8f:08:09:3a:0c:25:81:a2:cb:d0: a3:fd:f4:c9:1c:3f:7c:99:57:a7:9b:15:a0:13:fd:4c:f4:f1: ce:88:5d:b7:1f:ed:f0:76:eb:43:1d:a0:0e:6c:3c:05:23:f2: 0c:95:3b:42:04:5a:3a:e3:89:b8:0f:bf:0d:0f:65:c5:51:c3: 23:5c:da:44:07:0e:a4:dd:73:c3:06:65:9f:cf:d6:6a:54:81: a6:6c:de:1d:08:e6:05:6e:e6:70:a1:68:13:d8:5f:11:5c:8d: 7a:e0:41:29:56:32:cd:3e:92:7a:d9:21:33:1b:3d:76:bb:ab: c1:2a:64:85:19:bc:03:47:f4:4c:52:b2:79:14:b7:32:9b:35: 7e:1c:cb:f8:d7:06:aa:22:eb:03:c1:9f:4b:00:ab:d6:6f:31: fc:d7:bd:51:a2:ed:c9:5c:c4:3f:d9:05:22:d0:4b:98:cb:29: b2:39:1f:02:8c:0f:92:81:56:63:e5:a2:bb:c0:3e:21:72:23: 43:be:28:03:d4:ed:41:21:64:3a:2a:5e:2a:74:59:3a:33:53: 5b:4a:da:10:48:86:c2:68:83:93:7d:e4:1f:f6:4f:20:d7:f1: ff:9d:64:34:18:69:58:df:09:76:fd:c9:d8:d4:e5:86:40:13: 1a:dc:2b:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXDxjIbMwHb6eY5XiXHj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy ZTM2ZWYwHhcNMjUxMjIxMTAwMjI1WhcNMjUxMjIyMTAwMjI1WjAzMTEwLwYDVQQD Eyg3MGNhOTFmNGU5YTMxMTRhMTg1OWUxOTI2YWZmNjNhZTQxOWVkMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs38m1qg/W3SBtdPfkRi+bhhME5OM jutDTXT2ibekmsd3IfR7C4sxEUqxIbsac1bZbV2Qb+AUH5BHp7O5pq80eqsw9rm2 4VeoLw/0qqffLnggI5CYMxjPrd+ORsQMfwE8TMfwPGk/dhbGePe/bp244fjLcnC7 A5HG3Q9NjelQ0DgpobrYv5+YIyHPWSNXOuWMYexG+4eJk9w1VrQXLFt+f0LhiZYI UxV3pG64TmH77eYZyW5l/9CN+yeQbcubIs1pnvmrm8qlK0Y6F0c6QnvkEVLBk6lc vBw4fD4MCEOsdAqugdStORflUc+KiMV116KSAqGoT5Aph9mgu5Ev3v5rmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDKkfTpoxFKGFnhkmr/Y65BntKRMB8GA1UdIwQY MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4 LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzJfMCYZ s46PCAk6DCWBosvQo/30yRw/fJlXp5sVoBP9TPTxzohdtx/t8HbrQx2gDmw8BSPy DJU7QgRaOuOJuA+/DQ9lxVHDI1zaRAcOpN1zwwZln8/WalSBpmzeHQjmBW7mcKFo E9hfEVyNeuBBKVYyzT6SetkhMxs9drurwSpkhRm8A0f0TFKyeRS3Mps1fhzL+NcG qiLrA8GfSwCr1m8x/Ne9UaLtyVzEP9kFItBLmMspsjkfAowPkoFWY+Wiu8A+IXIj Q74oA9TtQSFkOipeKnRZOjNTW0raEEiGwmiDk33kH/ZPINfx/51kNBhpWN8Jdv3J 2NTlhkATGtwrSA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:29 2025 by rpki-client