This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json) Hash identifier: CJvylxPu7AcOPqWQdfVQSPdKyZaXJjmZ1SjU3cZF6JE= Subject key identifier: 99:34:81:74:DD:1A:AA:73:6A:6D:2E:CD:75:7D:4F:D7:DE:0B:FE:C8 Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019B33E8E5E841843D7D8F0F123DDF0EEB27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft Manifest number: 52 Signing time: Fri 19 Dec 2025 00:00:59 +0000 Manifest this update: Fri 19 Dec 2025 00:00:59 +0000 Manifest next update: Sat 20 Dec 2025 00:00:59 +0000 Files and hashes: 1: A_0P_wYc_OEllR0zbsxJlPKyFvw.roa (hash: msjGR0Il4I4n4cOz691q2AapFwK62zADiANHUiiJFWI=) 2: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: RBJLgy7qXz1A52sfSYRhe885k7TZr3cYQa6pdA+mDkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:e5:e8:41:84:3d:7d:8f:0f:12:3d:df:0e:eb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Dec 19 00:00:59 2025 GMT Not After : Dec 20 00:00:59 2025 GMT Subject: CN=99348174dd1aaa736a6d2ecd757d4fd7de0bfec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:d2:5f:55:12:6d:cc:86:8c:7c:f9:4a:9e: 04:52:45:79:ef:22:8a:ea:3c:74:f7:13:bb:62:91: 36:45:b4:02:41:b5:85:3f:88:f2:9e:3c:eb:71:03: 9e:09:26:da:66:23:dc:91:eb:25:4c:1d:32:ec:07: e3:3c:b3:50:b0:2a:b4:2b:96:02:82:b3:08:2f:00: 9f:22:ab:2d:b9:a8:d5:ec:58:1f:fa:5e:72:44:a7: ba:9a:b6:1a:bc:87:38:1e:a5:ad:55:f8:c1:03:06: 93:2e:f5:de:78:4e:f8:2a:6e:36:52:08:67:b7:37: c3:b5:9b:5b:96:a0:2e:5d:39:21:63:74:f3:0f:eb: 7e:b0:2a:48:46:f0:96:24:a3:16:45:9d:de:37:b2: d8:98:2a:f2:8d:4a:2a:03:0b:b5:fe:dc:ae:4b:0a: 3e:1e:b3:c0:36:b3:f7:3b:c4:45:e0:87:c1:0f:14: bd:01:55:ab:49:85:e7:b2:10:5f:60:b2:50:af:22: cf:2d:a2:2b:09:dd:5e:db:46:6b:b1:d5:71:05:10: 3d:be:77:db:46:37:b7:8f:d7:e3:c8:b5:f5:cd:b7: 44:6a:de:35:af:2c:43:91:13:f0:d2:bd:03:ec:f3: 30:20:7d:83:23:6e:35:96:38:b2:f4:0e:75:65:88: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:34:81:74:DD:1A:AA:73:6A:6D:2E:CD:75:7D:4F:D7:DE:0B:FE:C8 X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1d:b8:6f:eb:d9:30:03:bc:8b:d6:ee:5a:b3:f3:ba:d2:b8: ce:bd:b8:68:ab:27:5e:58:21:dc:c3:6d:ed:b3:9a:35:b1:eb: dc:a4:f9:52:70:19:6b:7e:8b:78:9e:72:4d:a9:52:c4:bf:55: 74:82:7f:fa:8a:24:4d:12:ac:36:16:6d:69:49:d7:89:36:2e: b2:fb:07:c7:43:89:1c:4e:85:c5:7a:68:fa:2d:f6:fc:a9:df: 6c:7c:24:2c:e8:e1:f8:31:58:74:9b:d9:81:3c:7b:c6:b7:f3: ce:be:72:15:ec:65:f0:29:f4:35:14:98:81:0c:45:e3:41:2a: fd:41:59:5d:f4:c5:1f:8a:2f:6d:97:a1:0e:f8:61:7f:0a:7c: 5d:4b:6c:0d:c3:c2:d4:1f:11:0f:32:08:4e:3c:86:8f:84:11: 55:6b:3a:8e:e4:95:8e:17:b6:7f:aa:41:55:11:9e:75:d4:09: d0:e4:94:90:4d:5e:49:85:e5:91:53:a7:58:d2:59:d1:a0:13: 05:4e:5c:4c:9f:e7:2e:0f:ac:84:f5:2f:63:c3:b6:9d:e1:5f: 90:6d:dd:f2:3d:11:a0:c4:f0:90:20:92:10:0d:26:56:21:be: 24:49:3b:e8:dc:38:14:97:46:54:e6:d5:84:88:e1:d7:91:4d: 4f:d4:e9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OXoQYQ9fY8PEj3fDusnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjUxMjE5MDAwMDU5WhcNMjUxMjIwMDAwMDU5WjAzMTEwLwYDVQQD Eyg5OTM0ODE3NGRkMWFhYTczNmE2ZDJlY2Q3NTdkNGZkN2RlMGJmZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6DSX1USbcyGjHz5Sp4EUkV57yKK 6jx09xO7YpE2RbQCQbWFP4jynjzrcQOeCSbaZiPckeslTB0y7AfjPLNQsCq0K5YC grMILwCfIqstuajV7Fgf+l5yRKe6mrYavIc4HqWtVfjBAwaTLvXeeE74Km42Ughn tzfDtZtblqAuXTkhY3TzD+t+sCpIRvCWJKMWRZ3eN7LYmCryjUoqAwu1/tyuSwo+ HrPANrP3O8RF4IfBDxS9AVWrSYXnshBfYLJQryLPLaIrCd1e20ZrsdVxBRA9vnfb Rje3j9fjyLX1zbdEat41ryxDkRPw0r0D7PMwIH2DI241ljiy9A51ZYghEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk0gXTdGqpzam0uzXV9T9feC/7IMB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh24b+vZ MAO8i9buWrPzutK4zr24aKsnXlgh3MNt7bOaNbHr3KT5UnAZa36LeJ5yTalSxL9V dIJ/+ookTRKsNhZtaUnXiTYusvsHx0OJHE6FxXpo+i32/KnfbHwkLOjh+DFYdJvZ gTx7xrfzzr5yFexl8Cn0NRSYgQxF40Eq/UFZXfTFH4ovbZehDvhhfwp8XUtsDcPC 1B8RDzIITjyGj4QRVWs6juSVjhe2f6pBVRGeddQJ0OSUkE1eSYXlkVOnWNJZ0aAT BU5cTJ/nLg+shPUvY8O2neFfkG3d8j0RoMTwkCCSEA0mViG+JEk76Nw4FJdGVObV hIjh15FNT9TpOw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:34 2025 by rpki-client