This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json) Hash identifier: Tfc6QxfTP6jC2vtiPUJFObxnV2gOcj1oSawVEdOr3jY= Subject key identifier: 69:AF:D2:B6:70:2C:20:B5:72:9A:4F:CD:FE:4D:7E:8E:11:0C:C5:03 Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Certificate serial: 019B43CA16E316EEC5D233B0B9AE4AE94486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:01:16 +0000 Manifest this update: Mon 22 Dec 2025 02:01:16 +0000 Manifest next update: Tue 23 Dec 2025 02:01:16 +0000 Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=) 2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: ODCMn6zobv5kXoCFpmSj/wHHpeoxkODBQyD61EmKRv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:16:e3:16:ee:c5:d2:33:b0:b9:ae:4a:e9:44:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Validity Not Before: Dec 22 02:01:16 2025 GMT Not After : Dec 23 02:01:16 2025 GMT Subject: CN=69afd2b6702c20b5729a4fcdfe4d7e8e110cc503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:23:3a:d4:ab:20:dd:3c:4d:64:a1:81:44: 3f:25:64:23:dd:bd:18:94:05:d9:63:d3:47:63:a9: 30:f4:02:73:d7:66:35:aa:a3:35:00:70:cc:ca:53: 24:ad:cd:3b:08:d2:a2:de:6a:d2:f6:5f:c7:dc:f6: 03:9b:ab:33:08:a0:9e:02:66:e1:9f:ae:ab:37:f3: 06:6f:9d:41:fc:17:62:e0:76:24:c4:2f:fd:e5:ea: ea:57:0d:bd:f7:6d:df:7b:9a:c7:02:f2:e0:94:f4: 6d:12:b2:45:f2:86:76:da:bf:94:29:2d:d2:cc:9b: 5b:11:a7:41:27:11:c9:a5:9b:5a:bf:52:49:31:4b: f1:f2:43:84:7f:ba:87:25:ea:fe:3a:90:ab:80:7a: 2c:28:07:dc:67:49:00:6e:39:44:b8:cc:64:36:79: 03:c1:0c:15:58:24:f4:94:72:8e:20:d4:3c:c3:95: 2b:cb:60:20:f2:20:dd:26:1e:91:93:30:e4:ad:be: f0:8c:d9:9d:5a:28:bd:51:8b:98:38:53:31:91:4c: 88:f7:fc:19:63:87:45:6e:9f:1a:5b:7a:a4:b6:86: c8:bf:a1:69:0a:e4:8a:b8:02:0f:57:a9:da:b4:0d: 3b:23:d2:73:f0:9c:54:da:3f:c1:f3:4c:bf:dd:c4: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:D2:B6:70:2C:20:B5:72:9A:4F:CD:FE:4D:7E:8E:11:0C:C5:03 X509v3 Authority Key Identifier: keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:45:1a:4b:5c:9f:5f:a6:3f:f6:34:89:36:95:77:7b:10:64: fe:a2:f5:41:e7:84:1b:bb:c5:e7:85:c1:e1:44:32:a5:2b:3c: 4f:44:06:d4:f7:de:6f:cb:3f:68:a7:85:b4:90:67:70:9d:d6: af:a4:c3:50:9d:66:ed:6c:2c:5c:4a:93:a3:2f:89:a7:75:f7: a5:52:d3:1c:58:21:39:f1:26:2b:9d:ef:a9:ed:de:3c:48:ce: b7:3f:b6:ba:0e:a9:d6:6f:61:d3:3f:44:e3:3e:49:5c:29:46: ba:f2:2b:ce:2c:44:11:4b:21:63:b5:75:07:fc:f2:24:85:0e: 7d:1c:f1:6a:55:d9:33:08:7f:44:76:a8:ec:8b:5c:8d:25:74: 6e:86:6f:21:b1:d2:cb:a4:29:b7:08:69:bf:8e:cb:fa:31:a3: 1d:fb:51:46:c9:a3:91:5f:ff:e9:a9:87:05:c0:4b:6f:66:d6: e4:c1:6a:2b:57:a3:31:39:74:db:33:e9:bd:e4:3b:52:4b:55: 64:28:71:d9:26:5a:d7:bd:b5:04:44:c2:9b:2a:5d:39:26:6c: b8:ee:75:bf:b4:d9:e3:1b:9b:ec:51:b1:36:05:80:74:c1:f4: e1:35:4f:53:18:72:14:f6:e4:c4:45:dc:ce:89:61:be:04:0f: e5:50:4c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyhbjFu7F0jOwua5K6USGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2 OTkwZjcwHhcNMjUxMjIyMDIwMTE2WhcNMjUxMjIzMDIwMTE2WjAzMTEwLwYDVQQD Eyg2OWFmZDJiNjcwMmMyMGI1NzI5YTRmY2RmZTRkN2U4ZTExMGNjNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqgjOtSrIN08TWShgUQ/JWQj3b0Y lAXZY9NHY6kw9AJz12Y1qqM1AHDMylMkrc07CNKi3mrS9l/H3PYDm6szCKCeAmbh n66rN/MGb51B/Bdi4HYkxC/95erqVw29923fe5rHAvLglPRtErJF8oZ22r+UKS3S zJtbEadBJxHJpZtav1JJMUvx8kOEf7qHJer+OpCrgHosKAfcZ0kAbjlEuMxkNnkD wQwVWCT0lHKOINQ8w5Ury2Ag8iDdJh6RkzDkrb7wjNmdWii9UYuYOFMxkUyI9/wZ Y4dFbp8aW3qktobIv6FpCuSKuAIPV6natA07I9Jz8JxU2j/B80y/3cQqbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmv0rZwLCC1cppPzf5Nfo4RDMUDMB8GA1UdIwQY MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt MGZiZTdiZDc2ZmZiLzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0UaS1yf X6Y/9jSJNpV3exBk/qL1QeeEG7vF54XB4UQypSs8T0QG1Pfeb8s/aKeFtJBncJ3W r6TDUJ1m7WwsXEqToy+Jp3X3pVLTHFghOfEmK53vqe3ePEjOtz+2ug6p1m9h0z9E 4z5JXClGuvIrzixEEUshY7V1B/zyJIUOfRzxalXZMwh/RHao7ItcjSV0boZvIbHS y6Qptwhpv47L+jGjHftRRsmjkV//6amHBcBLb2bW5MFqK1ejMTl02zPpveQ7UktV ZChx2SZa1721BETCmypdOSZsuO51v7TZ4xub7FGxNgWAdMH04TVPUxhyFPbkxEXc zolhvgQP5VBMUw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:52:39 2025 by rpki-client