This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json) Hash identifier: xtLKIkEB6hy498XLgPCKYe77XYpw2X2EjGoNBqvwwfU= Subject key identifier: 21:58:D9:58:F9:F8:F7:C0:8A:21:05:B1:EC:78:61:23:33:52:AE:29 Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Certificate serial: 019B3C7F39DD1F070413FB9A4EE3C0E79240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:09 +0000 Manifest this update: Sat 20 Dec 2025 16:02:09 +0000 Manifest next update: Sun 21 Dec 2025 16:02:09 +0000 Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=) 2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=) 3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: pNtNFslJmqrhzhSP/+bI2gL4J9JMd5wDUOW7avoLQFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:39:dd:1f:07:04:13:fb:9a:4e:e3:c0:e7:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Validity Not Before: Dec 20 16:02:09 2025 GMT Not After : Dec 21 16:02:09 2025 GMT Subject: CN=2158d958f9f8f7c08a2105b1ec7861233352ae29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:bb:ad:6f:1c:c0:09:06:7b:da:bb:6b:2d: 74:99:5e:c4:99:2d:a2:41:30:ec:68:d0:3c:83:66: 7f:b6:ee:eb:91:a8:a7:f2:9b:c0:fd:f0:51:81:20: 1f:4c:3b:7e:04:ac:05:2c:10:38:9c:7a:69:1d:1d: 57:78:2c:73:4f:7a:1d:95:59:e8:77:37:74:36:4d: 4d:0e:21:c5:11:69:4c:e5:f3:81:68:b6:66:87:4d: ef:17:f1:b6:66:54:ea:ab:12:8e:b9:96:d1:79:68: 80:0e:6f:09:4b:ce:0b:d6:0d:29:46:18:02:cf:d4: 49:fe:4a:ee:0e:7d:e2:79:08:cc:19:03:d0:3e:bd: 4f:05:14:1f:5e:6e:d2:a7:e1:49:58:7a:ae:ba:b0: 6b:15:7c:40:45:57:a7:4f:d3:1c:81:aa:72:53:73: 84:64:27:35:6f:8c:90:63:22:41:e4:7b:96:35:b9: 34:96:b3:ea:4d:f7:db:be:e1:64:d3:6e:24:86:9b: 4f:f1:23:96:aa:0e:0a:c6:ad:83:65:bf:e3:6f:b2: 42:a1:13:04:e5:e5:3c:a2:56:58:c3:2d:d7:bd:6e: e5:2a:c9:c8:ef:69:68:da:da:3b:6c:24:78:8c:f9: 78:1c:c2:a8:0e:da:d0:60:fe:a7:6f:c8:13:7b:7f: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:58:D9:58:F9:F8:F7:C0:8A:21:05:B1:EC:78:61:23:33:52:AE:29 X509v3 Authority Key Identifier: keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9b:e9:76:d0:bf:ee:a3:cd:94:ca:0b:81:4e:fd:81:ef:d5: 28:94:01:34:b0:01:b2:a7:6d:07:56:bb:f1:c7:43:d0:1a:02: 1d:0d:8f:c4:6d:26:52:ca:8d:34:08:60:f8:7c:13:6a:e0:0a: 6c:46:ae:6c:3c:54:ac:47:bd:15:50:4e:02:7e:fe:be:82:b5: 3a:c9:ab:08:2c:30:09:c8:b9:4f:4d:b1:30:00:f2:93:9f:43: 9d:c2:fc:4d:66:af:2c:6d:15:e9:79:4b:23:15:c8:f3:ea:c3: f2:6e:1e:4c:17:e1:26:ed:2f:66:e0:4f:06:b7:4d:49:8d:30: 70:3a:7e:1c:94:19:31:30:02:85:07:48:98:64:84:c2:c9:b8: ab:48:13:cb:a2:92:16:55:5e:6c:0f:a7:9f:f9:ec:fe:b3:7b: ed:0d:1b:bf:85:80:17:77:c2:d4:45:6c:10:c9:6f:52:3c:0d: e1:f4:47:57:48:96:ef:3c:51:90:47:56:f2:b0:68:43:6d:70: 20:4b:33:95:45:3b:2f:08:cb:93:2e:82:3a:69:06:f1:c9:e0: 96:71:44:c5:d6:62:55:e5:43:4a:77:53:db:f0:c1:aa:9f:d6: 86:f1:93:99:b6:9f:e8:38:ee:2e:b6:c2:52:1a:62:8f:15:45: eb:be:f3:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fzndHwcEE/uaTuPA55JAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5 ZTViM2UwHhcNMjUxMjIwMTYwMjA5WhcNMjUxMjIxMTYwMjA5WjAzMTEwLwYDVQQD EygyMTU4ZDk1OGY5ZjhmN2MwOGEyMTA1YjFlYzc4NjEyMzMzNTJhZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4y7rW8cwAkGe9q7ay10mV7EmS2i QTDsaNA8g2Z/tu7rkain8pvA/fBRgSAfTDt+BKwFLBA4nHppHR1XeCxzT3odlVno dzd0Nk1NDiHFEWlM5fOBaLZmh03vF/G2ZlTqqxKOuZbReWiADm8JS84L1g0pRhgC z9RJ/kruDn3ieQjMGQPQPr1PBRQfXm7Sp+FJWHquurBrFXxARVenT9McgapyU3OE ZCc1b4yQYyJB5HuWNbk0lrPqTffbvuFk024khptP8SOWqg4Kxq2DZb/jb7JCoRME 5eU8olZYwy3XvW7lKsnI72lo2to7bCR4jPl4HMKoDtrQYP6nb8gTe39AFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFY2Vj5+PfAiiEFsex4YSMzUq4pMB8GA1UdIwQY MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5 LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJvpdtC/ 7qPNlMoLgU79ge/VKJQBNLABsqdtB1a78cdD0BoCHQ2PxG0mUsqNNAhg+HwTauAK bEaubDxUrEe9FVBOAn7+voK1OsmrCCwwCci5T02xMADyk59DncL8TWavLG0V6XlL IxXI8+rD8m4eTBfhJu0vZuBPBrdNSY0wcDp+HJQZMTAChQdImGSEwsm4q0gTy6KS FlVebA+nn/ns/rN77Q0bv4WAF3fC1EVsEMlvUjwN4fRHV0iW7zxRkEdW8rBoQ21w IEszlUU7LwjLky6COmkG8cnglnFExdZiVeVDSndT2/DBqp/WhvGTmbaf6DjuLrbC UhpijxVF677zsw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:19 2025 by rpki-client