This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json) Hash identifier: FzRKy/qSw1znYVdUSKV9nfCD9dDlGg9FhCb+xJDifXQ= Subject key identifier: FA:1B:BE:73:43:BC:5C:FD:0A:3B:72:E6:6B:B8:69:AC:BC:1D:F1:EC Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c Certificate serial: 019B3E6DA287E5B131103A7B0AE1B6D6818F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft Manifest number: 0308 Signing time: Sun 21 Dec 2025 01:02:10 +0000 Manifest this update: Sun 21 Dec 2025 01:02:10 +0000 Manifest next update: Mon 22 Dec 2025 01:02:10 +0000 Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: 6I83btUaHnSMaUlMnS4s/O1TV66RpYggpoVaswn+pKo=) 2: pO5jZKPZtKc7LFh2B3gUF2ssV3Y.roa (hash: rDX32rjjFQPeFJLlsJ7HQ9El7VqEOXBlwYtku8n7ZJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a2:87:e5:b1:31:10:3a:7b:0a:e1:b6:d6:81:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c Validity Not Before: Dec 21 01:02:10 2025 GMT Not After : Dec 22 01:02:10 2025 GMT Subject: CN=fa1bbe7343bc5cfd0a3b72e66bb869acbc1df1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:ae:86:94:7f:d0:ec:94:f8:5a:2c:2f:f2: f9:d7:1e:32:c7:19:d7:4b:4f:64:7a:1e:28:94:15: 42:f9:eb:67:9f:ba:4c:20:18:06:9f:8a:bb:71:2b: 63:24:53:a8:c8:66:5a:1c:b9:f8:70:88:99:1d:dd: 67:4e:df:cf:fb:d7:2e:b5:7a:b7:fc:8e:17:25:75: 40:af:47:f4:d3:12:52:e7:c3:b6:d6:d2:43:dc:7a: a7:9d:ef:f0:82:fc:16:e4:33:62:c4:c8:74:1f:a6: 94:c5:94:80:2c:2c:db:74:d0:0e:99:84:b2:4b:2a: 02:25:45:c7:03:e9:85:bd:01:a3:68:7e:e4:7e:07: a8:e6:48:32:fc:de:65:2d:f1:cf:4d:81:37:58:fc: 79:ec:e0:cf:ff:10:38:52:d5:4a:05:1e:28:57:cb: b0:45:7a:cd:4e:49:ba:41:3e:c3:64:40:cc:c4:9e: 86:0d:1c:4b:f0:86:47:a6:b3:b4:8b:94:bd:e3:6f: df:fe:81:0d:55:2e:3a:e8:3d:65:19:77:fa:63:34: 87:2f:66:2d:c0:23:e9:4a:ec:cc:f1:95:6e:00:2a: 8f:61:45:93:93:23:1e:d5:f9:57:2c:b1:4a:6c:d7: 74:bf:19:5c:ba:6e:7c:27:1c:af:91:88:0c:8a:3b: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:BE:73:43:BC:5C:FD:0A:3B:72:E6:6B:B8:69:AC:BC:1D:F1:EC X509v3 Authority Key Identifier: keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f3:fe:9b:e3:73:e3:d7:f7:1d:4d:05:6e:4d:b6:1e:5b:78: 69:1c:aa:59:c8:ac:0a:15:33:92:80:d2:c3:48:20:31:6d:c8: 19:1c:59:96:ad:0f:e6:0c:d6:14:81:e1:81:be:b2:a4:a2:7d: d0:02:c6:cc:b6:07:87:cb:63:df:d5:f0:f5:b3:2c:e1:55:69: ba:40:a0:b6:cc:9a:75:bf:77:35:5a:4b:83:1c:37:42:45:aa: 61:3e:bb:52:ad:0d:d1:cb:71:13:5e:72:c6:c2:8d:6e:48:40: a1:55:d1:72:26:dd:9e:11:1e:b7:43:02:db:f9:69:22:7b:f7: fe:6e:da:29:8d:10:70:48:39:f8:2b:09:fd:92:dc:a5:3d:82: ac:d5:bc:e2:ed:16:7e:4d:59:e5:2d:d7:87:3f:82:1b:42:4a: 2f:ae:ac:d4:d9:cc:bf:04:91:9b:15:2d:8d:35:f3:16:de:28: ad:8f:d3:ba:ea:95:17:d4:09:1e:2e:18:50:ad:29:62:fa:7d: 25:a8:54:08:c8:8c:3b:45:18:dd:9c:2d:50:69:d7:95:e2:a9: 40:f0:c3:38:b2:f0:e5:6d:17:70:df:2c:7d:98:f3:3c:04:c9: 4b:38:cb:4e:08:ca:dd:69:61:aa:e0:d2:d1:fe:70:cb:69:70: 06:b2:04:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+baKH5bExEDp7CuG21oGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDhiMzM4MzM5OTAwZmY3ZjNiNTliMjQ2ZDI0ZDI2ODdj NjM2N2MwHhcNMjUxMjIxMDEwMjEwWhcNMjUxMjIyMDEwMjEwWjAzMTEwLwYDVQQD EyhmYTFiYmU3MzQzYmM1Y2ZkMGEzYjcyZTY2YmI4NjlhY2JjMWRmMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGOuhpR/0OyU+FosL/L51x4yxxnX S09keh4olBVC+etnn7pMIBgGn4q7cStjJFOoyGZaHLn4cIiZHd1nTt/P+9cutXq3 /I4XJXVAr0f00xJS58O21tJD3Hqnne/wgvwW5DNixMh0H6aUxZSALCzbdNAOmYSy SyoCJUXHA+mFvQGjaH7kfgeo5kgy/N5lLfHPTYE3WPx57ODP/xA4UtVKBR4oV8uw RXrNTkm6QT7DZEDMxJ6GDRxL8IZHprO0i5S942/f/oENVS466D1lGXf6YzSHL2Yt wCPpSuzM8ZVuACqPYUWTkyMe1flXLLFKbNd0vxlcum58JxyvkYgMijuFPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPobvnNDvFz9Cjty5mu4aay8HfHsMB8GA1UdIwQY MBaAFAZIszgzmQD/fztZskbSTSaHxjZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtpek9ET1pBUDlfTzFteVJ0Sk5Kb2ZHTm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2EwMzctMDY3NS00OGY4LTkyNWQt MGQ5MThlZWRjMjZmLzEvQmtpek9ET1pBUDlfTzFteVJ0Sk5Kb2ZHTm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zM2EwMzctMDY3NS00OGY4LTkyNWQtMGQ5MThlZWRjMjZm LzEvQmtpek9ET1pBUDlfTzFteVJ0Sk5Kb2ZHTm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfP+m+Nz 49f3HU0Fbk22Hlt4aRyqWcisChUzkoDSw0ggMW3IGRxZlq0P5gzWFIHhgb6ypKJ9 0ALGzLYHh8tj39Xw9bMs4VVpukCgtsyadb93NVpLgxw3QkWqYT67Uq0N0ctxE15y xsKNbkhAoVXRcibdnhEet0MC2/lpInv3/m7aKY0QcEg5+CsJ/ZLcpT2CrNW84u0W fk1Z5S3Xhz+CG0JKL66s1NnMvwSRmxUtjTXzFt4orY/TuuqVF9QJHi4YUK0pYvp9 JahUCMiMO0UY3ZwtUGnXleKpQPDDOLLw5W0XcN8sfZjzPATJSzjLTgjK3WlhquDS 0f5wy2lwBrIEWg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:10 2025 by rpki-client