This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json) Hash identifier: pXUfYjnnQgXg+59ADg4NrDCjeyk/wxyltXBi+Ayug9U= Subject key identifier: 68:78:87:79:24:91:36:8E:DD:DB:B5:ED:95:4E:60:DF:9E:7F:CC:3B Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa Certificate serial: 019B3EDB1A17E2D5F8FEF292DCE3FB7FFD83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft Manifest number: 1035 Signing time: Sun 21 Dec 2025 03:01:44 +0000 Manifest this update: Sun 21 Dec 2025 03:01:44 +0000 Manifest next update: Mon 22 Dec 2025 03:01:44 +0000 Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=) 2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: b3OAvBVr9r5/qW+lpjgek7FgdqqEEnWcj7bPggCTbWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:1a:17:e2:d5:f8:fe:f2:92:dc:e3:fb:7f:fd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa Validity Not Before: Dec 21 03:01:44 2025 GMT Not After : Dec 22 03:01:44 2025 GMT Subject: CN=687887792491368edddbb5ed954e60df9e7fcc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:ba:49:68:35:01:4d:a9:9a:ac:47:54:db: 7b:2a:ff:bc:c2:f1:2c:d7:35:4e:63:0a:07:b9:09: f1:7c:01:46:72:be:13:9e:a9:c2:9d:21:c4:fa:43: f0:b8:aa:b2:1f:52:96:f6:22:8c:cd:59:ef:10:b5: b1:d6:51:2f:56:b6:7e:9b:90:52:a8:6e:ae:70:b1: d5:09:35:19:f1:67:86:5a:76:01:e7:04:8f:23:f1: 41:08:f7:01:1d:c7:cd:ff:89:fc:9f:95:f9:f9:10: 60:94:76:63:4a:b8:33:0c:bf:94:14:da:64:04:df: 57:e0:25:c2:90:72:75:37:e1:a9:67:64:de:1b:14: 45:76:32:ce:01:5f:71:fd:bd:37:a0:0f:33:21:9e: 9b:8c:6d:b6:c9:2e:7b:e1:4d:5d:0d:ea:c9:be:bb: 5c:5c:65:79:ad:e8:1f:a8:72:d0:67:9d:4f:45:a6: 59:64:59:b4:16:77:e6:b9:e9:f9:56:8b:36:c9:dc: ec:3a:4a:bd:99:5e:49:9b:e1:8b:dd:de:6a:78:35: 67:39:e4:45:2b:fb:45:00:1f:98:26:57:94:2e:df: e5:26:a3:70:92:5f:0b:4e:8f:09:1b:d9:d6:6c:e1: 9d:d5:de:fe:6c:b3:60:65:4a:0c:8d:d8:31:95:99: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:87:79:24:91:36:8E:DD:DB:B5:ED:95:4E:60:DF:9E:7F:CC:3B X509v3 Authority Key Identifier: keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8f:32:5e:42:ba:d4:c7:38:47:32:08:eb:42:d8:82:c8:91: 83:b9:a0:66:76:25:67:b7:d1:13:4b:f0:28:40:0f:7f:01:e8: 8b:14:04:72:f6:fc:f5:1b:d7:35:a9:6c:a3:f9:c4:cd:ee:72: e4:83:a6:78:a3:c4:97:f2:ab:66:49:b7:ca:93:36:41:dd:0d: e1:f5:df:7d:22:ee:4d:48:8a:6a:fd:75:9d:f9:8e:66:53:5b: 1e:a2:0b:79:10:1e:9f:ab:76:72:e2:2f:02:18:d8:ce:96:73: 69:21:50:95:9a:f9:fb:80:68:24:3a:9b:66:b4:84:2a:79:fb: a9:6c:76:2f:ec:09:70:17:e8:82:1b:f4:5f:f3:9c:ea:76:60: cc:7c:47:5b:6a:12:4b:02:6f:4f:2c:1b:d7:b7:6d:87:66:88: aa:06:a5:c8:fa:45:0a:e0:69:18:50:22:fe:93:9f:27:62:80: 50:23:f0:1e:e3:78:8c:65:1b:4c:4d:dc:97:da:0a:c8:16:56: e8:8e:1c:e4:8e:83:39:0c:4b:53:75:2f:7f:96:31:1f:e2:ea: ee:20:57:a2:4b:82:74:d6:9e:b5:77:3c:c1:0d:95:d4:2b:55: 75:30:c1:e7:9b:a2:76:8e:0c:bc:b2:7e:09:4c:31:23:75:06: 45:f1:8e:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2xoX4tX4/vKS3OP7f/2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzFjNjRjM2U1YTdkZTEwNDBmNDBkYThmZWRjNDdjMzhm ZTU5ZmEwHhcNMjUxMjIxMDMwMTQ0WhcNMjUxMjIyMDMwMTQ0WjAzMTEwLwYDVQQD Eyg2ODc4ODc3OTI0OTEzNjhlZGRkYmI1ZWQ5NTRlNjBkZjllN2ZjYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ju6SWg1AU2pmqxHVNt7Kv+8wvEs 1zVOYwoHuQnxfAFGcr4TnqnCnSHE+kPwuKqyH1KW9iKMzVnvELWx1lEvVrZ+m5BS qG6ucLHVCTUZ8WeGWnYB5wSPI/FBCPcBHcfN/4n8n5X5+RBglHZjSrgzDL+UFNpk BN9X4CXCkHJ1N+GpZ2TeGxRFdjLOAV9x/b03oA8zIZ6bjG22yS574U1dDerJvrtc XGV5regfqHLQZ51PRaZZZFm0Fnfmuen5Vos2ydzsOkq9mV5Jm+GL3d5qeDVnOeRF K/tFAB+YJleULt/lJqNwkl8LTo8JG9nWbOGd1d7+bLNgZUoMjdgxlZmGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh4h3kkkTaO3du17ZVOYN+ef8w7MB8GA1UdIwQY MBaAFG8xxkw+Wn3hBA9A2o/txHw4/ln6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTIt YjA4MGEzNDUxYzdmLzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTItYjA4MGEzNDUxYzdm LzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkY8yXkK6 1Mc4RzII60LYgsiRg7mgZnYlZ7fRE0vwKEAPfwHoixQEcvb89RvXNalso/nEze5y 5IOmeKPEl/KrZkm3ypM2Qd0N4fXffSLuTUiKav11nfmOZlNbHqILeRAen6t2cuIv AhjYzpZzaSFQlZr5+4BoJDqbZrSEKnn7qWx2L+wJcBfoghv0X/Oc6nZgzHxHW2oS SwJvTywb17dth2aIqgalyPpFCuBpGFAi/pOfJ2KAUCPwHuN4jGUbTE3cl9oKyBZW 6I4c5I6DOQxLU3Uvf5YxH+Lq7iBXokuCdNaetXc8wQ2V1CtVdTDB55uido4MvLJ+ CUwxI3UGRfGOSw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:38 2025 by rpki-client