This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json) Hash identifier: iBCzIw+suzyMOcY0lXWb8vL8MtBOgD4NJNQWbh+obr8= Subject key identifier: C8:FC:F6:72:3F:13:3B:0D:EF:11:78:0C:10:DD:19:36:9D:18:8B:19 Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Certificate serial: 019B3D2302B3E3476F7C03610E130725D06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 19:01:02 +0000 Manifest this update: Sat 20 Dec 2025 19:01:02 +0000 Manifest next update: Sun 21 Dec 2025 19:01:02 +0000 Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: zhU6gWSgoafjD5McEKfZV2hB5UmNRH7GSX+6WQyNOVc=) 2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:02:b3:e3:47:6f:7c:03:61:0e:13:07:25:d0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311 Validity Not Before: Dec 20 19:01:02 2025 GMT Not After : Dec 21 19:01:02 2025 GMT Subject: CN=c8fcf6723f133b0def11780c10dd19369d188b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:42:8b:db:ce:b8:51:02:1c:60:70:e9:a8: 75:4a:2c:f5:db:1c:e9:23:8e:64:48:3f:b2:97:1d: 67:64:bc:ce:ca:c9:31:f9:9e:08:be:c2:17:e8:76: 08:e6:7d:e8:9d:7e:c8:1f:79:6b:c3:de:0b:e9:61: 10:57:ab:ae:93:14:a8:2b:bc:c9:33:78:7b:8d:20: 41:81:f9:78:6e:c4:5e:22:1c:09:31:b3:ec:89:c3: 93:18:1d:67:5f:d9:14:de:61:7e:f9:44:da:14:34: 53:15:c1:16:84:ab:a1:46:e5:05:57:3d:71:b5:5f: bd:22:78:c1:ee:6e:83:20:44:56:5f:8e:1d:1f:0b: df:13:60:f8:58:13:c1:59:0c:7e:69:a1:b4:1c:df: 05:a4:e4:7f:97:b5:5e:db:12:d0:0b:89:c9:5f:18: 6c:a8:40:f2:88:e9:42:23:5d:9e:ed:cc:32:62:fe: 77:bb:3e:4d:3f:ef:a3:71:1e:a4:75:ac:79:9d:0f: 0e:ae:28:7c:ea:cc:e0:b0:7c:47:de:b4:2f:d5:0d: 72:f7:59:0e:5f:e1:5d:6f:c2:e8:c1:98:e9:62:ba: 7c:1c:80:85:8c:e2:b1:8b:11:04:6a:8b:b3:0d:87: 28:a1:7c:48:d5:29:34:b7:a4:e3:f4:65:34:df:e5: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:F6:72:3F:13:3B:0D:EF:11:78:0C:10:DD:19:36:9D:18:8B:19 X509v3 Authority Key Identifier: keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:c5:2b:92:c0:ae:37:5b:8d:90:03:6e:6e:e1:09:59:e7: cd:43:82:dd:13:bd:12:5d:94:db:91:9c:5e:23:b1:54:d6:a9: 21:57:87:31:e0:85:cb:32:fe:a5:20:5d:7c:18:d1:5c:ca:16: f0:9a:09:23:f2:fb:ae:3a:f6:e1:b3:e3:02:ec:a9:e5:cc:f3: 71:72:4e:f1:98:19:d9:69:4a:d2:0c:c1:f9:d0:4a:00:e4:ab: 9e:3b:b3:34:d7:61:0d:d0:ed:0f:df:dc:96:27:be:e0:49:0c: c9:01:bc:10:48:6a:44:35:bf:64:7f:e4:43:cb:a8:51:c5:de: 8f:15:b9:7e:b2:94:2b:7e:69:cc:a5:3a:66:0b:23:87:f1:0c: 39:d9:1b:68:50:47:b6:38:d8:f6:a9:d8:61:2f:e1:a1:5f:dc: 8f:71:15:a7:e2:01:97:2a:d0:ef:77:4b:19:1a:bb:eb:2e:f9: 03:f7:65:44:27:a8:c0:63:fa:1d:a3:0d:05:22:6d:84:d5:87: 46:4c:ab:eb:79:0a:ef:c4:a8:e4:36:af:16:9e:35:fb:1b:f6: e2:84:f3:c0:b0:ec:f9:a9:99:5c:45:37:83:e9:4c:c2:77:f2: 28:45:f3:90:31:a1:46:05:b9:dc:23:19:c4:ee:1c:21:6e:41: 8a:0d:ea:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwKz40dvfANhDhMHJdBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy NjEzMTEwHhcNMjUxMjIwMTkwMTAyWhcNMjUxMjIxMTkwMTAyWjAzMTEwLwYDVQQD EyhjOGZjZjY3MjNmMTMzYjBkZWYxMTc4MGMxMGRkMTkzNjlkMTg4YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJxCi9vOuFECHGBw6ah1Siz12xzp I45kSD+ylx1nZLzOyskx+Z4IvsIX6HYI5n3onX7IH3lrw94L6WEQV6uukxSoK7zJ M3h7jSBBgfl4bsReIhwJMbPsicOTGB1nX9kU3mF++UTaFDRTFcEWhKuhRuUFVz1x tV+9InjB7m6DIERWX44dHwvfE2D4WBPBWQx+aaG0HN8FpOR/l7Ve2xLQC4nJXxhs qEDyiOlCI12e7cwyYv53uz5NP++jcR6kdax5nQ8Orih86szgsHxH3rQv1Q1y91kO X+Fdb8LowZjpYrp8HICFjOKxixEEaouzDYcooXxI1Sk0t6Tj9GU03+UeYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj89nI/EzsN7xF4DBDdGTadGIsZMB8GA1UdIwQY MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg/FK5LA rjdbjZADbm7hCVnnzUOC3RO9El2U25GcXiOxVNapIVeHMeCFyzL+pSBdfBjRXMoW 8JoJI/L7rjr24bPjAuyp5czzcXJO8ZgZ2WlK0gzB+dBKAOSrnjuzNNdhDdDtD9/c lie+4EkMyQG8EEhqRDW/ZH/kQ8uoUcXejxW5frKUK35pzKU6Zgsjh/EMOdkbaFBH tjjY9qnYYS/hoV/cj3EVp+IBlyrQ73dLGRq76y75A/dlRCeowGP6HaMNBSJthNWH Rkyr63kK78So5DavFp41+xv24oTzwLDs+amZXEU3g+lMwnfyKEXzkDGhRgW53CMZ xO4cIW5Big3qLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:38 2025 by rpki-client