This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json) Hash identifier: AxSR3JUMjyLYxDwaCRKGcH1+sYvMULx72cO0R830XjM= Subject key identifier: BE:58:2C:9D:58:34:2B:D9:F1:8B:C6:55:2C:04:D2:D9:AC:0B:5B:C1 Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb Certificate serial: 019B0DB6E701686AC7B8AE53C013A26018AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft Manifest number: 01D5 Signing time: Thu 11 Dec 2025 14:00:49 +0000 Manifest this update: Thu 11 Dec 2025 14:00:49 +0000 Manifest next update: Fri 12 Dec 2025 14:00:49 +0000 Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: zT0bzjxkVZTdlRdJ7JAxw2uRfJkh/ns1j82e7mLwfFI=) 2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e7:01:68:6a:c7:b8:ae:53:c0:13:a2:60:18:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073848d8281be439e77750885b547a28152801bb Validity Not Before: Dec 11 14:00:49 2025 GMT Not After : Dec 12 14:00:49 2025 GMT Subject: CN=be582c9d58342bd9f18bc6552c04d2d9ac0b5bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:e3:19:fd:9e:30:3a:8d:4f:4a:84:ac:8e: 70:ac:bf:70:a2:4d:ad:91:3b:40:5f:c6:1b:09:5a: f6:93:34:79:0b:d0:71:21:48:33:72:5e:33:2b:de: 9d:50:41:d1:d1:fb:ee:4f:87:4d:da:f6:90:3b:8e: 73:82:2d:2e:6f:52:ab:40:7b:f8:dd:2d:7e:98:61: dc:39:90:d0:9c:34:01:39:b1:7b:82:fe:02:79:84: 1b:41:b0:f3:a4:ee:c4:ea:db:4a:e3:11:8c:7a:10: ec:ae:0e:70:d7:7d:54:32:db:a8:32:6f:10:a2:19: c6:07:e9:a2:a2:99:bc:4e:83:dd:54:6a:7b:83:d1: 96:5b:5c:87:b6:68:40:40:9d:84:4e:65:93:ce:1d: 23:5d:94:02:47:d8:79:ce:2e:d1:6e:c3:4d:28:a5: 58:da:00:b0:fb:e0:50:d6:b4:be:64:5a:c0:3d:94: 5e:48:2c:9d:05:b1:55:2f:e2:f6:38:3f:30:98:5c: ba:c1:db:25:bc:c4:95:ec:1b:29:df:5a:89:92:cc: 72:6a:d8:ff:cf:93:53:54:34:57:c1:a7:28:98:a4: 47:30:db:a9:fd:cb:d0:e4:28:78:87:a6:47:12:ca: a2:2a:e2:c7:1b:a7:8a:21:1b:66:cb:4f:a3:55:53: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:2C:9D:58:34:2B:D9:F1:8B:C6:55:2C:04:D2:D9:AC:0B:5B:C1 X509v3 Authority Key Identifier: keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e6:03:27:97:b2:7d:bd:d9:c1:4b:d3:4d:da:04:8b:bb:f9: 9e:51:73:d8:2c:05:25:93:31:04:92:77:6b:c4:21:72:70:8a: f6:70:e8:04:ae:ef:2d:b6:4a:a4:6f:df:d5:e4:66:63:11:ec: 71:36:0f:dd:3f:c4:94:57:9c:0d:49:bd:19:78:fc:67:1e:03: 78:da:52:23:4b:02:8c:eb:36:b5:54:87:71:d1:b7:ee:76:fc: 74:ad:8c:1d:24:32:1c:87:92:5a:4a:f5:be:a6:83:cb:47:87: ec:d1:3e:77:c9:0b:52:7e:a4:c6:13:dd:25:ce:bf:5d:09:18: d4:c9:b1:ea:e0:9b:06:b1:99:47:da:88:e0:bf:46:96:ff:7b: 42:9d:5b:aa:7c:d8:9f:c8:08:b0:01:1d:72:6f:fb:04:57:88: a0:0c:d2:01:d7:ba:e5:2b:09:e3:aa:85:d8:51:cd:18:e3:d6: f7:8a:22:af:9b:e6:6b:dd:01:cf:87:e1:7f:cc:8e:11:c9:a8: 9c:17:81:43:95:9b:d9:46:a9:8c:50:76:c4:59:90:68:13:82: 91:c8:0e:d2:c1:a5:40:62:de:91:25:81:81:9e:92:07:f2:15: 33:46:84:1d:0b:f0:e9:22:50:09:66:4a:86:64:11:92:69:04: da:35:8c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtucBaGrHuK5TwBOiYBisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy ODAxYmIwHhcNMjUxMjExMTQwMDQ5WhcNMjUxMjEyMTQwMDQ5WjAzMTEwLwYDVQQD EyhiZTU4MmM5ZDU4MzQyYmQ5ZjE4YmM2NTUyYzA0ZDJkOWFjMGI1YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwLjGf2eMDqNT0qErI5wrL9wok2t kTtAX8YbCVr2kzR5C9BxIUgzcl4zK96dUEHR0fvuT4dN2vaQO45zgi0ub1KrQHv4 3S1+mGHcOZDQnDQBObF7gv4CeYQbQbDzpO7E6ttK4xGMehDsrg5w131UMtuoMm8Q ohnGB+miopm8ToPdVGp7g9GWW1yHtmhAQJ2ETmWTzh0jXZQCR9h5zi7RbsNNKKVY 2gCw++BQ1rS+ZFrAPZReSCydBbFVL+L2OD8wmFy6wdslvMSV7Bsp31qJksxyatj/ z5NTVDRXwacomKRHMNup/cvQ5Ch4h6ZHEsqiKuLHG6eKIRtmy0+jVVOhAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5YLJ1YNCvZ8YvGVSwE0tmsC1vBMB8GA1UdIwQY MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5 LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOYDJ5ey fb3ZwUvTTdoEi7v5nlFz2CwFJZMxBJJ3a8QhcnCK9nDoBK7vLbZKpG/f1eRmYxHs cTYP3T/ElFecDUm9GXj8Zx4DeNpSI0sCjOs2tVSHcdG37nb8dK2MHSQyHIeSWkr1 vqaDy0eH7NE+d8kLUn6kxhPdJc6/XQkY1Mmx6uCbBrGZR9qI4L9Glv97Qp1bqnzY n8gIsAEdcm/7BFeIoAzSAde65SsJ46qF2FHNGOPW94oir5vma90Bz4fhf8yOEcmo nBeBQ5Wb2UapjFB2xFmQaBOCkcgO0sGlQGLekSWBgZ6SB/IVM0aEHQvw6SJQCWZK hmQRkmkE2jWM1g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:15 2025 by rpki-client