This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json) Hash identifier: yZxrfaYvYJmIbROdCGxMqHHcq1M4lCWHgHqeWG9Pg84= Subject key identifier: CE:79:F9:F0:A5:D6:D4:D4:34:4B:2C:9B:E3:EB:05:25:38:D0:29:9D Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Certificate serial: 019BFBAEE6B8F4A66107048E6445B5967A72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 19:01:42 +0000 Manifest this update: Mon 26 Jan 2026 19:01:42 +0000 Manifest next update: Tue 27 Jan 2026 19:01:42 +0000 Files and hashes: 1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: YdgMOT7wJ4YKkpHNfsNNL/NlO56++OnB+4MzEPLEUpo=) 2: pANXzrraCHYVkzSawo9c9dlj6zU.roa (hash: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e6:b8:f4:a6:61:07:04:8e:64:45:b5:96:7a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Validity Not Before: Jan 26 19:01:42 2026 GMT Not After : Jan 27 19:01:42 2026 GMT Subject: CN=ce79f9f0a5d6d4d4344b2c9be3eb052538d0299d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:45:cf:da:d9:bc:ca:2e:da:be:87:df:37: ac:5b:97:9b:61:78:aa:ec:43:e8:cb:b1:3f:06:87: 3a:fd:d5:c7:80:e6:06:ae:c3:1b:ed:65:e0:b6:4a: 82:8d:04:8c:08:d6:03:e0:29:db:e5:cf:6a:2b:19: f2:48:4a:05:a5:e9:66:e6:c3:3a:78:64:25:f8:3c: b8:ca:b5:bb:8c:56:d6:24:16:ba:b4:81:f6:3b:b3: 07:42:7c:ce:01:01:6a:70:6e:b3:c0:9c:b5:66:0f: d7:92:63:a1:93:01:12:7d:9e:82:bd:f8:1b:93:74: 62:f8:67:19:76:f5:c7:c6:c6:8d:5b:1c:8c:42:44: ca:f8:78:27:e3:85:eb:d2:09:bb:d4:5b:b3:d5:44: de:40:f8:88:3c:75:d0:92:85:9d:0c:73:31:0b:e7: 30:4a:78:a2:90:72:ac:d0:65:ab:f1:48:47:86:59: 21:be:0d:9d:e0:04:9b:4a:2d:5b:8c:d7:be:3e:35: 8f:41:f0:76:1f:48:65:44:57:05:fd:e6:2c:c4:ac: 69:e1:65:42:1f:30:71:52:7a:6e:fe:d1:e9:51:36: 86:30:ef:23:16:35:0f:0f:62:f6:ad:ed:af:8c:40: b2:41:45:63:6c:be:91:d0:0c:21:eb:15:de:8e:51: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:79:F9:F0:A5:D6:D4:D4:34:4B:2C:9B:E3:EB:05:25:38:D0:29:9D X509v3 Authority Key Identifier: keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2c:d4:86:19:fc:cd:65:ec:f9:5d:9b:fb:5c:82:2f:a9:69: a3:91:ea:49:e1:8b:35:58:de:7e:9c:06:f6:67:79:f6:23:b2: 00:36:1e:ce:52:85:63:44:0a:ee:f4:f1:3f:bb:da:a9:a1:18: f9:fd:f0:c1:16:7f:a2:a5:02:f8:55:c6:04:ed:ec:2c:bf:92: 40:62:14:5b:a3:19:61:df:f1:07:9a:ad:16:a8:e6:f3:a9:f8: fa:78:32:b6:c2:10:c8:6d:d4:51:f1:cc:9a:28:70:42:74:8b: 8c:ab:e0:f4:74:17:99:12:fa:bc:71:1e:b2:f2:c1:06:b0:24: 22:2d:e7:e0:05:e8:fe:d3:5d:fb:71:4a:7a:6c:ff:0f:98:e2: 0f:ac:cd:dc:8a:d3:38:f1:29:e9:3c:dd:d4:fd:e5:df:d8:de: 0a:68:fa:73:f4:d1:de:58:ba:04:aa:45:77:7c:73:ab:4e:b6: 32:a7:52:c5:33:48:01:aa:1d:be:be:22:a8:55:d4:8a:ae:11: 8f:a1:03:82:01:79:d4:93:74:97:7b:68:86:e2:ca:66:26:9a: 4e:50:6b:86:af:bf:6b:92:32:97:96:4c:7b:df:04:2c:85:fe: 94:34:fa:b3:9d:04:b2:3c:88:0b:2c:5e:05:ca:4f:94:ce:7c: 50:76:32:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rua49KZhBwSOZEW1lnpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj NmIzNTAwHhcNMjYwMTI2MTkwMTQyWhcNMjYwMTI3MTkwMTQyWjAzMTEwLwYDVQQD EyhjZTc5ZjlmMGE1ZDZkNGQ0MzQ0YjJjOWJlM2ViMDUyNTM4ZDAyOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2BFz9rZvMou2r6H3zesW5ebYXiq 7EPoy7E/Boc6/dXHgOYGrsMb7WXgtkqCjQSMCNYD4Cnb5c9qKxnySEoFpelm5sM6 eGQl+Dy4yrW7jFbWJBa6tIH2O7MHQnzOAQFqcG6zwJy1Zg/XkmOhkwESfZ6Cvfgb k3Ri+GcZdvXHxsaNWxyMQkTK+Hgn44Xr0gm71Fuz1UTeQPiIPHXQkoWdDHMxC+cw SniikHKs0GWr8UhHhlkhvg2d4ASbSi1bjNe+PjWPQfB2H0hlRFcF/eYsxKxp4WVC HzBxUnpu/tHpUTaGMO8jFjUPD2L2re2vjECyQUVjbL6R0Awh6xXejlG9iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM55+fCl1tTUNEssm+PrBSU40CmdMB8GA1UdIwQY MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4 LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyzUhhn8 zWXs+V2b+1yCL6lpo5HqSeGLNVjefpwG9md59iOyADYezlKFY0QK7vTxP7vaqaEY +f3wwRZ/oqUC+FXGBO3sLL+SQGIUW6MZYd/xB5qtFqjm86n4+ngytsIQyG3UUfHM mihwQnSLjKvg9HQXmRL6vHEesvLBBrAkIi3n4AXo/tNd+3FKemz/D5jiD6zN3IrT OPEp6Tzd1P3l39jeCmj6c/TR3li6BKpFd3xzq062MqdSxTNIAaodvr4iqFXUiq4R j6EDggF51JN0l3tohuLKZiaaTlBrhq+/a5Iyl5ZMe98ELIX+lDT6s50EsjyICyxe BcpPlM58UHYyDQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:49 2026 by rpki-client