This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json) Hash identifier: 5ftcfoMxAD1b/1kW+19YrH2ULwF9mAlBfMyEIujJpws= Subject key identifier: 36:ED:65:7D:8C:67:B0:9A:6D:DF:64:B6:A9:DA:78:1B:1F:FC:2E:ED Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Certificate serial: 019B115CFDA37DA1180271FAC0590DB22313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 07:01:05 +0000 Manifest this update: Fri 12 Dec 2025 07:01:05 +0000 Manifest next update: Sat 13 Dec 2025 07:01:05 +0000 Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=) 2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: GHHd73RSvj2DLGDYZ0fAO1gWDTraG+5sOpAo0EJvWdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:fd:a3:7d:a1:18:02:71:fa:c0:59:0d:b2:23:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Validity Not Before: Dec 12 07:01:05 2025 GMT Not After : Dec 13 07:01:05 2025 GMT Subject: CN=36ed657d8c67b09a6ddf64b6a9da781b1ffc2eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:b4:62:57:00:cb:9d:0f:35:df:bf:73:fb: 2b:15:5d:aa:c5:47:b3:27:62:41:55:d1:de:50:f8: 89:52:7e:b6:b9:f8:09:d8:79:da:0a:8c:c8:4b:4e: 42:01:a6:1f:9c:1f:60:66:c0:a2:55:7e:2a:df:42: f4:4f:ab:ac:09:47:6a:ab:e0:00:00:1e:ef:10:28: 36:1c:d8:58:52:fb:a6:4c:6c:e9:5d:fc:e7:16:e6: 1b:5f:43:a6:72:e6:4f:18:43:ef:56:a0:f6:40:38: 85:f1:1e:9f:75:34:36:3f:60:fa:ec:2d:89:2c:1b: 01:0e:33:a3:95:98:d1:8b:30:ec:85:00:72:b8:99: e6:f5:94:20:93:87:0e:b7:2e:5d:0b:cb:ba:7b:43: cb:aa:f5:a9:6a:37:24:98:65:84:aa:43:ff:ce:1c: 87:8a:eb:6e:71:5b:7e:e6:40:65:c9:d9:dd:f3:76: 5e:c1:f2:6c:13:51:58:26:07:53:33:b8:95:4b:3c: e1:5d:9d:1e:d7:41:c9:bb:a8:2e:d8:3f:91:f1:02: 33:41:9f:d9:e7:9d:de:41:bc:86:ae:e8:52:a2:5c: f7:bd:d1:76:de:8c:c8:88:d2:2b:f1:8f:5d:fb:e7: 0f:d5:9f:e2:ed:64:e8:51:97:ae:36:be:f3:48:01: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:65:7D:8C:67:B0:9A:6D:DF:64:B6:A9:DA:78:1B:1F:FC:2E:ED X509v3 Authority Key Identifier: keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fb:fe:b9:4b:90:a1:18:46:ff:43:74:96:19:b4:76:4c:58: 27:b7:82:26:9b:77:cd:b2:29:da:fd:2f:ac:49:8d:83:c5:a1: ba:c8:af:e0:ec:c2:d2:b8:e3:63:e9:2c:d0:eb:8a:b8:cf:12: d6:64:1e:a8:29:cd:36:d5:fa:bd:62:8a:2f:82:87:83:7b:26: ed:ec:fa:21:a4:27:74:d8:ab:1b:b4:22:69:09:7a:0e:fa:f0: b1:d8:6c:86:00:93:33:d8:24:b8:13:b5:17:c1:9f:87:4b:97: a1:34:b8:6b:b4:0e:dd:cd:1c:ab:83:22:7e:e3:1a:ed:a4:a0: f0:7a:93:e2:79:07:08:19:4a:26:6a:a2:ef:85:a9:58:16:3b: e2:5d:4e:dd:b4:90:85:e9:42:c5:b5:99:20:e3:26:9e:39:15: 65:64:71:82:45:b0:be:8c:f9:d3:50:c0:1e:b0:51:da:7b:71: 22:8a:76:e5:2b:0a:67:74:4e:c1:d2:91:77:89:52:2b:38:93: 66:f8:8e:2f:81:48:20:e1:0b:91:47:80:82:8a:16:6c:55:f9: 53:28:4e:db:73:43:23:78:12:e3:be:f0:6d:02:08:a8:42:91: 63:37:4a:b0:d6:08:32:b2:fe:2e:a3:a6:2c:53:1a:3e:ab:f3: 29:ca:2d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXP2jfaEYAnH6wFkNsiMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj NmIzNTAwHhcNMjUxMjEyMDcwMTA1WhcNMjUxMjEzMDcwMTA1WjAzMTEwLwYDVQQD EygzNmVkNjU3ZDhjNjdiMDlhNmRkZjY0YjZhOWRhNzgxYjFmZmMyZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun+0YlcAy50PNd+/c/srFV2qxUez J2JBVdHeUPiJUn62ufgJ2HnaCozIS05CAaYfnB9gZsCiVX4q30L0T6usCUdqq+AA AB7vECg2HNhYUvumTGzpXfznFuYbX0OmcuZPGEPvVqD2QDiF8R6fdTQ2P2D67C2J LBsBDjOjlZjRizDshQByuJnm9ZQgk4cOty5dC8u6e0PLqvWpajckmGWEqkP/zhyH iutucVt+5kBlydnd83ZewfJsE1FYJgdTM7iVSzzhXZ0e10HJu6gu2D+R8QIzQZ/Z 553eQbyGruhSolz3vdF23ozIiNIr8Y9d++cP1Z/i7WToUZeuNr7zSAG31wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbtZX2MZ7Cabd9ktqnaeBsf/C7tMB8GA1UdIwQY MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4 LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPv+uUuQ oRhG/0N0lhm0dkxYJ7eCJpt3zbIp2v0vrEmNg8Whusiv4OzC0rjjY+ks0OuKuM8S 1mQeqCnNNtX6vWKKL4KHg3sm7ez6IaQndNirG7QiaQl6DvrwsdhshgCTM9gkuBO1 F8Gfh0uXoTS4a7QO3c0cq4MifuMa7aSg8HqT4nkHCBlKJmqi74WpWBY74l1O3bSQ helCxbWZIOMmnjkVZWRxgkWwvoz501DAHrBR2ntxIop25SsKZ3ROwdKRd4lSKziT ZviOL4FIIOELkUeAgooWbFX5UyhO23NDI3gS477wbQIIqEKRYzdKsNYIMrL+LqOm LFMaPqvzKcotzg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:39:22 2025 by rpki-client