This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json) Hash identifier: xuKoHH0++so/2BRbjOALyZi92WWiTwYDaSsmPLMkC+4= Subject key identifier: A6:E5:53:DD:ED:79:29:23:AE:B8:82:AF:2F:F5:19:D5:46:12:E5:3B Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Certificate serial: 019B364542062ABB347846FFAE0D4C9B23FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft Manifest number: 049C Signing time: Fri 19 Dec 2025 11:01:07 +0000 Manifest this update: Fri 19 Dec 2025 11:01:07 +0000 Manifest next update: Sat 20 Dec 2025 11:01:07 +0000 Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: t1g0IVEjAuDQ1JfuMjFNZAsjqLdc/yNIGCVed62xmnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:42:06:2a:bb:34:78:46:ff:ae:0d:4c:9b:23:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Validity Not Before: Dec 19 11:01:07 2025 GMT Not After : Dec 20 11:01:07 2025 GMT Subject: CN=a6e553dded792923aeb882af2ff519d54612e53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:96:ed:5e:c6:f1:ec:a5:5a:54:eb:49:f8: 43:f7:50:0b:c2:a1:42:1b:9c:23:7d:f7:f7:94:66: 3a:0a:f5:27:fc:53:02:4b:6d:a0:a6:79:2f:b3:38: b4:47:0b:81:91:b1:55:62:10:84:96:d2:f8:fa:9b: 66:a0:82:ed:ac:ec:01:c5:e1:bd:e8:a0:cb:3c:ff: ec:08:76:c7:e0:99:d0:fb:5c:7a:c7:f3:52:d6:75: 39:db:63:65:72:53:05:9f:1d:24:1e:b0:79:7f:be: 59:2c:53:31:59:81:15:e8:f6:0d:1b:84:e4:47:83: 77:97:d6:02:dc:ab:0b:22:25:c1:85:13:4a:6c:2f: 15:24:8a:69:b4:62:85:da:3b:6f:fb:32:b9:d9:40: 31:01:e3:38:8c:58:88:e6:c6:b5:44:60:97:24:05: 2d:28:49:ef:d6:d4:2a:b9:09:ff:c8:38:00:61:14: a6:44:03:cf:cf:80:3a:45:23:d3:03:f1:0f:56:2c: ee:8e:9a:8e:4e:bf:3c:91:15:15:95:b1:b2:42:58: f3:ee:19:62:8e:55:8b:7e:f2:b1:1a:91:4b:75:94: 8c:9b:7a:23:2c:ee:7a:ea:89:5a:a8:00:80:86:0b: 0c:73:63:36:3b:29:d1:de:74:a8:cd:78:49:53:6e: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:53:DD:ED:79:29:23:AE:B8:82:AF:2F:F5:19:D5:46:12:E5:3B X509v3 Authority Key Identifier: keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:dc:43:82:2c:41:30:07:72:6c:4c:b0:ed:57:65:52:40:08: cb:e1:05:fc:26:c3:ee:cb:06:a9:c4:69:f7:f7:11:7a:97:7b: 9e:6c:69:4f:9c:27:84:67:08:7f:c7:96:c9:77:67:6b:b5:4c: 59:f5:03:bd:ee:40:2c:c4:95:28:3a:b6:3f:17:aa:74:21:4c: 38:af:e1:7e:1a:3a:b0:e0:13:0a:d3:15:8c:a2:d5:1a:fb:a3: 13:bd:ab:17:0c:0e:f1:4c:b3:c7:77:0b:a5:69:6d:22:ab:09: 87:f7:55:12:c0:7f:98:b4:e3:f9:a7:b7:38:0c:69:34:de:fd: 43:10:cb:c7:60:1e:be:68:02:8e:5c:19:f3:9e:67:31:41:f1: 5b:04:b1:e4:de:fc:f4:c9:f8:93:ce:07:9f:39:3f:7a:f5:a7: c1:24:12:e4:cb:3f:06:25:02:f8:bf:26:a4:a5:54:dc:4b:3a: 3c:99:4a:6b:4b:c5:63:ad:30:c5:27:00:98:79:33:87:0c:03: 05:5d:13:7a:5a:d7:c3:52:b7:02:e7:2c:ab:89:5a:b7:02:06: 58:c2:1c:ed:e4:11:b7:a4:93:63:74:59:bb:49:25:f5:90:e6: 74:fe:88:7a:57:4f:28:b6:a5:cc:59:fe:c7:b4:2d:e5:19:71: da:fb:f9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RUIGKrs0eEb/rg1MmyP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzgzZjNmMTkzMWJhOGQyZWNhMmM1MWJmN2QyN2QzZGMy MDU1NTAwHhcNMjUxMjE5MTEwMTA3WhcNMjUxMjIwMTEwMTA3WjAzMTEwLwYDVQQD EyhhNmU1NTNkZGVkNzkyOTIzYWViODgyYWYyZmY1MTlkNTQ2MTJlNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhyW7V7G8eylWlTrSfhD91ALwqFC G5wjfff3lGY6CvUn/FMCS22gpnkvszi0RwuBkbFVYhCEltL4+ptmoILtrOwBxeG9 6KDLPP/sCHbH4JnQ+1x6x/NS1nU522NlclMFnx0kHrB5f75ZLFMxWYEV6PYNG4Tk R4N3l9YC3KsLIiXBhRNKbC8VJIpptGKF2jtv+zK52UAxAeM4jFiI5sa1RGCXJAUt KEnv1tQquQn/yDgAYRSmRAPPz4A6RSPTA/EPVizujpqOTr88kRUVlbGyQljz7hli jlWLfvKxGpFLdZSMm3ojLO566olaqACAhgsMc2M2OynR3nSozXhJU27IoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKblU93teSkjrriCry/1GdVGEuU7MB8GA1UdIwQY MBaAFG84Pz8ZMbqNLsosUb99J9PcIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEt YTYyNWVmNTE4OTJhLzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEtYTYyNWVmNTE4OTJh LzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntxDgixB MAdybEyw7VdlUkAIy+EF/CbD7ssGqcRp9/cRepd7nmxpT5wnhGcIf8eWyXdna7VM WfUDve5ALMSVKDq2PxeqdCFMOK/hfho6sOATCtMVjKLVGvujE72rFwwO8Uyzx3cL pWltIqsJh/dVEsB/mLTj+ae3OAxpNN79QxDLx2AevmgCjlwZ855nMUHxWwSx5N78 9Mn4k84Hnzk/evWnwSQS5Ms/BiUC+L8mpKVU3Es6PJlKa0vFY60wxScAmHkzhwwD BV0TelrXw1K3Aucsq4latwIGWMIc7eQRt6STY3RZu0kl9ZDmdP6IeldPKLalzFn+ x7Qt5Rlx2vv5hA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:30 2025 by rpki-client