This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json) Hash identifier: YsA0IwfwP8VsrczpVoPRtVx21MNfpT6HjS0Lmhq/4K4= Subject key identifier: 7D:2D:99:60:66:6B:10:81:E6:25:25:BB:C4:BD:E7:E8:54:6C:9E:F1 Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Certificate serial: 019C42B40DA3F36650F63D61EB9EF4FE36C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft Manifest number: 0527 Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: jUIf8buJ7LV4nxR6AghF7P6dPEn66+zpyK0UcFAH3ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0d:a3:f3:66:50:f6:3d:61:eb:9e:f4:fe:36:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=7d2d9960666b1081e62525bbc4bde7e8546c9ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:93:53:a5:5f:6a:73:ca:88:9a:79:bf:d0: 0a:12:68:a9:22:fb:f9:c9:57:ce:11:3a:e4:10:d8: c6:f7:9a:1c:a7:0e:21:34:dd:c6:17:a1:1b:38:eb: 43:65:85:08:35:8c:ee:64:7e:d0:7a:7e:b2:fe:63: 84:9f:29:a7:ff:26:9e:23:f8:42:0d:6a:42:cb:f0: b9:35:63:db:13:80:b9:b3:5a:e0:a1:da:6b:57:d9: 1d:f0:34:8a:10:42:8c:2e:6c:17:0f:ed:37:d9:8b: c2:08:b8:a9:72:a3:4a:cd:ac:6b:76:16:2f:4b:25: ec:76:ac:da:6b:f6:98:3e:f1:43:f9:e1:53:c5:b3: 05:b6:53:a3:70:3b:5a:9a:73:40:1c:9a:ff:da:46: 20:65:54:e5:19:75:e4:49:6d:1c:1b:b9:78:12:7f: ac:6b:d0:c9:05:50:50:00:c0:6d:cf:17:b1:ed:43: 23:bb:89:b8:1d:e1:9b:39:99:cf:a5:f1:44:0b:c5: 85:0c:a9:40:64:0c:bc:15:25:9f:0c:4b:60:29:72: 85:4d:88:09:14:bf:6f:c2:88:15:63:2e:84:b5:13: a6:f3:f8:8f:16:2a:cf:ed:8d:16:85:ad:26:53:c6: c8:3b:7c:e4:cf:c7:d5:58:9f:5a:f3:4a:05:7a:d2: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2D:99:60:66:6B:10:81:E6:25:25:BB:C4:BD:E7:E8:54:6C:9E:F1 X509v3 Authority Key Identifier: keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f1:7a:ed:d7:ef:8e:71:cd:03:fa:64:ff:96:aa:d7:2e:04: 01:6a:b0:b1:ea:e2:2f:dc:11:4b:79:34:c4:27:90:c8:4b:b5: c8:13:b2:e6:6f:63:0f:0f:b8:04:47:c2:e9:04:89:7f:07:ce: f6:22:d1:85:c2:42:0a:e7:f5:3c:51:ca:86:89:6e:ec:04:bd: 94:5e:a8:ef:98:d9:2d:30:6b:cb:40:78:d7:eb:be:d7:c2:b4: f4:cf:47:5e:50:8e:6d:73:2b:64:0e:35:3e:39:9c:42:4f:f6: 5b:e2:0f:df:aa:82:44:b0:3e:10:9e:ed:9a:3f:7a:9f:7b:89: 81:53:e3:58:db:03:d4:39:65:7a:3f:ea:82:65:62:22:48:e2: 6e:f5:5b:35:87:ac:df:5b:19:53:1d:98:af:41:70:7a:50:ac: f3:aa:f6:64:06:a2:39:6f:a2:f0:41:82:28:d0:ce:d0:62:d1: ef:a7:cf:31:5f:cc:8d:b4:88:fa:77:89:bb:12:fe:95:d1:52: cb:b1:3d:e8:e1:3f:3d:16:89:2e:e1:b7:89:4f:f4:a3:5e:36: b4:c7:fc:83:6f:50:0d:ca:ac:c4:77:3e:a1:4d:6a:66:4c:e3: 95:0c:6f:b4:88:70:c3:38:f3:00:c4:9f:19:6c:28:52:e2:67: 05:01:9f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtA2j82ZQ9j1h6570/jbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzgzZjNmMTkzMWJhOGQyZWNhMmM1MWJmN2QyN2QzZGMy MDU1NTAwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD Eyg3ZDJkOTk2MDY2NmIxMDgxZTYyNTI1YmJjNGJkZTdlODU0NmM5ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs86TU6VfanPKiJp5v9AKEmipIvv5 yVfOETrkENjG95ocpw4hNN3GF6EbOOtDZYUINYzuZH7Qen6y/mOEnymn/yaeI/hC DWpCy/C5NWPbE4C5s1rgodprV9kd8DSKEEKMLmwXD+032YvCCLipcqNKzaxrdhYv SyXsdqzaa/aYPvFD+eFTxbMFtlOjcDtamnNAHJr/2kYgZVTlGXXkSW0cG7l4En+s a9DJBVBQAMBtzxex7UMju4m4HeGbOZnPpfFEC8WFDKlAZAy8FSWfDEtgKXKFTYgJ FL9vwogVYy6EtROm8/iPFirP7Y0Wha0mU8bIO3zkz8fVWJ9a80oFetJYjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0tmWBmaxCB5iUlu8S95+hUbJ7xMB8GA1UdIwQY MBaAFG84Pz8ZMbqNLsosUb99J9PcIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEt YTYyNWVmNTE4OTJhLzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEtYTYyNWVmNTE4OTJh LzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvF67dfv jnHNA/pk/5aq1y4EAWqwseriL9wRS3k0xCeQyEu1yBOy5m9jDw+4BEfC6QSJfwfO 9iLRhcJCCuf1PFHKholu7AS9lF6o75jZLTBry0B41+u+18K09M9HXlCObXMrZA41 PjmcQk/2W+IP36qCRLA+EJ7tmj96n3uJgVPjWNsD1Dllej/qgmViIkjibvVbNYes 31sZUx2Yr0FwelCs86r2ZAaiOW+i8EGCKNDO0GLR76fPMV/MjbSI+neJuxL+ldFS y7E96OE/PRaJLuG3iU/0o142tMf8g29QDcqsxHc+oU1qZkzjlQxvtIhwwzjzAMSf GWwoUuJnBQGf3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:24 2026 by rpki-client