This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json) Hash identifier: EdIek2DKPGjE0PruncwXMCbul83FZWTP/S/YjG79MC0= Subject key identifier: 90:A7:89:CF:6E:B8:DE:54:79:8E:9C:AC:66:9F:FE:E3:0B:7A:95:F6 Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Certificate serial: 019B1F87E700F4BA187D505819EF7473AABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 01:02:38 +0000 Manifest this update: Mon 15 Dec 2025 01:02:38 +0000 Manifest next update: Tue 16 Dec 2025 01:02:38 +0000 Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: r1nL52J8j6UFd9KZyjGDA0q9aOxLeQnOO/xNbk76yEw=) 2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:e7:00:f4:ba:18:7d:50:58:19:ef:74:73:aa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Validity Not Before: Dec 15 01:02:38 2025 GMT Not After : Dec 16 01:02:38 2025 GMT Subject: CN=90a789cf6eb8de54798e9cac669ffee30b7a95f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:ae:47:47:a5:d1:ce:ce:f1:71:4a:7d:c3: db:55:f2:76:0b:8c:96:87:11:37:2f:c5:45:24:99: a1:87:51:07:68:24:5d:c0:53:fd:f6:46:c0:f9:6e: 1f:21:ee:a5:86:fb:39:d6:cb:1f:fd:d1:c6:44:a5: 68:f5:9e:86:38:81:5b:05:7b:4b:59:d6:c8:bc:24: c3:93:43:fb:12:30:78:ae:c0:b2:c9:61:0c:60:b2: f1:e5:d9:7e:90:b9:66:0b:e1:0a:7f:f3:93:cb:e2: 18:16:db:d3:82:38:f1:93:c4:99:d4:41:cf:fc:d6: ad:71:9b:2c:9e:28:29:38:43:57:f0:51:e4:e1:a4: 9c:70:87:86:ec:be:89:2f:19:10:e6:d0:51:25:ea: c8:60:36:b3:14:5b:af:2a:c7:7b:bb:a9:97:47:c0: be:6a:34:9b:81:50:c2:37:68:15:42:37:6e:08:4a: ed:54:01:f1:13:f7:dd:9d:5c:45:fc:36:75:94:66: 70:5c:5f:aa:ff:d4:a0:48:a0:ff:72:38:51:e6:20: db:b0:e4:9f:c9:fa:77:44:27:18:49:4b:a0:ac:95: 4b:77:61:bb:a5:a4:80:f3:18:65:d6:38:4c:1e:72: f5:a1:9f:46:f5:64:da:40:67:6a:9f:51:5f:ff:8b: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:89:CF:6E:B8:DE:54:79:8E:9C:AC:66:9F:FE:E3:0B:7A:95:F6 X509v3 Authority Key Identifier: keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5b:33:6a:62:ee:83:ff:ad:1c:2b:de:a1:5d:cf:40:c2:18: 77:7a:97:56:a8:4f:fd:95:d7:00:d8:32:29:6f:32:d2:d3:10: 4e:25:c6:32:a2:2c:82:8f:a6:41:39:ff:8a:05:10:10:23:28: 57:9e:58:3c:ba:9f:73:c1:6d:64:d4:d8:1a:b6:c9:07:18:f5: c2:bd:16:31:b6:00:b4:5d:a3:f0:be:16:22:aa:79:bc:c9:bb: b9:ee:9b:d5:ad:7a:8a:92:82:88:83:bd:c4:c4:78:5b:e0:80: 1d:42:51:47:ab:a7:95:e1:f9:83:c9:9d:df:e3:cb:bf:b2:58: 25:9b:52:fa:f9:08:4a:d7:24:8e:1d:cf:75:5d:03:e4:d7:d0: 9d:cc:e4:68:92:30:11:01:e7:c5:7a:8e:2e:9e:bc:4b:d4:1a: 38:0a:33:31:17:7e:3d:bf:18:24:4d:d6:18:4c:fd:23:e6:b0: 69:41:98:6d:ca:3c:a1:3f:85:ef:a7:5f:9e:de:3a:56:8e:e8: 75:2d:ee:09:cc:a4:d2:be:e1:a5:aa:6e:96:23:99:50:20:f8: fe:f9:89:f0:0e:11:30:42:55:f8:7f:48:df:5c:11:90:29:7f: 25:c7:dd:5b:f5:24:94:eb:ad:39:64:35:64:7c:22:23:bb:77: 7d:de:f3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh+cA9LoYfVBYGe90c6q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1 MDhlZjIwHhcNMjUxMjE1MDEwMjM4WhcNMjUxMjE2MDEwMjM4WjAzMTEwLwYDVQQD Eyg5MGE3ODljZjZlYjhkZTU0Nzk4ZTljYWM2NjlmZmVlMzBiN2E5NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6auR0el0c7O8XFKfcPbVfJ2C4yW hxE3L8VFJJmhh1EHaCRdwFP99kbA+W4fIe6lhvs51ssf/dHGRKVo9Z6GOIFbBXtL WdbIvCTDk0P7EjB4rsCyyWEMYLLx5dl+kLlmC+EKf/OTy+IYFtvTgjjxk8SZ1EHP /NatcZssnigpOENX8FHk4aSccIeG7L6JLxkQ5tBRJerIYDazFFuvKsd7u6mXR8C+ ajSbgVDCN2gVQjduCErtVAHxE/fdnVxF/DZ1lGZwXF+q/9SgSKD/cjhR5iDbsOSf yfp3RCcYSUugrJVLd2G7paSA8xhl1jhMHnL1oZ9G9WTaQGdqn1Ff/4tBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCnic9uuN5UeY6crGaf/uMLepX2MB8GA1UdIwQY MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0 LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlszamLu g/+tHCveoV3PQMIYd3qXVqhP/ZXXANgyKW8y0tMQTiXGMqIsgo+mQTn/igUQECMo V55YPLqfc8FtZNTYGrbJBxj1wr0WMbYAtF2j8L4WIqp5vMm7ue6b1a16ipKCiIO9 xMR4W+CAHUJRR6unleH5g8md3+PLv7JYJZtS+vkIStckjh3PdV0D5NfQnczkaJIw EQHnxXqOLp68S9QaOAozMRd+Pb8YJE3WGEz9I+awaUGYbco8oT+F76dfnt46Vo7o dS3uCcyk0r7hpapuliOZUCD4/vmJ8A4RMEJV+H9I31wRkCl/JcfdW/UklOutOWQ1 ZHwiI7t3fd7zYQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:56 2025 by rpki-client