This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json) Hash identifier: J/Lkpiv7n155TmL+F0BVneLadOSK1isTtWTZIhuJIPY= Subject key identifier: 9C:19:6F:20:71:97:3A:DE:8B:C1:72:A7:B5:64:51:01:9E:DA:4B:D9 Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Certificate serial: 019B2551676BDDCDD701BB7D2C8CD7F94A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft Manifest number: 0B69 Signing time: Tue 16 Dec 2025 04:00:50 +0000 Manifest this update: Tue 16 Dec 2025 04:00:50 +0000 Manifest next update: Wed 17 Dec 2025 04:00:50 +0000 Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: NzvbtYuAVLWNneKv/gyF1vwJyLcd6UAEVo/CZY7HCu0=) 2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:67:6b:dd:cd:d7:01:bb:7d:2c:8c:d7:f9:4a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Validity Not Before: Dec 16 04:00:50 2025 GMT Not After : Dec 17 04:00:50 2025 GMT Subject: CN=9c196f2071973ade8bc172a7b56451019eda4bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:20:8b:b7:73:a2:23:f5:23:b1:af:88:95: 81:e6:c8:c4:98:aa:e3:74:4a:57:96:26:fb:c1:2f: 95:ca:2d:26:52:2c:49:d5:c2:13:76:0c:0d:24:0a: 17:1f:8f:b0:9a:ec:6b:6c:6b:b5:65:a2:b2:6f:c3: f9:40:ce:cc:8a:30:86:59:91:4f:5f:da:0a:5b:e8: 24:86:a4:7c:8d:2f:dc:75:2e:54:84:25:c2:8b:59: 0d:24:bb:34:26:a8:44:22:b2:25:dc:3f:bc:f4:d2: 15:2a:71:dc:de:76:f6:f9:b7:28:d0:a2:de:17:c3: 61:b9:a6:dd:63:f6:fe:bc:60:46:70:00:a2:bc:0e: 14:f2:e7:00:04:bf:b1:cd:4a:01:1e:ab:75:fb:fc: 93:2c:7b:44:31:33:21:fb:57:58:74:ac:a1:ed:b7: b3:e5:be:6e:a9:0d:9f:94:f6:a7:78:37:19:83:b3: ef:0b:20:5b:b5:54:d2:b2:19:f6:c7:d3:b8:0c:09: 4c:67:36:a0:ab:14:8c:c7:7f:18:a7:0f:08:37:b1: e5:5c:78:cb:03:40:1e:3d:8a:4c:e2:7b:7c:2e:72: 91:1f:10:55:9f:f1:07:a3:c7:08:66:39:14:3a:e3: fb:0a:03:20:7f:06:5a:b2:99:1f:1b:82:20:af:79: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:19:6F:20:71:97:3A:DE:8B:C1:72:A7:B5:64:51:01:9E:DA:4B:D9 X509v3 Authority Key Identifier: keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:48:ca:a7:84:95:a6:66:ab:d5:72:ad:4d:f1:c1:4c:b1:f7: d0:3b:e3:d3:4c:4f:0a:8e:40:0f:79:4d:d6:0b:72:f4:2e:09: 0f:9e:9c:e9:c1:b0:28:bc:33:b7:2c:8e:26:fd:23:12:1c:2d: fc:34:2d:69:f1:b3:56:41:b3:ce:cc:f7:77:78:0c:82:63:48: 4d:33:68:78:c3:6c:71:c2:40:80:12:9b:61:14:e7:5c:44:44: a0:37:38:e3:d9:f7:28:83:19:84:3e:8a:40:58:13:66:79:2f: e7:b8:2f:d1:13:ec:37:3f:fe:a4:2d:de:ec:c8:5a:6a:89:e8: 65:7a:77:2e:30:ca:c2:eb:f6:72:dc:ab:7b:e7:d6:50:66:0a: 0b:6b:a3:dc:10:05:4c:ab:48:51:b8:e9:db:21:30:52:70:c3: ab:4a:5e:0c:52:02:f1:ca:fc:53:e7:bd:cf:4a:01:0f:1b:c4: b8:12:4b:45:b0:00:93:ad:cc:9d:e6:61:a3:44:43:fa:3f:89: c0:22:44:0b:9a:8f:f1:06:9f:1a:5a:46:46:b7:57:59:40:83: 79:0c:fd:d4:73:17:8e:34:7f:54:96:db:7b:fe:96:0b:29:90: 42:ad:2f:33:57:e6:90:b9:14:63:7c:54:24:74:49:2a:cc:b8: 0c:e8:17:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUWdr3c3XAbt9LIzX+UpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3 OTgyNWEwHhcNMjUxMjE2MDQwMDUwWhcNMjUxMjE3MDQwMDUwWjAzMTEwLwYDVQQD Eyg5YzE5NmYyMDcxOTczYWRlOGJjMTcyYTdiNTY0NTEwMTllZGE0YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ggi7dzoiP1I7GviJWB5sjEmKrj dEpXlib7wS+Vyi0mUixJ1cITdgwNJAoXH4+wmuxrbGu1ZaKyb8P5QM7MijCGWZFP X9oKW+gkhqR8jS/cdS5UhCXCi1kNJLs0JqhEIrIl3D+89NIVKnHc3nb2+bco0KLe F8NhuabdY/b+vGBGcACivA4U8ucABL+xzUoBHqt1+/yTLHtEMTMh+1dYdKyh7bez 5b5uqQ2flPaneDcZg7PvCyBbtVTSshn2x9O4DAlMZzagqxSMx38Ypw8IN7HlXHjL A0AePYpM4nt8LnKRHxBVn/EHo8cIZjkUOuP7CgMgfwZaspkfG4Igr3nyuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwZbyBxlzrei8Fyp7VkUQGe2kvZMB8GA1UdIwQY MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt NTIzNjJiNmIzMzM0LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0 LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUjKp4SV pmar1XKtTfHBTLH30Dvj00xPCo5AD3lN1gty9C4JD56c6cGwKLwztyyOJv0jEhwt /DQtafGzVkGzzsz3d3gMgmNITTNoeMNsccJAgBKbYRTnXEREoDc449n3KIMZhD6K QFgTZnkv57gv0RPsNz/+pC3e7MhaaonoZXp3LjDKwuv2ctyre+fWUGYKC2uj3BAF TKtIUbjp2yEwUnDDq0peDFIC8cr8U+e9z0oBDxvEuBJLRbAAk63MneZho0RD+j+J wCJEC5qP8QafGlpGRrdXWUCDeQz91HMXjjR/VJbbe/6WCymQQq0vM1fmkLkUY3xU JHRJKsy4DOgXiQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:27:18 2025 by rpki-client