This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json) Hash identifier: BuieOb90LnYGp0XEEHubUFwXkB7Cm1OmHCGetrYCHzQ= Subject key identifier: 29:17:48:B2:83:90:F4:75:ED:20:F2:E4:D7:1E:EE:EC:BA:C4:12:B3 Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de Certificate serial: 019B5ABF44C21BE2D8C3A758E85A5AEE0F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft Manifest number: 162D Signing time: Fri 26 Dec 2025 13:00:42 +0000 Manifest this update: Fri 26 Dec 2025 13:00:42 +0000 Manifest next update: Sat 27 Dec 2025 13:00:42 +0000 Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: y5LeCL8bPe0R9hMdw1a7pvw1OFobZwazEx/VKeZcBHk=) 2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:44:c2:1b:e2:d8:c3:a7:58:e8:5a:5a:ee:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de Validity Not Before: Dec 26 13:00:42 2025 GMT Not After : Dec 27 13:00:42 2025 GMT Subject: CN=291748b28390f475ed20f2e4d71eeeecbac412b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:d5:72:9f:da:c9:97:f3:f4:85:8f:e2:4f: 66:5b:a0:7c:58:16:f4:19:81:11:19:b4:20:e6:4d: 66:1e:ad:b1:eb:01:9c:1c:3c:3e:6f:be:0b:9f:c3: d4:a2:4f:2e:4a:f1:92:17:d4:27:ea:4f:95:8c:d0: 8c:20:2e:d4:b6:ae:16:39:78:20:07:c0:f9:10:8f: 76:cc:4c:c2:fe:02:d2:ab:f5:aa:c0:10:66:33:8b: cc:45:44:ed:12:01:60:82:84:90:1c:80:a4:3f:3f: 48:55:e3:74:0f:36:e4:51:9c:cd:cb:31:e2:af:61: 63:36:7f:53:02:be:60:fc:4c:c0:4d:c1:6f:75:80: 39:02:6b:64:bd:1a:39:6d:96:2d:4d:bc:1d:0a:16: 52:b1:81:06:e3:72:3a:75:1d:4a:c4:0f:db:0e:45: 82:a4:96:43:3b:c9:6c:ff:6d:0a:02:86:82:30:76: 92:a3:e0:5d:84:d5:df:fe:50:33:b5:69:6e:ff:52: 49:7c:47:a3:24:57:d4:98:51:a4:e4:05:39:76:44: f5:c6:61:6c:91:ed:21:7a:dd:f0:35:b8:7e:58:19: 19:f0:d2:bc:8a:70:fe:a7:41:c0:2a:81:34:23:9a: 4c:11:e6:81:44:a8:51:14:26:e1:6b:b0:71:9e:d4: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:48:B2:83:90:F4:75:ED:20:F2:E4:D7:1E:EE:EC:BA:C4:12:B3 X509v3 Authority Key Identifier: keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e4:c4:c7:7e:65:2b:94:02:1d:ce:8e:8f:1a:01:57:29:ce: 9d:eb:8b:9d:71:7c:df:82:74:15:07:01:b1:41:f1:1e:b3:1d: 62:a4:d0:43:92:63:45:4d:ce:d2:6b:e0:ea:19:50:12:14:15: f6:96:e2:3a:cc:07:f2:7f:9f:48:5b:0e:75:67:1b:67:1b:54: 56:e1:12:e6:1f:75:1f:32:ac:81:9b:f5:59:bb:3f:da:03:f6: 76:83:bb:7f:43:cf:2c:93:01:22:a1:67:7a:2b:70:9c:3c:ed: 55:53:69:18:d9:a4:3f:6d:c7:16:90:a0:b5:8f:66:e4:2f:e7: 0b:23:d2:36:cc:17:88:5c:12:e9:1c:0a:99:e7:84:60:6f:8e: 6f:98:9f:73:3c:04:67:12:cc:ec:54:04:3d:e8:ab:fa:2d:ce: ee:01:98:81:37:6a:d0:79:5b:ce:a2:09:40:e5:fa:9c:42:48: aa:57:f6:b7:41:2c:e9:78:3d:05:9e:58:2b:87:4f:0a:62:c8: 3d:3f:ec:9e:f5:c1:f1:49:da:f7:13:03:57:28:0c:f3:18:8e: e6:18:7f:37:7c:79:f5:75:e4:c8:73:e9:f2:83:db:27:d8:b7: 97:f1:15:ab:2c:6c:59:1b:57:9d:83:8b:f5:86:da:71:1f:fd: 42:6a:9d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav0TCG+LYw6dY6Fpa7g9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTM1OWRhMGQwYjdhODI5ZTQyMGZkOTMyY2FmYzFlM2Mx NTcyZGUwHhcNMjUxMjI2MTMwMDQyWhcNMjUxMjI3MTMwMDQyWjAzMTEwLwYDVQQD EygyOTE3NDhiMjgzOTBmNDc1ZWQyMGYyZTRkNzFlZWVlY2JhYzQxMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxvVcp/ayZfz9IWP4k9mW6B8WBb0 GYERGbQg5k1mHq2x6wGcHDw+b74Ln8PUok8uSvGSF9Qn6k+VjNCMIC7Utq4WOXgg B8D5EI92zEzC/gLSq/WqwBBmM4vMRUTtEgFggoSQHICkPz9IVeN0DzbkUZzNyzHi r2FjNn9TAr5g/EzATcFvdYA5AmtkvRo5bZYtTbwdChZSsYEG43I6dR1KxA/bDkWC pJZDO8ls/20KAoaCMHaSo+BdhNXf/lAztWlu/1JJfEejJFfUmFGk5AU5dkT1xmFs ke0het3wNbh+WBkZ8NK8inD+p0HAKoE0I5pMEeaBRKhRFCbha7BxntRmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkXSLKDkPR17SDy5Nce7uy6xBKzMB8GA1UdIwQY MBaAFAQTWdoNC3qCnkIP2TLK/B48FXLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEt ODZmZTM2Y2EwYjc0LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEtODZmZTM2Y2EwYjc0 LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuTEx35l K5QCHc6OjxoBVynOneuLnXF834J0FQcBsUHxHrMdYqTQQ5JjRU3O0mvg6hlQEhQV 9pbiOswH8n+fSFsOdWcbZxtUVuES5h91HzKsgZv1Wbs/2gP2doO7f0PPLJMBIqFn eitwnDztVVNpGNmkP23HFpCgtY9m5C/nCyPSNswXiFwS6RwKmeeEYG+Ob5ifczwE ZxLM7FQEPeir+i3O7gGYgTdq0HlbzqIJQOX6nEJIqlf2t0Es6Xg9BZ5YK4dPCmLI PT/snvXB8Una9xMDVygM8xiO5hh/N3x59XXkyHPp8oPbJ9i3l/EVqyxsWRtXnYOL 9YbacR/9QmqddQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:04 2025 by rpki-client