This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json) Hash identifier: uQdIdNvuoTXg2oU+Cjbe4IqmvWrtbic38tq9iR8zG4o= Subject key identifier: BC:A8:07:64:F1:03:FF:64:52:80:53:1B:C6:94:3E:0C:13:DC:27:72 Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Certificate serial: 019AF27704371F0E405A9BF2A9695732B36C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=) 2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: Cs5h5z27Q6PjrfcWjTdh8cKspBMVtkCV5oAewd8j7EI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:04:37:1f:0e:40:5a:9b:f2:a9:69:57:32:b3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=bca80764f103ff645280531bc6943e0c13dc2772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:f3:cd:e9:a2:0f:e0:06:76:1a:92:e8:09: ed:9a:ec:38:12:9d:05:b1:47:34:fd:ec:dc:33:01: b7:ca:bd:5d:3a:6d:51:58:c3:a2:84:b2:4c:e4:48: 58:ac:df:0e:60:b8:ae:a5:5a:cc:5a:0a:1f:56:3d: 8c:04:e5:bf:c7:45:b9:56:34:f1:00:2b:31:70:be: 81:a5:76:91:70:f8:c3:a2:dc:27:64:59:ff:c7:7b: c5:8c:3d:3b:42:60:78:4b:3a:ce:13:e2:a7:07:69: 6f:67:0b:ae:e9:ca:0d:24:f9:5e:65:9a:3a:10:7f: 04:a1:87:bb:86:72:1a:da:51:28:55:74:2c:bf:6b: ab:68:b4:b2:b1:c0:9b:1e:34:11:9d:32:fe:59:4c: 38:3a:5e:3e:5f:b1:f3:2f:ef:da:f0:56:6e:d6:f7: 08:8d:ff:81:28:d6:ef:f6:f7:19:0d:8a:78:f2:9f: 7e:31:57:62:e2:16:54:f6:ec:72:43:c9:15:80:17: 6f:fb:47:cd:a8:b2:34:b4:a7:45:9d:74:ac:ee:f3: f1:52:ce:a7:33:44:91:1b:48:a1:73:93:25:a7:cd: 74:19:db:e8:1b:e3:15:f3:67:14:98:c3:ee:90:d3: 8f:6b:7a:f0:f5:d0:08:21:86:de:82:42:5f:ab:fa: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:07:64:F1:03:FF:64:52:80:53:1B:C6:94:3E:0C:13:DC:27:72 X509v3 Authority Key Identifier: keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:b1:c1:eb:7c:0e:80:9b:c3:8d:4f:fc:27:12:10:a4:9f: 3f:fb:ed:14:15:71:d5:98:fb:7a:11:3f:aa:75:60:b7:de:95: dd:f1:b5:66:36:c5:71:7e:33:8f:22:f4:cb:65:40:29:83:2e: b4:6c:8e:45:7e:79:2d:75:c3:91:48:4b:40:3c:34:85:e5:e8: 71:ff:49:54:82:c4:88:6c:88:df:d7:45:b9:db:a0:51:67:9a: 6c:d6:75:1a:b1:72:26:82:80:98:56:16:f4:c5:01:8c:92:bf: cb:e0:3b:92:a6:51:d6:51:0f:26:16:34:6b:67:e3:6a:7e:b5: 22:df:12:96:6c:ac:bf:dd:fa:af:b9:e2:b3:17:de:8a:fb:63: 70:63:7e:8a:56:40:63:3d:1e:c8:08:86:9b:58:f1:2f:72:63: dd:13:67:a5:a6:b4:29:fd:d9:63:6e:b3:8f:f1:d0:29:ad:4e: 7b:e9:14:c5:49:bb:13:66:0e:13:10:08:a2:fe:d4:fc:d9:1e: c9:ca:f5:1a:df:48:53:13:9b:55:91:74:ad:21:b8:df:0e:82: fa:96:99:fd:f7:f7:0b:1c:6d:ac:e8:63:3b:40:40:70:a6:59: 45:60:b3:10:25:2e:6c:12:60:e2:0b:ab:de:c9:89:01:32:a6: 9b:90:46:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwQ3Hw5AWpvyqWlXMrNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj NmIzNTAwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EyhiY2E4MDc2NGYxMDNmZjY0NTI4MDUzMWJjNjk0M2UwYzEzZGMyNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssjzzemiD+AGdhqS6Antmuw4Ep0F sUc0/ezcMwG3yr1dOm1RWMOihLJM5EhYrN8OYLiupVrMWgofVj2MBOW/x0W5VjTx ACsxcL6BpXaRcPjDotwnZFn/x3vFjD07QmB4SzrOE+KnB2lvZwuu6coNJPleZZo6 EH8EoYe7hnIa2lEoVXQsv2uraLSyscCbHjQRnTL+WUw4Ol4+X7HzL+/a8FZu1vcI jf+BKNbv9vcZDYp48p9+MVdi4hZU9uxyQ8kVgBdv+0fNqLI0tKdFnXSs7vPxUs6n M0SRG0ihc5Mlp810GdvoG+MV82cUmMPukNOPa3rw9dAIIYbegkJfq/rKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyoB2TxA/9kUoBTG8aUPgwT3CdyMB8GA1UdIwQY MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4 LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7mxwet8 DoCbw41P/CcSEKSfP/vtFBVx1Zj7ehE/qnVgt96V3fG1ZjbFcX4zjyL0y2VAKYMu tGyORX55LXXDkUhLQDw0heXocf9JVILEiGyI39dFudugUWeabNZ1GrFyJoKAmFYW 9MUBjJK/y+A7kqZR1lEPJhY0a2fjan61It8Slmysv936r7nisxfeivtjcGN+ilZA Yz0eyAiGm1jxL3Jj3RNnpaa0Kf3ZY26zj/HQKa1Oe+kUxUm7E2YOExAIov7U/Nke ycr1Gt9IUxObVZF0rSG43w6C+paZ/ff3CxxtrOhjO0BAcKZZRWCzECUubBJg4gur 3smJATKmm5BGEA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:07 2025 by rpki-client