This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json) Hash identifier: Zqf9O/LQplRlZs4LtBd0sO6yNi5eiZx2D9VWokBLMss= Subject key identifier: CC:4A:17:D3:98:64:B1:BA:83:F7:E3:5C:3F:8D:00:43:B3:75:A3:F0 Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Certificate serial: 019AF2AD5F4C1DDBD1F8D0A0D0C52C5187CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft Manifest number: 0479 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: fqt+WeNr9GXmCwlXwzT1nOVVKRxukaTDiZYN5QffAQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5f:4c:1d:db:d1:f8:d0:a0:d0:c5:2c:51:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550 Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=cc4a17d39864b1ba83f7e35c3f8d0043b375a3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:4a:ca:ec:0c:63:8d:69:63:65:77:a5:b1: 6b:38:1b:d5:d2:78:f1:5e:45:aa:74:33:6c:4a:ea: 9d:3c:67:24:1b:01:7c:2f:6f:23:f8:43:f1:23:98: 7d:1d:10:6f:0a:7c:28:e5:fa:51:5c:64:8a:89:e7: 5e:bf:2a:8e:26:27:5d:46:5d:de:28:f3:ea:46:fc: ba:33:9a:7b:a5:96:75:68:02:5a:ab:ad:85:5b:50: c9:5f:55:4b:c6:c9:98:92:48:ae:31:f3:67:a7:5b: 46:a7:02:1e:1a:d5:f6:be:8a:0f:42:d2:b4:65:70: 69:09:e3:d2:7b:0c:a4:ef:43:20:c0:29:f1:ff:06: b4:eb:ae:3e:07:d3:85:bc:a7:01:5e:31:4a:d7:3d: 5a:c0:b8:aa:e5:55:b5:67:1a:72:8e:57:3a:2a:f6: 91:88:a8:a7:7d:97:1e:6e:8c:c7:53:1e:02:6a:3e: 7c:34:de:0d:0a:84:76:61:3e:ea:f2:d1:c1:a7:2f: 51:1c:14:19:03:9b:e4:50:99:9a:2e:17:b6:a2:30: 6c:a2:64:5a:9c:86:57:e5:20:af:bb:a2:49:e3:e3: e3:a2:fe:7f:30:be:e8:15:e9:59:bd:7a:10:2e:a3: 46:e4:97:7a:72:20:54:cb:41:22:3c:fe:91:fd:f9: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:17:D3:98:64:B1:BA:83:F7:E3:5C:3F:8D:00:43:B3:75:A3:F0 X509v3 Authority Key Identifier: keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ac:ef:e9:bc:8d:00:d4:7a:5f:7c:46:26:97:85:97:a7:ad: 19:b7:9f:9c:c7:e0:60:7f:96:82:42:ab:ea:94:f3:77:16:b6: 2a:84:1b:ac:a2:6d:5a:91:b7:0b:cd:a0:9d:8c:19:6a:7e:fe: ff:72:9f:4b:ea:08:8d:7e:25:b1:7b:90:c3:95:50:16:17:4a: d7:82:d3:94:2d:85:da:ed:b6:21:c6:cd:af:60:0b:5e:11:69: 6f:b8:22:af:39:b3:07:96:d8:b9:6e:b7:6a:14:e3:ad:e7:5b: df:50:85:ee:ca:b7:52:1e:92:ad:e4:e9:02:84:a8:62:ea:e6: 65:83:76:0c:62:65:fc:a5:e6:fd:76:8b:2a:62:60:05:d0:ee: 28:a5:8d:72:8c:d8:db:55:f6:c0:ca:89:68:f2:7b:4d:8a:73: 32:68:53:54:69:6f:be:ac:9b:2a:82:f9:57:43:02:45:46:f7: 65:d8:24:de:7d:7c:da:bd:55:1a:04:d3:35:e1:00:1e:04:fa: c2:93:3c:fa:0d:d3:d9:e8:b4:d3:90:ae:b8:bb:09:56:71:23: a4:85:93:38:7b:c5:d6:84:5b:1c:7c:f9:87:2f:10:db:6f:0f: 78:e3:4a:51:1e:fa:46:dd:87:79:82:10:70:f0:76:ad:27:4f: 69:af:cf:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV9MHdvR+NCg0MUsUYfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzgzZjNmMTkzMWJhOGQyZWNhMmM1MWJmN2QyN2QzZGMy MDU1NTAwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EyhjYzRhMTdkMzk4NjRiMWJhODNmN2UzNWMzZjhkMDA0M2IzNzVhM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh1KyuwMY41pY2V3pbFrOBvV0njx XkWqdDNsSuqdPGckGwF8L28j+EPxI5h9HRBvCnwo5fpRXGSKiedevyqOJiddRl3e KPPqRvy6M5p7pZZ1aAJaq62FW1DJX1VLxsmYkkiuMfNnp1tGpwIeGtX2vooPQtK0 ZXBpCePSewyk70MgwCnx/wa0664+B9OFvKcBXjFK1z1awLiq5VW1Zxpyjlc6KvaR iKinfZcebozHUx4Caj58NN4NCoR2YT7q8tHBpy9RHBQZA5vkUJmaLhe2ojBsomRa nIZX5SCvu6JJ4+Pjov5/ML7oFelZvXoQLqNG5Jd6ciBUy0EiPP6R/fkMzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxKF9OYZLG6g/fjXD+NAEOzdaPwMB8GA1UdIwQY MBaAFG84Pz8ZMbqNLsosUb99J9PcIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEt YTYyNWVmNTE4OTJhLzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEtYTYyNWVmNTE4OTJh LzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKzv6byN ANR6X3xGJpeFl6etGbefnMfgYH+WgkKr6pTzdxa2KoQbrKJtWpG3C82gnYwZan7+ /3KfS+oIjX4lsXuQw5VQFhdK14LTlC2F2u22IcbNr2ALXhFpb7girzmzB5bYuW63 ahTjredb31CF7sq3Uh6SreTpAoSoYurmZYN2DGJl/KXm/XaLKmJgBdDuKKWNcozY 21X2wMqJaPJ7TYpzMmhTVGlvvqybKoL5V0MCRUb3Zdgk3n182r1VGgTTNeEAHgT6 wpM8+g3T2ei005CuuLsJVnEjpIWTOHvF1oRbHHz5hy8Q228PeONKUR76Rt2HeYIQ cPB2rSdPaa/PPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:20 2025 by rpki-client