This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json) Hash identifier: aTtKpVjiZZZ+Z74oolEuYrKh+O+gzR00CHe2MtArYCc= Subject key identifier: 62:A2:EE:55:39:86:7D:6A:D4:03:AE:8A:12:CC:F7:AB:77:23:9E:6D Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Certificate serial: 019AF31D52B2E1F0BF7327949396766231DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: xPFYc6uhFAbOMAC9jUVB1gaSbqK3VoMyiAkxr01y2NM=) 2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:52:b2:e1:f0:bf:73:27:94:93:96:76:62:31:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=62a2ee5539867d6ad403ae8a12ccf7ab77239e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:87:b1:b5:71:f2:79:4e:bc:50:e2:66:34: 95:7d:24:ed:81:e0:15:57:0c:3b:23:0c:c5:6d:9b: a4:ae:83:d7:96:0b:8d:eb:4b:24:89:e3:ba:10:ff: 1d:b5:ec:47:36:e2:20:dc:ff:cd:df:7a:ef:77:a1: 72:ea:f3:58:ca:5e:9e:6c:40:c7:a2:42:c9:9d:ae: dd:e5:3d:aa:72:7f:8c:f6:54:13:2e:26:e2:42:5e: 57:4d:57:7b:a6:3b:45:64:37:19:9e:56:21:db:42: c0:76:e0:6c:a9:4a:f4:0a:ea:ec:a7:05:f5:f4:5c: 13:c6:19:6a:7f:6c:b4:5b:31:a9:8c:6b:2d:ec:c1: a6:b6:7b:80:d6:43:38:64:d7:24:9c:d1:9d:a7:6a: 6e:d4:e6:96:08:99:76:0c:35:5a:b1:df:31:3c:df: fc:1b:97:16:6b:d1:6e:d4:4c:bd:c2:92:c6:49:51: 21:97:5c:40:61:fd:8b:e0:19:6b:83:12:74:55:7a: c5:ed:8b:bc:79:f7:b7:32:73:44:73:f7:e5:c3:90: 09:db:86:64:cc:f5:b5:1d:6f:3d:db:47:5a:38:52: 7c:1a:c4:dd:71:5f:73:a9:e9:c2:a0:58:d9:fa:ea: 7b:fe:1a:5a:a6:1c:b6:c8:58:44:82:c5:ce:6d:34: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:EE:55:39:86:7D:6A:D4:03:AE:8A:12:CC:F7:AB:77:23:9E:6D X509v3 Authority Key Identifier: keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:24:24:7c:60:57:e2:fb:44:2d:5f:c4:a0:91:89:1c:d0: c0:37:4f:e1:ca:49:86:da:a5:f0:af:08:b1:18:9e:fd:28:e1: 5d:c0:da:38:63:62:ae:dd:0d:65:96:7b:e7:a2:dc:f9:57:48: 26:80:3e:8c:0f:c4:24:e0:90:98:bb:54:ca:18:ab:c4:72:a5: 6d:96:76:8e:8d:2f:98:4c:e6:7c:cd:33:f5:23:44:39:01:a3: 6d:5e:37:32:59:1b:90:2f:d0:ee:d4:33:3a:91:ad:2f:36:f7: e1:92:57:14:f4:47:de:49:ce:51:88:73:93:47:13:0d:8e:a7: 54:cc:bc:83:8a:a8:f3:0f:6f:e2:3a:23:90:74:82:86:5a:57: 84:99:ea:cc:aa:e0:b6:fd:18:36:3d:64:5a:ed:5d:2a:a9:f8: 07:3a:0f:79:42:c8:3b:57:7c:0d:c9:e0:f6:75:45:52:cf:5e: e5:34:3b:80:58:2a:59:e3:be:af:69:45:e3:b6:49:a4:e5:c9: 6f:94:68:08:db:79:fe:eb:65:f2:c3:c6:77:36:8f:9f:4e:15: 53:09:98:de:4b:59:41:3d:29:6e:07:76:c6:6e:06:8b:6e:1c: b1:e8:be:76:80:31:e2:8d:d7:8a:9b:82:e9:8f:47:39:4e:d2: a6:31:85:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVKy4fC/cyeUk5Z2YjHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1 MDhlZjIwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD Eyg2MmEyZWU1NTM5ODY3ZDZhZDQwM2FlOGExMmNjZjdhYjc3MjM5ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJiHsbVx8nlOvFDiZjSVfSTtgeAV Vww7IwzFbZukroPXlguN60skieO6EP8dtexHNuIg3P/N33rvd6Fy6vNYyl6ebEDH okLJna7d5T2qcn+M9lQTLibiQl5XTVd7pjtFZDcZnlYh20LAduBsqUr0CurspwX1 9FwTxhlqf2y0WzGpjGst7MGmtnuA1kM4ZNcknNGdp2pu1OaWCJl2DDVasd8xPN/8 G5cWa9Fu1Ey9wpLGSVEhl1xAYf2L4BlrgxJ0VXrF7Yu8efe3MnNEc/flw5AJ24Zk zPW1HW8920daOFJ8GsTdcV9zqenCoFjZ+up7/hpaphy2yFhEgsXObTSU/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKi7lU5hn1q1AOuihLM96t3I55tMB8GA1UdIwQY MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0 LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHckJHxg V+L7RC1fxKCRiRzQwDdP4cpJhtql8K8IsRie/SjhXcDaOGNirt0NZZZ756Lc+VdI JoA+jA/EJOCQmLtUyhirxHKlbZZ2jo0vmEzmfM0z9SNEOQGjbV43MlkbkC/Q7tQz OpGtLzb34ZJXFPRH3knOUYhzk0cTDY6nVMy8g4qo8w9v4jojkHSChlpXhJnqzKrg tv0YNj1kWu1dKqn4BzoPeULIO1d8Dcng9nVFUs9e5TQ7gFgqWeO+r2lF47ZJpOXJ b5RoCNt5/utl8sPGdzaPn04VUwmY3ktZQT0pbgd2xm4Gi24csei+doAx4o3XipuC 6Y9HOU7SpjGFpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:59 2025 by rpki-client