This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json) Hash identifier: t+Cjkvn9ic81ujmKjBe2s54GvTDlMUgDvRBkd4jA4PM= Subject key identifier: 47:E5:D0:A1:C0:51:B9:73:5D:A4:05:65:D4:F4:D7:42:DE:B3:E7:6A Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Certificate serial: 019BF3BDC69806AB1B512DE1BC88A32BFA82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft Manifest number: 0BD4 Signing time: Sun 25 Jan 2026 06:00:59 +0000 Manifest this update: Sun 25 Jan 2026 06:00:59 +0000 Manifest next update: Mon 26 Jan 2026 06:00:59 +0000 Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=) 2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: MijGvbljQKhkjH3wGUXtXFoAVGSRE0Ou4tX5ivDjIvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:c6:98:06:ab:1b:51:2d:e1:bc:88:a3:2b:fa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Validity Not Before: Jan 25 06:00:59 2026 GMT Not After : Jan 26 06:00:59 2026 GMT Subject: CN=47e5d0a1c051b9735da40565d4f4d742deb3e76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:47:cb:b1:9c:da:91:b1:83:dd:e0:a8:d6: d2:25:df:cd:b3:88:12:8c:04:56:aa:60:ef:a4:60: d8:a4:df:0b:63:2a:cf:16:0f:6d:95:88:41:ee:99: a7:7b:04:bb:68:fa:72:2b:40:d7:18:f7:9e:bc:9b: 7d:31:72:80:87:c7:bc:53:72:fa:84:a1:5c:0c:5e: 3c:15:3c:11:c1:4a:4f:67:01:37:71:7c:18:88:05: 90:c8:35:aa:00:35:28:2f:88:36:bc:bd:24:bc:ee: b4:3a:bb:dd:1a:92:17:69:df:58:34:83:e4:ac:b9: a8:7d:37:e7:04:af:b6:25:fa:93:9a:c8:2f:43:46: 5e:51:28:ab:3e:40:5e:61:2d:0b:f7:cb:5f:16:0d: 1a:ad:af:8d:9b:6c:e2:f8:e7:ed:e1:2d:24:c8:45: 03:0d:fc:f3:ea:21:75:00:0b:f4:c3:01:84:2f:94: 11:08:04:f3:55:e3:6a:87:82:fb:94:4b:aa:72:63: 4b:5a:6b:76:51:d4:20:cd:25:f0:55:ab:21:75:e7: 42:63:4b:22:c5:80:30:93:06:b0:26:fd:dd:67:a7: 07:92:99:7a:0b:7e:88:4c:f0:e0:16:d0:13:b4:43: e0:ce:0c:6a:cd:a0:cc:e8:2c:44:7e:c1:33:20:81: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E5:D0:A1:C0:51:B9:73:5D:A4:05:65:D4:F4:D7:42:DE:B3:E7:6A X509v3 Authority Key Identifier: keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:a3:65:63:17:6e:50:ef:d2:37:88:77:ef:40:fc:f2:c6: af:f7:d0:24:3e:c4:37:25:bb:98:cd:5b:91:37:bb:91:1e:13: e7:66:3e:95:2d:8a:5a:b8:61:81:23:79:bd:b0:9a:73:49:6c: f7:fd:5e:11:69:ef:11:3b:5e:72:65:68:db:30:c3:21:fb:a9: 55:a3:1e:ec:09:c0:44:a4:8f:8d:3b:c4:9f:36:95:90:f1:ac: 2d:46:d6:65:2a:97:d3:91:69:92:b2:dd:13:61:c8:9b:16:5d: d3:e1:1b:e1:8d:c0:67:68:36:f3:04:dd:98:54:60:73:f0:6c: d0:24:79:30:5f:4f:2a:df:9b:02:38:92:16:2b:c9:59:87:f5: 1d:01:94:2b:64:30:25:36:a9:62:fd:bd:cd:ca:fc:2c:51:dd: a4:bd:73:a6:0c:fa:e9:ab:64:b6:37:22:10:ec:10:18:c3:39: d9:77:b8:24:73:0a:25:eb:b7:0e:68:e0:1c:dd:a2:9c:58:69: 00:66:e7:5d:a5:28:87:06:d3:e3:84:66:cc:93:fe:5b:27:73: 4d:5a:78:f8:48:80:0a:02:37:56:9c:b7:f7:04:d4:60:d8:5e: fe:b6:5f:e5:66:6a:a0:55:fe:c9:07:f7:9e:7f:8e:17:db:56: f7:01:d7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcaYBqsbUS3hvIijK/qCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3 OTgyNWEwHhcNMjYwMTI1MDYwMDU5WhcNMjYwMTI2MDYwMDU5WjAzMTEwLwYDVQQD Eyg0N2U1ZDBhMWMwNTFiOTczNWRhNDA1NjVkNGY0ZDc0MmRlYjNlNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+RHy7Gc2pGxg93gqNbSJd/Ns4gS jARWqmDvpGDYpN8LYyrPFg9tlYhB7pmnewS7aPpyK0DXGPeevJt9MXKAh8e8U3L6 hKFcDF48FTwRwUpPZwE3cXwYiAWQyDWqADUoL4g2vL0kvO60OrvdGpIXad9YNIPk rLmofTfnBK+2JfqTmsgvQ0ZeUSirPkBeYS0L98tfFg0ara+Nm2zi+Oft4S0kyEUD Dfzz6iF1AAv0wwGEL5QRCATzVeNqh4L7lEuqcmNLWmt2UdQgzSXwVashdedCY0si xYAwkwawJv3dZ6cHkpl6C36ITPDgFtATtEPgzgxqzaDM6CxEfsEzIIG5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfl0KHAUblzXaQFZdT010Les+dqMB8GA1UdIwQY MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt NTIzNjJiNmIzMzM0LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0 LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNajZWMX blDv0jeId+9A/PLGr/fQJD7ENyW7mM1bkTe7kR4T52Y+lS2KWrhhgSN5vbCac0ls 9/1eEWnvETtecmVo2zDDIfupVaMe7AnARKSPjTvEnzaVkPGsLUbWZSqX05FpkrLd E2HImxZd0+Eb4Y3AZ2g28wTdmFRgc/Bs0CR5MF9PKt+bAjiSFivJWYf1HQGUK2Qw JTapYv29zcr8LFHdpL1zpgz66atktjciEOwQGMM52Xe4JHMKJeu3DmjgHN2inFhp AGbnXaUohwbT44RmzJP+WydzTVp4+EiACgI3Vpy39wTUYNhe/rZf5WZqoFX+yQf3 nn+OF9tW9wHXjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:24 2026 by rpki-client