This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json) Hash identifier: vJkUtUzQNBGfkm4OTYFCu6uEVLCMJKjFJd9XqnwGH4Y= Subject key identifier: 30:4B:53:5D:FF:1E:1B:5F:BB:E0:F6:FE:4A:AC:FC:61:18:36:84:5B Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Certificate serial: 019AF12E2DB7D80A39C87EEBB4B08DB9144F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft Manifest number: 0B4E Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: G/WZ4NhL9+l/d9amgn5ISjcSCbWJoKOpKRhMMsHd+0E=) 2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2d:b7:d8:0a:39:c8:7e:eb:b4:b0:8d:b9:14:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=304b535dff1e1b5fbbe0f6fe4aacfc611836845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:d9:ec:e9:3a:a9:48:6c:1e:01:35:d3:cd: 79:50:06:a8:83:38:a7:f4:28:a4:34:5d:56:8b:19: 69:3d:0f:cf:e3:e1:ba:b2:b6:d5:1f:3c:b5:e2:46: 83:cb:9a:44:f4:c1:d1:35:58:21:e1:1d:95:14:b3: a6:59:3f:d9:5b:73:7b:9b:49:a6:b2:54:e3:75:1f: bb:27:84:0e:71:b1:84:74:c3:2e:73:34:ee:ee:58: d8:a3:fe:f8:38:58:1c:9c:f2:3d:e7:4a:5e:e8:cf: a5:f4:48:ec:c2:6f:f5:3a:2a:47:4b:18:1c:28:ac: 1e:1e:1b:23:5e:d4:9c:7a:45:51:f7:c6:a1:41:cf: 0f:ea:75:84:e1:d0:2e:2b:0c:bc:81:8e:ec:ea:ad: e3:2b:59:93:31:c6:40:ae:ca:60:cb:06:f8:27:8a: fa:f6:8d:61:1a:31:74:46:fc:ce:5e:12:53:cd:50: ce:45:8c:9e:93:e7:89:60:84:5b:28:1d:6c:23:31: aa:fa:ed:37:34:50:60:dc:e9:66:dc:b9:f0:76:a1: 24:1c:50:01:d7:ca:c4:3c:b6:93:84:3b:81:00:1a: 48:fd:fb:b5:96:af:77:e2:7b:b3:48:ee:31:09:c6: 42:61:4f:8f:35:34:12:80:88:ae:78:22:99:fc:b8: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:53:5D:FF:1E:1B:5F:BB:E0:F6:FE:4A:AC:FC:61:18:36:84:5B X509v3 Authority Key Identifier: keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9d:36:9d:41:68:df:14:40:f9:78:ee:1e:52:b5:1b:df:1f: b9:a2:4c:b6:2a:7f:0c:79:86:74:82:5e:09:3c:df:d1:97:ae: 3a:76:b2:7f:d9:f6:c6:3a:c9:f5:21:c7:42:6f:f6:8f:f2:b2: d5:f6:b5:fd:55:c0:5c:1b:f6:8d:3e:46:10:9d:a6:06:48:38: 47:d0:ef:cd:fc:74:74:d3:25:b8:58:12:18:e8:4f:0d:22:c1: 73:52:9c:79:ea:06:92:4b:4a:19:47:64:fa:63:5d:5c:54:c4: ec:f0:fb:5f:67:5e:1d:51:0f:4c:85:50:c8:e3:07:18:19:08: b3:61:d6:07:a7:56:c1:19:e3:48:eb:60:9c:44:0d:84:5d:5c: 95:0a:6c:96:b5:74:3a:d4:16:50:3d:09:a1:58:64:e5:31:3b: ce:f4:0c:cf:70:0e:0f:04:c3:8d:b2:a9:66:6f:fc:48:74:05: a0:51:61:27:2d:f4:13:85:df:3a:3a:ec:4b:a1:9e:6e:e7:31: c7:3b:a6:d2:6d:6f:7a:42:4d:2d:75:e9:7c:3d:28:51:18:22: 82:57:c9:a5:7d:34:d3:61:a0:4b:56:e2:ab:12:5a:57:70:1c: aa:65:c1:87:82:a5:12:c2:d3:aa:3f:64:13:39:97:4f:0d:69: d2:42:97:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi232Ao5yH7rtLCNuRRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3 OTgyNWEwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygzMDRiNTM1ZGZmMWUxYjVmYmJlMGY2ZmU0YWFjZmM2MTE4MzY4NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01zZ7Ok6qUhsHgE10815UAaogzin 9CikNF1WixlpPQ/P4+G6srbVHzy14kaDy5pE9MHRNVgh4R2VFLOmWT/ZW3N7m0mm slTjdR+7J4QOcbGEdMMuczTu7ljYo/74OFgcnPI950pe6M+l9Ejswm/1OipHSxgc KKweHhsjXtScekVR98ahQc8P6nWE4dAuKwy8gY7s6q3jK1mTMcZArspgywb4J4r6 9o1hGjF0RvzOXhJTzVDORYyek+eJYIRbKB1sIzGq+u03NFBg3Olm3LnwdqEkHFAB 18rEPLaThDuBABpI/fu1lq934nuzSO4xCcZCYU+PNTQSgIiueCKZ/LgubwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBLU13/Hhtfu+D2/kqs/GEYNoRbMB8GA1UdIwQY MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt NTIzNjJiNmIzMzM0LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0 LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ02nUFo 3xRA+XjuHlK1G98fuaJMtip/DHmGdIJeCTzf0ZeuOnayf9n2xjrJ9SHHQm/2j/Ky 1fa1/VXAXBv2jT5GEJ2mBkg4R9Dvzfx0dNMluFgSGOhPDSLBc1KceeoGkktKGUdk +mNdXFTE7PD7X2deHVEPTIVQyOMHGBkIs2HWB6dWwRnjSOtgnEQNhF1clQpslrV0 OtQWUD0JoVhk5TE7zvQMz3AODwTDjbKpZm/8SHQFoFFhJy30E4XfOjrsS6Gebucx xzum0m1vekJNLXXpfD0oURgiglfJpX0002GgS1biqxJaV3AcqmXBh4KlEsLTqj9k EzmXTw1p0kKXNw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:31 2025 by rpki-client