This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json) Hash identifier: qYAdtloaCwEC9zxmavJBriqoEUN9c2uH0EKsPcro1A8= Subject key identifier: BB:C2:44:F0:D0:03:D8:83:70:72:53:5E:75:19:8B:65:07:41:63:13 Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Certificate serial: 019B54190041AE9CA16165985FCC374B7496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 06:01:23 +0000 Manifest this update: Thu 25 Dec 2025 06:01:23 +0000 Manifest next update: Fri 26 Dec 2025 06:01:23 +0000 Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: Le6+E6T0pr7H6vuNt+Zronns6vZsw/ef3L94rqtd7jM=) 2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:00:41:ae:9c:a1:61:65:98:5f:cc:37:4b:74:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Validity Not Before: Dec 25 06:01:23 2025 GMT Not After : Dec 26 06:01:23 2025 GMT Subject: CN=bbc244f0d003d8837072535e75198b6507416313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:c0:96:94:39:da:82:8a:b6:f5:88:ec:5d: c9:c6:ca:cc:10:b8:b5:3f:e2:28:97:85:07:4f:fb: 91:8d:61:c2:c1:2c:a2:76:ef:30:58:80:63:fb:ce: 9e:bf:f4:cd:ca:1a:fb:b9:f1:33:68:39:49:af:03: 63:10:8b:25:65:b0:23:eb:77:c8:f8:11:58:a6:43: d1:dd:48:07:5b:d4:ac:ff:c7:1f:47:d3:7f:95:fd: 77:33:12:4b:51:42:f8:5f:cd:0a:17:90:08:c6:3b: 91:74:1a:7d:39:f3:d0:4d:80:41:4e:18:c5:56:ed: 0e:35:36:c1:7c:e1:c5:49:d2:c4:d8:e6:cf:0f:89: e4:71:4c:f8:5a:d8:23:44:3d:18:09:f6:1c:cd:fe: 83:09:5b:02:f4:83:30:ad:11:36:23:a6:f4:59:d4: 0f:e4:87:e4:21:15:ad:bc:19:6c:cb:81:44:fe:13: f6:2b:02:d6:3d:a8:19:bc:d6:aa:c1:8f:11:66:e9: f4:55:ec:d8:4e:4f:2e:a0:9c:ca:80:1d:69:f6:70: 76:f8:d6:f8:25:bb:9c:63:fa:d7:68:e1:af:ae:66: 5c:a4:b1:5d:0f:62:63:d8:6e:2d:7f:a1:0f:d4:45: 15:f7:89:8a:e9:95:79:54:eb:a8:18:11:1d:da:3b: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:44:F0:D0:03:D8:83:70:72:53:5E:75:19:8B:65:07:41:63:13 X509v3 Authority Key Identifier: keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:5a:2a:69:0e:ce:dc:01:42:b1:e8:c2:f4:a0:44:09:01:47: b9:be:c5:b1:b3:86:29:83:7d:4e:1c:3e:41:93:38:af:d1:19: 81:b1:b1:74:a7:e2:4b:d8:8d:16:1c:e7:13:ee:05:0f:68:dc: d7:63:85:78:5f:e8:05:b5:12:2b:21:7a:17:d3:65:30:92:52: d1:e3:0d:07:8a:b0:b3:53:a1:c1:5b:03:72:70:50:bc:e0:8d: 44:0d:fa:d0:93:4b:9d:f7:e2:5d:9c:12:77:2e:98:3d:2e:a2: 39:93:84:1a:70:43:c4:fc:0c:7c:af:b2:19:2e:28:0c:58:1f: 19:88:6b:56:05:77:c2:97:9f:d4:98:d9:66:40:05:49:b7:74: 13:b9:c1:37:13:4a:80:6c:b0:7c:61:6b:59:19:b2:90:c6:4d: 21:25:7a:c8:78:51:76:76:0f:38:4b:88:92:08:42:1d:e7:b0: 30:f1:bb:70:8f:eb:97:17:c0:95:c8:90:ca:85:15:d7:2c:65: 9c:46:32:4f:3a:d7:1c:14:c4:fa:7b:f1:b5:f0:ea:bc:b2:46: 8c:42:d6:2d:91:35:ea:db:27:70:68:25:33:4d:f3:c6:ad:4b: b9:cd:41:9f:45:30:13:d2:bc:6f:ed:7e:5c:d4:da:b5:f6:48: 11:71:3e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGQBBrpyhYWWYX8w3S3SWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2 YWU3YzgwHhcNMjUxMjI1MDYwMTIzWhcNMjUxMjI2MDYwMTIzWjAzMTEwLwYDVQQD EyhiYmMyNDRmMGQwMDNkODgzNzA3MjUzNWU3NTE5OGI2NTA3NDE2MzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczAlpQ52oKKtvWI7F3JxsrMELi1 P+Iol4UHT/uRjWHCwSyidu8wWIBj+86ev/TNyhr7ufEzaDlJrwNjEIslZbAj63fI +BFYpkPR3UgHW9Ss/8cfR9N/lf13MxJLUUL4X80KF5AIxjuRdBp9OfPQTYBBThjF Vu0ONTbBfOHFSdLE2ObPD4nkcUz4WtgjRD0YCfYczf6DCVsC9IMwrRE2I6b0WdQP 5IfkIRWtvBlsy4FE/hP2KwLWPagZvNaqwY8RZun0VezYTk8uoJzKgB1p9nB2+Nb4 JbucY/rXaOGvrmZcpLFdD2Jj2G4tf6EP1EUV94mK6ZV5VOuoGBEd2jvVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvCRPDQA9iDcHJTXnUZi2UHQWMTMB8GA1UdIwQY MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5 LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1oqaQ7O 3AFCsejC9KBECQFHub7FsbOGKYN9Thw+QZM4r9EZgbGxdKfiS9iNFhznE+4FD2jc 12OFeF/oBbUSKyF6F9NlMJJS0eMNB4qws1OhwVsDcnBQvOCNRA360JNLnffiXZwS dy6YPS6iOZOEGnBDxPwMfK+yGS4oDFgfGYhrVgV3wpef1JjZZkAFSbd0E7nBNxNK gGywfGFrWRmykMZNISV6yHhRdnYPOEuIkghCHeewMPG7cI/rlxfAlciQyoUV1yxl nEYyTzrXHBTE+nvxtfDqvLJGjELWLZE16tsncGglM03zxq1Luc1Bn0UwE9K8b+1+ XNTatfZIEXE+aw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:49 2025 by rpki-client