This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json) Hash identifier: c67WhTf0sDUFSV2MfM4HPmWYUqd3RaLKXQ2dPLipZ48= Subject key identifier: 7D:7F:43:7C:CC:B2:64:F2:2C:91:64:DE:E0:53:7F:57:FD:79:42:A2 Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Certificate serial: 019B7C396FD523244525543E0356D3F07BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft Manifest number: 17AE Signing time: Fri 02 Jan 2026 01:01:37 +0000 Manifest this update: Fri 02 Jan 2026 01:01:37 +0000 Manifest next update: Sat 03 Jan 2026 01:01:37 +0000 Files and hashes: 1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: Nh3FxMIPyUrtfz4+moV3MStPVDpIocqi3k0Q5py+jHw=) 2: pANXzrraCHYVkzSawo9c9dlj6zU.roa (hash: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:39:6f:d5:23:24:45:25:54:3e:03:56:d3:f0:7b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Validity Not Before: Jan 2 01:01:37 2026 GMT Not After : Jan 3 01:01:37 2026 GMT Subject: CN=7d7f437cccb264f22c9164dee0537f57fd7942a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:a0:96:2b:9f:72:ed:1d:c5:16:75:d8:63: af:16:ba:7a:7d:11:3c:1f:5c:aa:00:d3:2e:9c:cd: 1f:9f:49:4a:43:18:5f:31:05:71:72:2d:81:ef:65: 8f:e9:6d:94:85:6c:c3:77:1d:a8:c5:89:dc:f5:7d: bc:81:84:7f:d7:b2:22:2f:e1:ab:7b:1e:78:fe:9a: 7d:2d:b7:b8:15:57:b8:24:6b:45:19:9b:26:f5:7f: 33:fa:84:8e:7f:11:3a:24:4d:bc:dd:ca:dd:43:f6: d4:20:16:33:4e:61:cb:b4:60:93:b1:05:38:be:96: 3c:97:85:4f:55:cc:12:55:92:35:f7:d5:01:dd:2f: 0b:1d:32:d7:cc:bf:69:7c:c6:fd:c8:2c:0b:32:2d: 0f:7f:b5:9d:bd:eb:d3:8e:6b:36:67:4b:4c:9b:64: 24:b0:e0:0d:32:9f:cb:50:c1:03:ff:df:0b:d6:b2: e6:14:7e:db:94:fd:a4:b8:8f:df:e0:9d:e0:a0:85: e6:8f:41:b8:7b:7d:2f:5f:b5:c7:9c:f4:62:08:fb: 50:c8:8e:f8:29:df:cd:69:b1:e6:d1:c5:61:8f:0e: cc:e3:21:38:6f:b8:fb:14:38:d8:d5:ef:80:42:37: f5:25:ef:a6:86:06:e5:f2:bf:5b:0c:a1:85:93:1a: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7F:43:7C:CC:B2:64:F2:2C:91:64:DE:E0:53:7F:57:FD:79:42:A2 X509v3 Authority Key Identifier: keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2b:3a:30:da:62:c8:7e:aa:9b:9a:71:77:78:1a:96:5a:13: 5b:a6:d3:34:01:4a:f2:b1:42:0f:12:12:18:12:c4:51:d9:f1: b8:98:6c:1c:91:d3:79:af:4f:d9:df:76:34:2d:34:42:1a:f2: f7:60:5f:45:5b:41:77:57:bd:69:cb:a2:cd:d7:a8:23:8c:21: c9:fb:18:75:e9:26:93:a0:e4:21:4f:65:d4:29:f6:5a:f1:03: 4d:48:fa:fe:9c:0f:97:02:ed:de:fa:26:0f:c9:3f:81:02:73: f8:6c:3a:75:18:cb:65:69:f7:a8:79:62:65:e8:58:80:67:a4: a7:71:c3:2a:05:8e:dc:b6:c3:98:42:26:99:be:3e:06:18:78: d4:f9:c1:7f:90:01:46:df:7a:cb:c0:2b:22:c2:7e:9f:e7:0c: 46:c9:52:4d:27:37:ff:db:34:83:7b:9c:c7:b9:da:c9:6c:4b: ec:fa:f1:fc:8f:e7:cc:d6:bb:aa:6e:68:6b:02:5b:cc:08:57: ee:80:ae:0c:5b:16:cb:be:31:0e:40:8e:ce:6d:2e:92:22:a8: e8:77:63:e9:a6:11:ae:f9:35:49:86:d3:65:c1:fa:d3:d5:44: 50:e4:3b:e5:0e:68:e5:c1:db:ca:b6:ef:9b:d5:9a:4d:74:e1: 5e:e2:17:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8OW/VIyRFJVQ+A1bT8HvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj NmIzNTAwHhcNMjYwMTAyMDEwMTM3WhcNMjYwMTAzMDEwMTM3WjAzMTEwLwYDVQQD Eyg3ZDdmNDM3Y2NjYjI2NGYyMmM5MTY0ZGVlMDUzN2Y1N2ZkNzk0MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFegliufcu0dxRZ12GOvFrp6fRE8 H1yqANMunM0fn0lKQxhfMQVxci2B72WP6W2UhWzDdx2oxYnc9X28gYR/17IiL+Gr ex54/pp9Lbe4FVe4JGtFGZsm9X8z+oSOfxE6JE283crdQ/bUIBYzTmHLtGCTsQU4 vpY8l4VPVcwSVZI199UB3S8LHTLXzL9pfMb9yCwLMi0Pf7WdvevTjms2Z0tMm2Qk sOANMp/LUMED/98L1rLmFH7blP2kuI/f4J3goIXmj0G4e30vX7XHnPRiCPtQyI74 Kd/NabHm0cVhjw7M4yE4b7j7FDjY1e+AQjf1Je+mhgbl8r9bDKGFkxrmRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1/Q3zMsmTyLJFk3uBTf1f9eUKiMB8GA1UdIwQY MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4 LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCs6MNpi yH6qm5pxd3galloTW6bTNAFK8rFCDxISGBLEUdnxuJhsHJHTea9P2d92NC00Qhry 92BfRVtBd1e9acuizdeoI4whyfsYdekmk6DkIU9l1Cn2WvEDTUj6/pwPlwLt3vom D8k/gQJz+Gw6dRjLZWn3qHliZehYgGekp3HDKgWO3LbDmEImmb4+Bhh41PnBf5AB Rt96y8ArIsJ+n+cMRslSTSc3/9s0g3ucx7nayWxL7Prx/I/nzNa7qm5oawJbzAhX 7oCuDFsWy74xDkCOzm0ukiKo6Hdj6aYRrvk1SYbTZcH609VEUOQ75Q5o5cHbyrbv m9WaTXThXuIXfQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:30:18 2026 by rpki-client