This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json) Hash identifier: RxJalzqUKAOE5wBO+6PidxyJgx5G7GSyox4bR3TJApY= Subject key identifier: C7:64:88:1C:4A:5D:1E:6A:C9:1F:7A:5B:90:4B:E0:9F:8A:42:98:4A Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Certificate serial: 019B2EFAB0857A0F69D510B89E211EDE2663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:02:19 +0000 Manifest this update: Thu 18 Dec 2025 01:02:19 +0000 Manifest next update: Fri 19 Dec 2025 01:02:19 +0000 Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: zRGNa1WrDlWsJSGszHhr2yEH2XOufKbpbuyhDxEN+cE=) 2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:b0:85:7a:0f:69:d5:10:b8:9e:21:1e:de:26:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Validity Not Before: Dec 18 01:02:19 2025 GMT Not After : Dec 19 01:02:19 2025 GMT Subject: CN=c764881c4a5d1e6ac91f7a5b904be09f8a42984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:4d:be:89:28:93:35:85:3f:db:71:8e:a7: 41:c4:ba:19:2f:14:f1:e2:55:63:1c:91:84:8b:39: 76:0c:43:c4:b1:16:dd:e8:ac:b2:7c:ae:3f:05:25: 52:16:0b:7d:c9:8e:14:05:f9:7f:83:b5:8b:4f:32: 5d:c1:e7:5f:cc:60:83:11:5d:8c:99:47:aa:f7:e8: 6f:bd:3d:c1:e8:dd:33:ee:e9:8c:5a:b0:da:53:3d: 63:80:2a:67:d4:a5:36:c4:7f:fb:ba:55:61:f9:1b: 63:76:23:0c:0d:a7:3a:de:1f:8b:80:aa:10:81:ff: 62:d6:25:c7:2b:aa:eb:aa:ff:cd:9e:50:a0:b3:70: c8:70:c7:29:73:f6:31:e5:23:0b:48:8c:7f:b9:9b: 90:7f:1c:86:8c:6e:03:9c:97:db:bb:89:e1:b0:90: 7b:bc:4e:b5:f2:99:f6:d7:35:5f:a6:34:15:85:b0: f7:04:03:5c:6f:05:63:6f:93:39:59:b0:2b:d8:e2: a5:c2:13:79:b7:8f:ad:58:ba:44:1f:3f:24:08:73: 9a:23:e2:67:75:f6:59:b2:ae:37:1c:fb:df:68:71: ec:87:39:bf:70:ac:e9:ed:27:bb:0f:5d:07:6d:9d: d4:1e:ea:04:c6:6b:7c:38:0d:8d:ed:af:d6:74:d2: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:88:1C:4A:5D:1E:6A:C9:1F:7A:5B:90:4B:E0:9F:8A:42:98:4A X509v3 Authority Key Identifier: keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:aa:a8:e7:e8:e4:9a:c0:ba:36:6e:0b:f7:60:4a:27:d2: 1b:d1:36:ac:31:dc:5a:bf:c3:82:58:17:32:54:b9:c9:b7:8e: 6e:68:f7:d3:4d:5c:64:fe:c0:85:65:1a:9a:d6:ec:ba:08:01: 53:a2:38:a6:b8:4c:06:f7:d4:35:37:8e:b7:3a:aa:d2:15:9d: 97:80:f7:48:11:e4:62:37:67:26:c4:a5:ca:6b:72:ab:c7:0d: 66:76:0b:a3:fa:b3:1b:f2:b6:50:ff:8b:ad:95:61:ad:9a:e1: a4:b8:16:28:04:29:df:db:15:9f:28:ae:17:08:65:a9:d6:ee: e0:dd:d9:a8:ba:26:0f:f5:ba:41:14:8e:fb:ab:db:1f:24:e2: be:06:e2:12:7a:1c:70:a6:c5:93:c5:3b:4d:ac:cc:2a:bf:ff: 8d:c6:36:d2:9c:e9:f5:68:fe:79:d1:6a:4b:1f:fa:47:a5:30: 37:ab:cb:c5:4f:4f:30:68:1e:91:7c:2b:f9:8c:1a:1e:ac:a5: be:26:2d:b7:f0:3e:3d:d0:96:84:27:8a:61:d8:71:82:ac:c2: 02:9c:35:36:11:73:b8:df:db:ed:33:b8:3b:f1:13:9d:67:d0: bf:a8:6c:05:a1:ed:8b:f6:8a:9b:1e:02:f2:d3:6d:2f:08:fe: d6:9e:3f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+rCFeg9p1RC4niEe3iZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1 MDhlZjIwHhcNMjUxMjE4MDEwMjE5WhcNMjUxMjE5MDEwMjE5WjAzMTEwLwYDVQQD EyhjNzY0ODgxYzRhNWQxZTZhYzkxZjdhNWI5MDRiZTA5ZjhhNDI5ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNVNvokokzWFP9txjqdBxLoZLxTx 4lVjHJGEizl2DEPEsRbd6KyyfK4/BSVSFgt9yY4UBfl/g7WLTzJdwedfzGCDEV2M mUeq9+hvvT3B6N0z7umMWrDaUz1jgCpn1KU2xH/7ulVh+RtjdiMMDac63h+LgKoQ gf9i1iXHK6rrqv/NnlCgs3DIcMcpc/Yx5SMLSIx/uZuQfxyGjG4DnJfbu4nhsJB7 vE618pn21zVfpjQVhbD3BANcbwVjb5M5WbAr2OKlwhN5t4+tWLpEHz8kCHOaI+Jn dfZZsq43HPvfaHHshzm/cKzp7Se7D10HbZ3UHuoExmt8OA2N7a/WdNJbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdkiBxKXR5qyR96W5BL4J+KQphKMB8GA1UdIwQY MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0 LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXiqqOfo 5JrAujZuC/dgSifSG9E2rDHcWr/DglgXMlS5ybeObmj3001cZP7AhWUamtbsuggB U6I4prhMBvfUNTeOtzqq0hWdl4D3SBHkYjdnJsSlymtyq8cNZnYLo/qzG/K2UP+L rZVhrZrhpLgWKAQp39sVnyiuFwhlqdbu4N3ZqLomD/W6QRSO+6vbHyTivgbiEnoc cKbFk8U7TazMKr//jcY20pzp9Wj+edFqSx/6R6UwN6vLxU9PMGgekXwr+YwaHqyl viYtt/A+PdCWhCeKYdhxgqzCApw1NhFzuN/b7TO4O/ETnWfQv6hsBaHti/aKmx4C 8tNtLwj+1p4/TQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:31:13 2025 by rpki-client