This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json) Hash identifier: 2jDYbl28TdJ9C6c1FEz3RwFKZtGz+FOfiUDU+aoOFdo= Subject key identifier: C7:06:23:83:17:7C:B1:13:B6:EE:B2:B5:A6:C8:CB:C6:F7:CB:44:A7 Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de Certificate serial: 019B495DCD6A0B44D3047CE4AACD7B561C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft Manifest number: 1624 Signing time: Tue 23 Dec 2025 04:00:42 +0000 Manifest this update: Tue 23 Dec 2025 04:00:42 +0000 Manifest next update: Wed 24 Dec 2025 04:00:42 +0000 Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: lQ/GdJ7QcZgg+ccEGz1q2eLqChiq+mGsqJTATSfpN20=) 2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:cd:6a:0b:44:d3:04:7c:e4:aa:cd:7b:56:1c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de Validity Not Before: Dec 23 04:00:42 2025 GMT Not After : Dec 24 04:00:42 2025 GMT Subject: CN=c7062383177cb113b6eeb2b5a6c8cbc6f7cb44a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:2c:38:05:e1:e1:fc:c1:aa:51:ea:88:15: 77:cc:2a:c9:3a:b9:55:20:8b:36:f0:86:61:68:25: 85:be:62:6e:03:33:85:bc:3d:b9:90:5b:66:ff:b3: 1b:39:7e:35:a3:30:05:07:cf:eb:80:a1:f3:13:ae: eb:ea:15:22:2d:94:66:ac:c9:71:8b:1d:1f:c4:6e: 28:8a:f8:c0:55:e9:7d:0a:38:bb:0e:5e:e3:46:c4: 77:98:ff:67:57:87:f7:f0:ff:f2:74:70:14:1c:90: 36:0f:97:ed:4d:14:81:ae:1c:d3:5b:4f:d7:03:66: 83:67:4c:70:a0:5f:28:73:36:84:95:3e:d9:9a:52: 67:f7:1c:6e:b9:ac:d3:5f:aa:39:0f:ba:1e:f6:a5: e6:d1:78:b7:25:eb:f2:14:82:10:51:49:a1:54:b7: 6e:f6:66:7a:7d:99:36:41:e9:ca:fc:78:c9:d4:56: e5:ad:62:ce:20:15:ff:3a:77:8e:cf:66:e6:c0:b5: 10:70:18:8b:b3:53:ac:60:44:8c:be:b0:94:59:2b: f8:92:2f:0c:47:d6:8e:67:66:30:cb:39:f0:11:b2: 19:05:9d:f3:1d:9c:0f:e4:88:f5:fe:bf:73:d0:77: 58:31:8f:db:83:cc:21:4f:37:c2:d8:b4:b6:7e:c2: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:06:23:83:17:7C:B1:13:B6:EE:B2:B5:A6:C8:CB:C6:F7:CB:44:A7 X509v3 Authority Key Identifier: keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:73:04:e7:59:85:78:53:71:0f:14:cd:19:eb:d7:0f:53:e3: 33:90:53:ba:75:73:3f:5f:f6:7e:06:73:dc:3b:db:6f:ae:2b: 19:e4:bf:c5:b0:67:dd:e9:20:8f:a9:49:4d:ee:4a:7f:44:3e: 7f:4f:d4:28:fe:ee:5f:8c:85:05:ff:89:02:05:bc:ee:eb:59: 81:65:5e:a6:45:56:19:88:28:a0:87:0d:f8:4c:8b:f6:3a:ec: 5a:2f:70:52:2e:c2:39:cc:8d:7a:00:1d:9b:48:4e:fe:8b:a8: 42:69:6f:64:49:87:8d:f4:97:ab:6b:41:34:d0:a6:15:b4:ee: 63:65:a5:28:50:23:21:ac:30:b2:73:5d:1c:23:41:15:7e:75: 3c:2e:48:39:77:65:64:b7:bc:8c:c8:8f:2d:b4:c2:0b:62:2f: 13:43:ac:cf:f3:54:29:17:29:4f:56:89:0d:3c:c1:e6:05:5d: db:2a:50:b0:a1:6b:de:31:b6:43:02:31:07:92:5c:7a:07:44: 70:be:e2:2d:2d:07:8e:f3:46:24:14:d5:38:9a:b5:4b:10:16: 71:62:01:94:7d:e5:cc:6e:bd:de:38:39:6f:d3:4e:33:4b:19: ee:60:aa:d2:9f:de:b8:b8:a4:83:48:b8:9d:73:dd:2e:b1:65: 9d:2f:e1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXc1qC0TTBHzkqs17VhwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTM1OWRhMGQwYjdhODI5ZTQyMGZkOTMyY2FmYzFlM2Mx NTcyZGUwHhcNMjUxMjIzMDQwMDQyWhcNMjUxMjI0MDQwMDQyWjAzMTEwLwYDVQQD EyhjNzA2MjM4MzE3N2NiMTEzYjZlZWIyYjVhNmM4Y2JjNmY3Y2I0NGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUYsOAXh4fzBqlHqiBV3zCrJOrlV IIs28IZhaCWFvmJuAzOFvD25kFtm/7MbOX41ozAFB8/rgKHzE67r6hUiLZRmrMlx ix0fxG4oivjAVel9Cji7Dl7jRsR3mP9nV4f38P/ydHAUHJA2D5ftTRSBrhzTW0/X A2aDZ0xwoF8oczaElT7ZmlJn9xxuuazTX6o5D7oe9qXm0Xi3JevyFIIQUUmhVLdu 9mZ6fZk2QenK/HjJ1FblrWLOIBX/OneOz2bmwLUQcBiLs1OsYESMvrCUWSv4ki8M R9aOZ2YwyznwEbIZBZ3zHZwP5Ij1/r9z0HdYMY/bg8whTzfC2LS2fsKNbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcGI4MXfLETtu6ytabIy8b3y0SnMB8GA1UdIwQY MBaAFAQTWdoNC3qCnkIP2TLK/B48FXLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEt ODZmZTM2Y2EwYjc0LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEtODZmZTM2Y2EwYjc0 LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXME51mF eFNxDxTNGevXD1PjM5BTunVzP1/2fgZz3Dvbb64rGeS/xbBn3ekgj6lJTe5Kf0Q+ f0/UKP7uX4yFBf+JAgW87utZgWVepkVWGYgooIcN+EyL9jrsWi9wUi7COcyNegAd m0hO/ouoQmlvZEmHjfSXq2tBNNCmFbTuY2WlKFAjIawwsnNdHCNBFX51PC5IOXdl ZLe8jMiPLbTCC2IvE0Osz/NUKRcpT1aJDTzB5gVd2ypQsKFr3jG2QwIxB5JcegdE cL7iLS0HjvNGJBTVOJq1SxAWcWIBlH3lzG693jg5b9NOM0sZ7mCq0p/euLikg0i4 nXPdLrFlnS/hiQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:58 2025 by rpki-client