This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json) Hash identifier: P+9TEBCgGz8dCXDMOZcklGnoMqEygU/oER8nxwkqDrY= Subject key identifier: 9A:CA:C9:C4:DC:07:E8:F9:64:70:57:13:A5:0E:30:DE:6B:3C:42:CA Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04 Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504 Certificate serial: 019AF50A1C2B84FD974A2BCD764EC50B4EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft Manifest number: 0C2B Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: GlNywI+OBaMlWNzids3u3QrZRRFeCJMeGDxqThjtu5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1c:2b:84:fd:97:4a:2b:cd:76:4e:c5:0b:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504 Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=9acac9c4dc07e8f964705713a50e30de6b3c42ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:01:0d:03:ec:89:f4:58:f8:1b:ba:a9:43: 6c:b1:9a:b9:73:3f:6b:0f:16:88:36:da:36:b1:ab: ca:c1:d5:10:ec:29:af:a1:7f:d8:2e:34:b9:d0:ab: 17:f4:f6:0d:f7:d3:96:13:2b:57:33:ef:98:59:df: 28:30:01:4a:24:66:eb:87:3c:8c:e7:d5:5c:a3:1b: 0f:ed:6f:ce:6f:73:5c:01:4c:f8:67:c4:ac:95:c9: ac:a0:28:c4:e6:bb:8f:a4:7d:22:b5:c7:95:dd:33: 3e:8d:f2:3b:95:d3:62:80:a2:de:72:9d:3f:f2:4b: 37:df:3b:86:b7:27:87:08:ca:93:68:c5:9f:11:54: 2b:df:4c:64:31:d8:2d:aa:e4:93:d6:9c:ae:2d:30: 67:35:19:4a:e5:6b:e2:3a:88:eb:ff:6c:7d:96:e4: 84:8b:a1:6d:45:36:61:46:25:e4:7f:81:47:45:be: ea:f9:4f:7b:16:91:c7:28:4a:d3:d1:0c:80:2b:ad: 63:85:30:61:ae:f2:e3:67:b5:fa:b2:ca:83:cd:7f: 41:2c:d9:60:01:80:9d:f8:c6:20:63:39:6b:f2:3d: 6e:4a:c7:8b:72:07:e7:9c:41:90:f5:ee:18:fe:be: 2e:3f:5c:80:36:98:d5:ba:87:ec:d0:74:a0:34:65: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:C9:C4:DC:07:E8:F9:64:70:57:13:A5:0E:30:DE:6B:3C:42:CA X509v3 Authority Key Identifier: keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:66:77:66:d7:f3:55:29:59:d8:bb:e4:47:d3:ed:7b:62:34: e3:c6:22:71:f4:a1:1d:0e:c1:2b:23:ce:d1:9c:41:e9:01:d9: 9c:fe:b4:bd:47:68:6f:2c:a5:ca:83:bb:fa:f2:bc:88:e7:74: 42:55:1d:e7:6d:2f:8a:c5:23:81:78:89:aa:4b:6b:37:de:f2: 3f:ea:20:2f:bf:43:2d:0d:ad:27:d5:0e:df:9a:f5:3a:b1:60: 22:fb:47:07:1e:cf:1d:ab:93:f8:fd:e0:6a:e1:b7:d8:11:ec: 98:69:fd:92:09:51:85:00:6a:81:44:d2:5a:3a:74:c4:93:e8: 52:d7:a7:e9:c8:2a:3c:75:57:a9:4c:22:82:dd:9d:b9:ce:af: e6:03:0c:ef:8e:bc:eb:50:69:3b:b8:c0:cf:54:f7:58:c2:d8: a3:7b:17:dc:24:a1:3a:8a:58:a0:a8:5f:da:5d:78:29:e0:78: 0d:82:69:a3:21:a5:d5:36:78:2b:52:8e:ac:b5:38:a0:a1:81: 16:a3:8f:93:e2:9f:18:84:7c:ae:1c:f1:da:bb:13:d1:b9:30: e7:b3:e2:ec:6a:c2:74:8f:ea:1e:c2:08:15:4f:27:f8:2e:fe: 28:42:c6:fb:68:5e:b3:02:90:51:fa:8e:a3:27:e0:54:3f:3b: a3:08:7d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChwrhP2XSivNdk7FC07aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDE4ZTdiNTJiZDMyNjhhYTRkNWQzYWE1NzdmNDdkMGYx ODc1MDQwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD Eyg5YWNhYzljNGRjMDdlOGY5NjQ3MDU3MTNhNTBlMzBkZTZiM2M0MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZkBDQPsifRY+Bu6qUNssZq5cz9r DxaINto2savKwdUQ7CmvoX/YLjS50KsX9PYN99OWEytXM++YWd8oMAFKJGbrhzyM 59VcoxsP7W/Ob3NcAUz4Z8SslcmsoCjE5ruPpH0itceV3TM+jfI7ldNigKLecp0/ 8ks33zuGtyeHCMqTaMWfEVQr30xkMdgtquST1pyuLTBnNRlK5WviOojr/2x9luSE i6FtRTZhRiXkf4FHRb7q+U97FpHHKErT0QyAK61jhTBhrvLjZ7X6ssqDzX9BLNlg AYCd+MYgYzlr8j1uSseLcgfnnEGQ9e4Y/r4uP1yANpjVuofs0HSgNGVpywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrKycTcB+j5ZHBXE6UOMN5rPELKMB8GA1UdIwQY MBaAFAYBjntSvTJoqk1dOqV39H0PGHUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2Qt MWQ5ZmU4YWExMmFiLzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2QtMWQ5ZmU4YWExMmFi LzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWZ3Ztfz VSlZ2LvkR9Pte2I048YicfShHQ7BKyPO0ZxB6QHZnP60vUdobyylyoO7+vK8iOd0 QlUd520visUjgXiJqktrN97yP+ogL79DLQ2tJ9UO35r1OrFgIvtHBx7PHauT+P3g auG32BHsmGn9kglRhQBqgUTSWjp0xJPoUten6cgqPHVXqUwigt2duc6v5gMM7468 61BpO7jAz1T3WMLYo3sX3CShOopYoKhf2l14KeB4DYJpoyGl1TZ4K1KOrLU4oKGB FqOPk+KfGIR8rhzx2rsT0bkw57Pi7GrCdI/qHsIIFU8n+C7+KELG+2heswKQUfqO oyfgVD87owh9OA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:07 2025 by rpki-client