This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json) Hash identifier: 1hWrisdy3iyaTQ6HFJiGJGoIVmjNYv+99ep2tpb1qCU= Subject key identifier: A0:AE:9A:9A:28:01:40:C8:04:F8:F4:9C:C1:02:E6:7E:94:21:C5:38 Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1 Certificate serial: 019AF276F1807F4461039497C3F837FC6D61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft Manifest number: 1157 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: iZ3cBM8pAQSgMJzm0QELwYRbFsc5PTKGj5pIqAcqNo4=) 2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:80:7f:44:61:03:94:97:c3:f8:37:fc:6d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=a0ae9a9a280140c804f8f49cc102e67e9421c538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ca:b4:34:8d:5b:3a:ae:c0:eb:33:9f:1a: 30:8e:86:d8:2e:31:d9:11:4a:df:15:30:9c:08:d6: 09:d6:24:eb:0e:ba:eb:b7:0d:e2:82:1b:78:43:37: 35:ea:16:83:ed:e1:24:e9:b8:c3:30:2f:f2:b6:73: f1:55:b9:f1:e2:18:17:41:dd:8a:9e:e3:15:bb:8e: e7:52:0c:90:36:45:7f:d5:ce:73:f5:c7:b6:44:47: 76:6d:9d:3b:2c:9d:1a:07:6f:d2:82:76:92:a9:56: 39:98:ba:a2:79:92:b2:a8:0f:79:90:4b:ad:93:ff: 64:6b:46:dc:00:ad:7e:d7:a1:23:76:23:d8:3b:ad: 72:09:16:57:9f:2b:0f:e3:50:b5:e9:a8:cc:0b:c1: 82:63:f4:68:39:3a:7f:67:54:d6:43:d6:0c:94:12: aa:f0:99:53:d0:27:de:56:d3:30:3c:1f:6f:e5:e8: 0f:52:4c:45:e4:0f:ba:48:f9:20:0e:28:49:31:18: cc:30:e1:dc:b2:39:98:44:0e:bb:53:3b:08:27:17: d9:f1:7b:d5:93:3a:70:89:3c:3a:51:8a:28:21:64: 5d:bd:7d:13:6b:fe:02:5a:82:51:f1:2d:77:dd:fe: e6:b9:f3:c6:fa:f7:9a:ba:83:0d:64:60:9d:20:97: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AE:9A:9A:28:01:40:C8:04:F8:F4:9C:C1:02:E6:7E:94:21:C5:38 X509v3 Authority Key Identifier: keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:c5:81:e0:60:76:bd:a4:0f:26:1d:4a:da:d8:d4:7f:f7: 05:b1:a9:6e:a4:a6:67:7e:75:dd:3d:e8:d4:aa:f6:7c:e9:f9: da:a1:ab:6f:90:28:47:92:ac:21:f2:07:75:4d:70:67:37:01: 23:99:01:30:23:cc:0c:18:d9:a7:c8:fd:51:60:db:89:8f:b9: 1e:02:2b:c4:98:de:ca:42:96:53:0b:0a:92:af:16:65:7f:c1: 35:32:9c:94:61:3d:67:aa:68:ad:74:a9:d1:96:a2:32:97:90: 8b:d8:2f:fc:4b:47:37:9a:02:a8:fd:ea:51:f9:a7:fb:5e:1e: b5:fa:ae:56:08:f8:64:91:5e:cf:77:e8:1c:7f:89:d1:08:4a: 62:a6:ba:9a:2c:22:0d:2c:f4:04:05:21:42:e9:a1:c1:44:2d: 8c:a1:93:81:13:bb:0f:35:35:18:ca:07:63:99:aa:aa:52:04: a0:a9:44:5a:03:d0:da:b5:32:9f:2d:ac:62:16:f5:ac:d4:0e: 5f:f8:35:a5:46:cd:e7:c8:02:cc:81:0a:23:1b:bb:a3:4d:c3: ae:3e:5e:13:0a:fc:b7:7d:50:6f:4f:8e:f7:09:2e:46:e3:5d: 13:a5:f2:45:6a:24:10:b4:95:9f:37:38:7d:c7:de:8b:14:3b: 7c:63:71:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvGAf0RhA5SXw/g3/G1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4 Y2ZlZjEwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhhMGFlOWE5YTI4MDE0MGM4MDRmOGY0OWNjMTAyZTY3ZTk0MjFjNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi3KtDSNWzquwOsznxowjobYLjHZ EUrfFTCcCNYJ1iTrDrrrtw3ight4Qzc16haD7eEk6bjDMC/ytnPxVbnx4hgXQd2K nuMVu47nUgyQNkV/1c5z9ce2REd2bZ07LJ0aB2/SgnaSqVY5mLqieZKyqA95kEut k/9ka0bcAK1+16EjdiPYO61yCRZXnysP41C16ajMC8GCY/RoOTp/Z1TWQ9YMlBKq 8JlT0CfeVtMwPB9v5egPUkxF5A+6SPkgDihJMRjMMOHcsjmYRA67UzsIJxfZ8XvV kzpwiTw6UYooIWRdvX0Ta/4CWoJR8S133f7mufPG+veauoMNZGCdIJeyEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCumpooAUDIBPj0nMEC5n6UIcU4MB8GA1UdIwQY MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2 LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOjFgeBg dr2kDyYdStrY1H/3BbGpbqSmZ3513T3o1Kr2fOn52qGrb5AoR5KsIfIHdU1wZzcB I5kBMCPMDBjZp8j9UWDbiY+5HgIrxJjeykKWUwsKkq8WZX/BNTKclGE9Z6porXSp 0ZaiMpeQi9gv/EtHN5oCqP3qUfmn+14etfquVgj4ZJFez3foHH+J0QhKYqa6miwi DSz0BAUhQumhwUQtjKGTgRO7DzU1GMoHY5mqqlIEoKlEWgPQ2rUyny2sYhb1rNQO X/g1pUbN58gCzIEKIxu7o03Drj5eEwr8t31Qb0+O9wkuRuNdE6XyRWokELSVnzc4 fcfeixQ7fGNxnw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client