This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json) Hash identifier: Y6Xm71kELIg0Ri5NEDoAYnF5Fzp4S0i3D+uQ4RkPBpM= Subject key identifier: A0:64:9A:E2:DF:F3:D8:5B:E3:A1:F4:90:43:45:61:9D:AE:E7:DB:70 Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Certificate serial: 019AF164299DAF86BCE7DF896D9D8F7B6E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft Manifest number: 0A32 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: EJWRBeSCn/o2JZI/ix4f3lmxmirdb7bSqklgBoM+wlw=) 2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:9d:af:86:bc:e7:df:89:6d:9d:8f:7b:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=a0649ae2dff3d85be3a1f4904345619daee7db70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:cc:08:88:41:91:4a:2b:49:78:f1:15:ab: 40:a6:bf:ac:1a:a1:a4:1c:00:e1:d2:1c:72:f8:56: 3b:7a:f0:c6:3b:15:a9:13:e1:17:e1:c5:37:89:34: a1:2d:1b:82:cb:c0:7c:73:67:60:64:77:a7:f9:7d: 08:db:88:c5:64:7a:e5:09:ce:bf:2d:dc:dc:c2:e9: bb:cd:48:e3:5f:eb:a6:29:73:17:d3:4a:d9:5a:ca: 25:b1:74:7a:a3:67:0e:a4:d0:5f:0c:e3:6a:1b:e4: c1:57:eb:7e:41:6b:0a:90:a3:a7:87:81:52:9c:de: 87:75:0f:ee:d8:a2:b5:54:43:82:0f:00:06:e6:5f: 03:00:55:93:4a:4b:ae:b4:63:23:17:a2:ab:fd:d6: 45:b0:fb:4b:79:a0:3a:2c:9e:6e:4c:94:15:2c:51: 0a:a6:26:49:df:f8:94:36:e8:11:68:52:88:26:3b: b3:4c:de:ad:f0:4a:dc:8f:e8:d8:60:e0:fa:ce:db: 64:58:9c:ea:5d:d5:3b:33:2b:62:9d:4d:78:14:bd: 0c:c4:8e:41:35:73:99:af:f3:2e:59:bc:77:a7:84: 15:55:32:95:10:02:a8:90:25:11:31:e5:fc:62:4f: 19:7d:ef:3f:98:52:20:9b:02:44:73:ed:36:97:3d: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:9A:E2:DF:F3:D8:5B:E3:A1:F4:90:43:45:61:9D:AE:E7:DB:70 X509v3 Authority Key Identifier: keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:86:21:4a:a4:8a:59:44:0d:af:e6:60:56:66:f8:a2:00:14: 44:89:aa:c1:b6:1d:17:e3:12:7c:59:48:8e:d2:d9:69:f6:ee: 12:94:0a:fa:88:3b:82:16:16:38:09:21:8d:fc:dd:d5:fc:d6: e7:46:a8:8a:28:65:32:94:a7:82:43:e1:b4:b6:2f:b9:71:1e: 8f:17:b0:9f:2e:f0:bc:57:2c:2c:34:ac:b8:8f:f9:02:3c:80: 89:59:62:e6:4c:dd:a9:b8:ee:5c:85:73:5c:a1:ab:09:a0:0c: 93:b9:02:2e:a6:51:f7:06:b1:16:c4:e4:cd:5d:2c:be:a5:25: 47:76:9e:0b:09:f0:32:bf:41:9e:c5:d5:c7:ad:d2:bd:99:56: 96:c3:6f:cc:89:0f:cc:9a:8c:d1:b3:d2:8a:0d:7d:05:c6:37: 4c:80:2d:37:01:62:a8:81:81:4a:5a:87:2f:a0:8d:64:2c:d9: 43:5a:9b:4e:55:08:5c:8a:15:7e:77:2a:46:e4:e5:8c:67:4e: 3b:83:9a:a8:6b:7f:29:07:0d:61:49:8e:d8:c6:59:26:b3:af: 1d:a3:4b:26:a3:d0:9c:4f:60:06:f3:33:eb:8c:5d:69:d2:9f: 43:2a:11:60:e8:5f:1d:b7:0d:11:aa:63:f2:76:ce:42:5b:30: fc:17:10:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCmdr4a859+JbZ2Pe26AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0 MGNiM2UwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhhMDY0OWFlMmRmZjNkODViZTNhMWY0OTA0MzQ1NjE5ZGFlZTdkYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGnMCIhBkUorSXjxFatApr+sGqGk HADh0hxy+FY7evDGOxWpE+EX4cU3iTShLRuCy8B8c2dgZHen+X0I24jFZHrlCc6/ Ldzcwum7zUjjX+umKXMX00rZWsolsXR6o2cOpNBfDONqG+TBV+t+QWsKkKOnh4FS nN6HdQ/u2KK1VEOCDwAG5l8DAFWTSkuutGMjF6Kr/dZFsPtLeaA6LJ5uTJQVLFEK piZJ3/iUNugRaFKIJjuzTN6t8Ercj+jYYOD6zttkWJzqXdU7MytinU14FL0MxI5B NXOZr/MuWbx3p4QVVTKVEAKokCURMeX8Yk8Zfe8/mFIgmwJEc+02lz12VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBkmuLf89hb46H0kENFYZ2u59twMB8GA1UdIwQY MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt MGVlMmVhN2Q0ODg0LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0 LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4YhSqSK WUQNr+ZgVmb4ogAURImqwbYdF+MSfFlIjtLZafbuEpQK+og7ghYWOAkhjfzd1fzW 50aoiihlMpSngkPhtLYvuXEejxewny7wvFcsLDSsuI/5AjyAiVli5kzdqbjuXIVz XKGrCaAMk7kCLqZR9waxFsTkzV0svqUlR3aeCwnwMr9BnsXVx63SvZlWlsNvzIkP zJqM0bPSig19BcY3TIAtNwFiqIGBSlqHL6CNZCzZQ1qbTlUIXIoVfncqRuTljGdO O4OaqGt/KQcNYUmO2MZZJrOvHaNLJqPQnE9gBvMz64xdadKfQyoRYOhfHbcNEapj 8nbOQlsw/BcQ9A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:23 2025 by rpki-client