This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json) Hash identifier: 6YrtBL9cAS17q7HbRzYiP8EOvGzcqYuYy7UB06i9aLE= Subject key identifier: 7F:68:B7:FF:2B:B9:78:C4:91:AA:5B:8F:02:C1:2D:5F:38:9A:18:90 Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Certificate serial: 019BF6515107C122AA19C7FEF64BA77649AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft Manifest number: 036E Signing time: Sun 25 Jan 2026 18:01:22 +0000 Manifest this update: Sun 25 Jan 2026 18:01:22 +0000 Manifest next update: Mon 26 Jan 2026 18:01:22 +0000 Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: /YaDVYrDk59bv9HX796nMYqvxkuj+CHJYI/BC7lsvFc=) 2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:51:07:c1:22:aa:19:c7:fe:f6:4b:a7:76:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Validity Not Before: Jan 25 18:01:22 2026 GMT Not After : Jan 26 18:01:22 2026 GMT Subject: CN=7f68b7ff2bb978c491aa5b8f02c12d5f389a1890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:d9:00:8f:18:a5:a7:2a:16:ea:84:82:4e: fe:9c:5e:bf:46:be:d3:63:fd:71:76:9a:4a:87:6d: c0:d0:00:e9:be:10:30:bb:8d:89:bf:3b:3d:6f:da: 3a:05:fd:92:c7:a1:ea:a6:ed:cf:e9:80:9d:f9:e5: 96:92:79:80:70:24:2a:3d:f1:3c:09:82:16:9c:5a: 2b:d2:eb:c4:de:72:ea:86:52:e6:8a:b8:a3:f1:83: 37:70:07:9d:4d:45:22:e4:cf:62:e3:24:cb:00:f5: 54:67:0f:ec:67:d8:ce:e5:07:30:12:03:60:68:f2: e6:3e:f1:4a:db:c5:3b:e4:76:28:a7:56:83:47:09: 26:4c:5d:85:87:4b:4c:ca:6e:97:e0:f6:52:b6:e2: 62:d7:c0:a4:8d:77:ef:16:43:b9:d3:28:24:65:6d: 73:19:19:81:16:4e:e6:74:d5:9e:a7:54:ca:4c:b2: a0:fe:3c:a5:8a:22:c6:ba:21:e0:ca:1c:df:bf:ae: ff:55:d7:23:b2:a9:65:4b:90:96:36:f2:d1:fc:b5: 57:de:d7:ef:94:f1:df:25:13:0d:a4:1a:9c:a6:c7: 70:97:8e:d6:59:6c:6d:94:4f:ca:7b:ab:d3:0a:af: 73:31:dd:cc:1c:f4:98:58:39:ce:f3:54:71:d3:c2: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:B7:FF:2B:B9:78:C4:91:AA:5B:8F:02:C1:2D:5F:38:9A:18:90 X509v3 Authority Key Identifier: keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:6e:fc:29:fc:51:7c:06:53:db:5b:4c:fd:1b:00:9f:e1: a9:14:15:ab:47:86:9c:46:77:fc:9f:2d:d3:41:ce:d5:ec:cd: 29:71:21:0e:f7:0b:91:75:87:7f:01:8d:f9:fd:5e:b3:b6:eb: 89:d5:24:6a:8d:ec:de:2a:85:9e:6c:35:d4:cb:65:20:eb:58: a6:9c:77:d6:8e:f6:f5:e4:5d:e5:f0:44:64:00:05:9c:68:c8: a9:28:0a:36:85:8e:e9:a2:e2:00:9e:d7:73:96:3b:15:48:05: b9:b8:c5:94:80:b1:34:e0:f9:ea:c8:c3:60:d1:59:66:3c:00: 8d:0c:d0:b0:54:18:41:1a:5c:15:4c:69:35:4f:25:f3:e5:86: c0:63:f6:b5:f6:b2:d8:52:62:29:67:39:f5:d1:a5:97:e5:18: 5d:68:c7:c2:5c:3e:5f:16:42:20:06:26:3e:cb:b4:6b:ae:25: 6b:71:66:41:76:20:cb:b2:6b:c4:5c:90:ea:a5:51:a2:04:e3: 8e:78:5c:4d:9d:c9:a2:7c:b1:e8:88:cd:8d:d5:db:8c:36:bc: a3:a3:1f:b9:71:91:31:3a:57:50:ee:89:51:4f:47:b4:42:91: 30:e4:82:96:d3:e2:79:0e:57:93:93:92:65:61:85:5c:d8:e0: f6:3a:47:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UVEHwSKqGcf+9kundkmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy YTJjMjcwHhcNMjYwMTI1MTgwMTIyWhcNMjYwMTI2MTgwMTIyWjAzMTEwLwYDVQQD Eyg3ZjY4YjdmZjJiYjk3OGM0OTFhYTViOGYwMmMxMmQ1ZjM4OWExODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwbZAI8YpacqFuqEgk7+nF6/Rr7T Y/1xdppKh23A0ADpvhAwu42Jvzs9b9o6Bf2Sx6Hqpu3P6YCd+eWWknmAcCQqPfE8 CYIWnFor0uvE3nLqhlLmirij8YM3cAedTUUi5M9i4yTLAPVUZw/sZ9jO5QcwEgNg aPLmPvFK28U75HYop1aDRwkmTF2Fh0tMym6X4PZStuJi18CkjXfvFkO50ygkZW1z GRmBFk7mdNWep1TKTLKg/jyliiLGuiHgyhzfv67/VdcjsqllS5CWNvLR/LVX3tfv lPHfJRMNpBqcpsdwl47WWWxtlE/Ke6vTCq9zMd3MHPSYWDnO81Rx08IHsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9ot/8ruXjEkapbjwLBLV84mhiQMB8GA1UdIwQY MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4 LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHxu/Cn8 UXwGU9tbTP0bAJ/hqRQVq0eGnEZ3/J8t00HO1ezNKXEhDvcLkXWHfwGN+f1es7br idUkao3s3iqFnmw11MtlIOtYppx31o729eRd5fBEZAAFnGjIqSgKNoWO6aLiAJ7X c5Y7FUgFubjFlICxNOD56sjDYNFZZjwAjQzQsFQYQRpcFUxpNU8l8+WGwGP2tfay 2FJiKWc59dGll+UYXWjHwlw+XxZCIAYmPsu0a64la3FmQXYgy7JrxFyQ6qVRogTj jnhcTZ3Jonyx6IjNjdXbjDa8o6MfuXGRMTpXUO6JUU9HtEKRMOSCltPieQ5Xk5OS ZWGFXNjg9jpHww== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:02 2026 by rpki-client