This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json) Hash identifier: RdCWcX29o9CkX1wM5R9hooz2+irSe8B2qlYOQU/FbbQ= Subject key identifier: F5:28:E4:81:9F:61:FA:9D:5A:BE:76:DF:96:BE:DA:D4:0E:92:DF:FB Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98 Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98 Certificate serial: 019AF80B50877E59B3AE021D55806BA03D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft Manifest number: 0387 Signing time: Sun 07 Dec 2025 09:01:22 +0000 Manifest this update: Sun 07 Dec 2025 09:01:22 +0000 Manifest next update: Mon 08 Dec 2025 09:01:22 +0000 Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: XP1oo0GoBHz8C5gBwLOz6wXzoYBiHIWas+YSMwI4eHs=) 2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0b:50:87:7e:59:b3:ae:02:1d:55:80:6b:a0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98 Validity Not Before: Dec 7 09:01:22 2025 GMT Not After : Dec 8 09:01:22 2025 GMT Subject: CN=f528e4819f61fa9d5abe76df96bedad40e92dffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:12:ab:50:93:86:00:cc:a7:d1:75:c4:db: 91:97:47:0e:79:89:7f:cb:5b:1b:fe:7e:2d:d9:b6: 01:64:61:38:c0:ed:bb:52:a9:19:e3:26:c0:5f:c7: fa:cc:00:e6:97:57:2b:57:15:8c:3f:0d:a8:90:ed: 16:fe:1b:1e:a7:bf:8a:bd:d7:97:26:b8:71:d4:d8: 68:e3:92:a6:12:23:d7:6a:6e:03:f2:2c:16:de:35: 56:44:9c:51:f5:c7:23:4d:e2:3c:22:03:89:b7:2a: 38:fc:94:de:4d:89:90:45:09:ee:12:a0:eb:97:22: 39:4f:cd:ef:a7:9d:cc:dc:c2:e6:b7:06:0b:45:4e: 7e:22:2a:1b:07:cf:a8:bf:ab:b8:e7:18:9d:7a:86: 02:78:10:01:b3:25:1a:43:cf:9e:13:86:85:f0:a9: e9:d7:6d:67:1b:47:09:20:cc:af:c6:b0:0c:4f:26: f7:45:41:62:02:ef:ae:a3:bb:ea:1f:f2:57:db:98: 0e:3c:bf:ab:b5:0e:6b:24:6e:20:94:2e:1e:44:b4: 52:93:9e:5e:a8:5f:43:32:fe:f9:e0:84:a8:55:d9: e7:e1:ac:92:93:b8:60:a1:8a:69:2a:56:e8:78:4b: 30:0c:55:94:57:2d:bd:0a:9c:9a:91:d2:c4:5f:fc: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:28:E4:81:9F:61:FA:9D:5A:BE:76:DF:96:BE:DA:D4:0E:92:DF:FB X509v3 Authority Key Identifier: keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:05:67:79:b7:e0:6c:59:55:9f:2f:e7:e5:b0:e8:b8:44:c7: f2:99:29:09:a5:d2:5a:3a:47:45:cf:dd:44:30:94:63:17:aa: d6:7e:21:5b:00:4b:a2:46:6e:d8:5b:c7:4d:03:22:4c:e2:7a: 5b:b0:c2:32:60:31:1e:b1:af:34:60:94:f1:57:e5:f4:b7:d2: 30:6e:44:7c:85:b5:44:3d:88:92:88:fe:3d:d0:8b:fc:80:fb: 96:f1:2d:2c:1e:04:77:a8:28:a2:c9:75:04:c6:5b:bd:37:36: 30:98:08:7f:90:30:e6:54:39:69:2d:05:5f:28:02:8f:76:82: a3:92:1a:80:f0:25:ee:9c:55:95:77:13:51:11:25:af:2f:32: 9d:a0:bf:c3:aa:b1:44:9b:a3:bb:b0:12:d5:00:7b:0c:16:4a: 4e:5c:19:cc:c6:36:82:6a:8a:4f:d9:04:1b:a2:32:7d:fd:ee: 97:0d:bc:ad:06:12:2c:82:a8:11:b9:21:76:ce:a6:e1:ec:da: 8a:d0:13:0d:27:91:6e:1e:d3:bd:65:6b:55:c6:04:91:47:21: 29:a5:7a:5f:de:fd:bf:52:40:43:68:66:a2:fa:f9:9a:3f:41: 30:9e:f8:70:29:ae:42:11:6e:62:53:1b:59:4e:98:6f:9c:e4: 3a:ee:21:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4C1CHflmzrgIdVYBroD0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx N2RkOTgwHhcNMjUxMjA3MDkwMTIyWhcNMjUxMjA4MDkwMTIyWjAzMTEwLwYDVQQD EyhmNTI4ZTQ4MTlmNjFmYTlkNWFiZTc2ZGY5NmJlZGFkNDBlOTJkZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUUSq1CThgDMp9F1xNuRl0cOeYl/ y1sb/n4t2bYBZGE4wO27UqkZ4ybAX8f6zADml1crVxWMPw2okO0W/hsep7+KvdeX Jrhx1Nho45KmEiPXam4D8iwW3jVWRJxR9ccjTeI8IgOJtyo4/JTeTYmQRQnuEqDr lyI5T83vp53M3MLmtwYLRU5+IiobB8+ov6u45xideoYCeBABsyUaQ8+eE4aF8Knp 121nG0cJIMyvxrAMTyb3RUFiAu+uo7vqH/JX25gOPL+rtQ5rJG4glC4eRLRSk55e qF9DMv754ISoVdnn4aySk7hgoYppKlboeEswDFWUVy29CpyakdLEX/xvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUo5IGfYfqdWr5235a+2tQOkt/7MB8GA1UdIwQY MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAVnebfg bFlVny/n5bDouETH8pkpCaXSWjpHRc/dRDCUYxeq1n4hWwBLokZu2FvHTQMiTOJ6 W7DCMmAxHrGvNGCU8Vfl9LfSMG5EfIW1RD2Ikoj+PdCL/ID7lvEtLB4Ed6goosl1 BMZbvTc2MJgIf5Aw5lQ5aS0FXygCj3aCo5IagPAl7pxVlXcTURElry8ynaC/w6qx RJuju7AS1QB7DBZKTlwZzMY2gmqKT9kEG6Iyff3ulw28rQYSLIKoEbkhds6m4eza itATDSeRbh7TvWVrVcYEkUchKaV6X979v1JAQ2hmovr5mj9BMJ74cCmuQhFuYlMb WU6Yb5zkOu4hZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 16:26:54 2025 by rpki-client