This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json) Hash identifier: SEe3TQYA2K8JSDDI9eFBB9F42kx6Z5Tk9lk73vujxII= Subject key identifier: BA:B1:1D:BA:C2:4C:AA:7C:B4:E6:98:8D:E6:F6:6E:A0:38:DE:5E:F5 Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a Certificate serial: 019AF2ADED4C2AEB388AF2FD28C4731A418F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft Manifest number: 0755 Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: 8JflJPlOpczHea4ZBvlS/KVEx1vqmwc/phXfZME2lxo=) 2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ed:4c:2a:eb:38:8a:f2:fd:28:c4:73:1a:41:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=bab11dbac24caa7cb4e6988de6f66ea038de5ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:48:7a:0e:db:ec:2e:db:fd:f6:ee:3b:8a:cf: 4f:10:4d:b1:ad:3d:33:58:fb:3e:51:b9:03:f8:e0: cc:19:4e:2a:85:07:6c:5d:88:c0:cb:01:bf:91:ca: 8b:8c:1e:40:5b:82:9a:c3:46:3f:83:89:a4:af:11: 22:c1:84:c3:28:83:d4:91:75:70:6d:32:ad:f3:32: bc:40:3a:6e:1c:f6:de:c2:49:86:6c:f9:ee:c2:82: ff:04:f7:29:ee:b4:d9:5e:5d:e3:b6:ba:4a:57:d8: 40:ad:48:b0:e9:1e:3d:08:84:18:cf:b3:e9:80:c5: ed:09:35:95:4c:b9:ef:43:71:88:62:73:0a:8a:4c: 04:25:b2:df:a4:60:30:10:cc:9a:c6:c2:8a:a6:fa: 77:7d:cc:f9:b6:1c:ca:8c:98:65:2a:38:5a:ea:6d: 8f:82:a8:bf:5e:d1:59:5c:36:cf:b5:83:44:46:1b: 25:18:37:af:11:e6:63:ae:db:d4:e4:cb:0a:fc:4a: 0c:7d:f1:ac:6c:bd:c4:fe:fb:d9:41:c5:67:1d:0f: ae:51:91:cd:4b:0e:cb:a5:14:59:49:02:51:de:b3: 0e:36:9c:af:80:38:4e:2b:e9:93:b9:64:b8:cc:89: 2e:84:66:9a:85:a8:2e:7c:96:c8:da:f3:96:68:eb: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:1D:BA:C2:4C:AA:7C:B4:E6:98:8D:E6:F6:6E:A0:38:DE:5E:F5 X509v3 Authority Key Identifier: keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:4a:92:3e:1c:e3:bc:22:42:48:d5:03:86:89:d0:d5:2d:2c: 80:1c:2d:bf:b7:01:dc:18:28:e9:2f:d7:b7:26:88:7b:21:e1: 3e:b7:a6:48:0e:c0:93:e8:8b:d1:db:76:66:54:52:77:3a:7c: ec:1f:cd:30:61:ce:72:f9:ca:64:89:c5:88:32:b6:76:bd:64: 6c:9c:27:7f:ba:4c:fd:bf:22:d2:2d:b5:12:3b:db:99:2e:8c: bc:09:50:52:63:3b:2f:05:92:d8:3b:e2:8b:84:76:0d:dc:ad: f2:26:21:6e:9d:31:4f:ce:9e:ee:c5:c9:e1:5b:c4:70:2f:af: 81:64:a1:4b:86:a7:cb:28:59:27:68:3c:2c:fb:22:27:c2:fd: 0d:19:9b:da:73:0c:c6:42:16:77:e3:8b:51:ef:45:1a:6a:e7: 95:0b:05:b7:9f:60:e6:db:e6:1d:1b:8a:88:f8:02:09:bc:84: de:a8:f2:97:46:a9:1b:57:d2:14:d2:f4:4b:ca:cf:70:3c:49: 60:6a:81:ed:2f:f0:be:eb:ef:58:c2:e7:99:fe:e4:59:cd:f9: df:09:29:5a:28:fc:40:70:3b:a0:89:c7:13:91:a5:70:c1:47: 7c:8b:4f:88:b4:cc:ab:f0:44:39:d6:b9:91:53:0a:88:41:ed: ee:8d:95:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryre1MKus4ivL9KMRzGkGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmU1MjgxMDc0MGE2ZWMxMzQ5OTNkYmM5YWQxMWI2NDU0 ZDlhN2EwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD EyhiYWIxMWRiYWMyNGNhYTdjYjRlNjk4OGRlNmY2NmVhMDM4ZGU1ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50h6DtvsLtv99u47is9PEE2xrT0z WPs+UbkD+ODMGU4qhQdsXYjAywG/kcqLjB5AW4Kaw0Y/g4mkrxEiwYTDKIPUkXVw bTKt8zK8QDpuHPbewkmGbPnuwoL/BPcp7rTZXl3jtrpKV9hArUiw6R49CIQYz7Pp gMXtCTWVTLnvQ3GIYnMKikwEJbLfpGAwEMyaxsKKpvp3fcz5thzKjJhlKjha6m2P gqi/XtFZXDbPtYNERhslGDevEeZjrtvU5MsK/EoMffGsbL3E/vvZQcVnHQ+uUZHN Sw7LpRRZSQJR3rMONpyvgDhOK+mTuWS4zIkuhGaahagufJbI2vOWaOs0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqxHbrCTKp8tOaYjeb2bqA43l71MB8GA1UdIwQY MBaAFARuUoEHQKbsE0mT28mtEbZFTZp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc1U2dRZEFwdXdUU1pQYnlhMFJ0a1ZObW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83N2E2OTktMDU1Yi00MDdjLWIxMmIt YWQ5NTQyYWQ0ZjQzLzEvQkc1U2dRZEFwdXdUU1pQYnlhMFJ0a1ZObW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83N2E2OTktMDU1Yi00MDdjLWIxMmItYWQ5NTQyYWQ0ZjQz LzEvQkc1U2dRZEFwdXdUU1pQYnlhMFJ0a1ZObW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUqSPhzj vCJCSNUDhonQ1S0sgBwtv7cB3Bgo6S/XtyaIeyHhPremSA7Ak+iL0dt2ZlRSdzp8 7B/NMGHOcvnKZInFiDK2dr1kbJwnf7pM/b8i0i21EjvbmS6MvAlQUmM7LwWS2Dvi i4R2Ddyt8iYhbp0xT86e7sXJ4VvEcC+vgWShS4anyyhZJ2g8LPsiJ8L9DRmb2nMM xkIWd+OLUe9FGmrnlQsFt59g5tvmHRuKiPgCCbyE3qjyl0apG1fSFNL0S8rPcDxJ YGqB7S/wvuvvWMLnmf7kWc353wkpWij8QHA7oInHE5GlcMFHfItPiLTMq/BEOda5 kVMKiEHt7o2V2A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:15 2025 by rpki-client