This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json) Hash identifier: 4Z7EF9Bxdh5HctR4qO6fgcJj2e9q7Vpmwp0iqgFngmw= Subject key identifier: 76:6D:7F:99:4A:91:4B:36:54:EA:05:02:E8:1F:49:0E:A1:1E:D5:7F Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f Certificate serial: 019AF1D236EB124FBF1CE7B8E17012EE12FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=) 2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: DACpS8uFtnK/adRM0voQayt88ZvPlA46j6vmS9N2cHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:36:eb:12:4f:bf:1c:e7:b8:e1:70:12:ee:12:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=766d7f994a914b3654ea0502e81f490ea11ed57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:e8:1e:d8:3a:41:1f:ae:58:22:3c:af:66: 1e:9d:0f:02:a1:9f:5b:4a:6a:44:d0:aa:18:46:72: 3f:28:a3:f7:24:e8:ae:98:f8:1f:63:9b:26:54:50: c0:53:5f:9d:e7:06:c8:bf:a0:de:1b:96:54:a2:f5: b1:15:35:90:0b:8d:b1:54:99:cf:30:c1:d3:da:9d: 76:61:56:04:19:5d:90:3d:9a:3e:27:20:4a:3e:7d: 44:f4:6a:ae:4d:81:b2:dd:5e:f4:da:c2:9b:b7:44: 1d:bd:14:8f:6d:3f:c1:c9:a9:90:e5:dd:b1:2f:ec: a6:35:ed:49:a7:d0:a0:11:ea:f3:7b:3e:e7:99:81: 2a:08:c9:07:28:d9:07:44:81:b4:0b:d0:07:c2:4c: 28:6c:8b:45:a7:8f:1f:f8:bc:9a:20:62:03:60:8d: 26:81:2e:8b:1b:0e:b9:48:7e:3f:c0:a9:a7:db:0b: f8:2a:a9:25:24:37:77:5b:ec:08:7a:26:70:ba:1d: 9e:8b:d1:42:ab:a2:fc:24:65:ea:03:2b:f0:8a:51: 0f:a4:63:42:60:c2:2e:ee:1f:01:31:d6:af:ad:e2: e9:ef:99:d2:0b:08:a4:90:a1:f0:9d:4e:a5:37:ac: 5d:b9:bc:c0:49:b3:c2:77:fb:71:82:f2:d7:42:09: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6D:7F:99:4A:91:4B:36:54:EA:05:02:E8:1F:49:0E:A1:1E:D5:7F X509v3 Authority Key Identifier: keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:89:bb:1e:e5:b6:25:36:2e:99:c8:89:58:49:5e:ae:a1:0d: 07:20:89:1b:12:bc:13:a6:40:38:95:d1:c5:76:92:c1:cf:c9: 0d:19:23:b9:a0:e2:a7:3e:61:0d:65:39:f4:32:31:b5:7c:b2: 9e:81:4b:0e:ef:82:36:63:67:b9:aa:b4:70:4e:0c:7a:e0:6e: 29:09:69:54:5a:90:14:a0:62:51:b1:93:7c:c8:bc:b9:14:82: 3e:68:58:2f:52:78:e0:3c:20:64:ad:d7:37:96:0a:e3:92:eb: d9:ac:03:7a:ac:9e:ea:18:7d:59:58:31:80:39:e9:2e:bc:a8: 1c:6a:52:4f:f4:1b:91:87:5d:56:3f:44:a6:6c:0a:7e:6c:c4: ef:72:2d:67:57:55:10:26:ab:d8:61:4b:a2:df:43:f7:44:37: f9:5b:f8:e8:c8:cf:c3:eb:db:27:70:bf:dc:50:2a:6e:9a:78: 82:c2:29:9d:25:5c:9f:0d:7b:2a:1d:6e:db:ee:00:0a:1a:26: f7:03:24:58:ad:19:8d:57:ce:69:68:27:67:9c:ce:86:5a:37: 5c:c6:78:51:97:6e:15:c3:2c:f4:dd:b4:2c:76:6c:8d:bb:08: 2b:79:99:bf:d0:15:d2:c6:20:7c:90:e0:f4:ea:00:10:cd:6b: cc:a0:75:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jbrEk+/HOe44XAS7hL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl ZmM2NGYwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD Eyg3NjZkN2Y5OTRhOTE0YjM2NTRlYTA1MDJlODFmNDkwZWExMWVkNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpboHtg6QR+uWCI8r2YenQ8CoZ9b SmpE0KoYRnI/KKP3JOiumPgfY5smVFDAU1+d5wbIv6DeG5ZUovWxFTWQC42xVJnP MMHT2p12YVYEGV2QPZo+JyBKPn1E9GquTYGy3V702sKbt0QdvRSPbT/ByamQ5d2x L+ymNe1Jp9CgEerzez7nmYEqCMkHKNkHRIG0C9AHwkwobItFp48f+LyaIGIDYI0m gS6LGw65SH4/wKmn2wv4KqklJDd3W+wIeiZwuh2ei9FCq6L8JGXqAyvwilEPpGNC YMIu7h8BMdavreLp75nSCwikkKHwnU6lN6xdubzASbPCd/txgvLXQgm/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZtf5lKkUs2VOoFAugfSQ6hHtV/MB8GA1UdIwQY MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYm7HuW2 JTYumciJWElerqENByCJGxK8E6ZAOJXRxXaSwc/JDRkjuaDipz5hDWU59DIxtXyy noFLDu+CNmNnuaq0cE4MeuBuKQlpVFqQFKBiUbGTfMi8uRSCPmhYL1J44DwgZK3X N5YK45Lr2awDeqye6hh9WVgxgDnpLryoHGpST/QbkYddVj9EpmwKfmzE73ItZ1dV ECar2GFLot9D90Q3+Vv46MjPw+vbJ3C/3FAqbpp4gsIpnSVcnw17Kh1u2+4AChom 9wMkWK0ZjVfOaWgnZ5zOhlo3XMZ4UZduFcMs9N20LHZsjbsIK3mZv9AV0sYgfJDg 9OoAEM1rzKB1yg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:12 2025 by rpki-client