This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json) Hash identifier: Pk5O7je0TfX+hxJjoYH9xhY1TyWOLjPQdGOnvok/Iho= Subject key identifier: 93:A8:94:E9:4A:03:FB:1B:78:33:48:EF:B6:92:57:94:AF:0D:17:93 Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f Certificate serial: 019B2219B8FBBCB3A232922FC118E5B59C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 13:01:09 +0000 Manifest this update: Mon 15 Dec 2025 13:01:09 +0000 Manifest next update: Tue 16 Dec 2025 13:01:09 +0000 Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=) 2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: GG17GhKGsalSMLGLx6s0Z59px5Ez0nUBM29h9SUmImg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b8:fb:bc:b3:a2:32:92:2f:c1:18:e5:b5:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f Validity Not Before: Dec 15 13:01:09 2025 GMT Not After : Dec 16 13:01:09 2025 GMT Subject: CN=93a894e94a03fb1b783348efb6925794af0d1793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:86:bc:8a:4d:3a:63:47:5c:fd:13:c8:69: 9b:a4:93:a0:fe:49:a4:84:af:c2:d5:8e:d6:1b:8a: 8d:48:b2:f4:db:b5:14:77:89:e1:64:fa:4f:a2:53: 9f:51:42:67:66:b0:b2:52:ce:b2:7b:8b:1c:36:3a: a1:9b:4a:83:6f:5b:b4:a9:78:00:e7:5b:04:a7:e4: c7:33:2b:e7:9f:f2:3f:93:d6:e2:5c:e4:cd:22:2d: c3:65:76:6d:c9:bd:4b:c3:55:ee:39:f3:0a:1c:74: 8c:40:86:ed:85:10:7c:23:04:9e:70:6c:ad:4b:2a: e4:34:3b:83:dc:19:16:26:51:a1:af:da:8d:ab:ac: f5:3f:ed:f8:d9:bf:91:4c:16:f9:7b:14:34:2b:3c: f4:0b:f9:28:95:7f:53:60:66:05:9e:6f:d8:56:20: 26:e3:7d:da:ee:09:08:9e:50:7b:c4:fc:f9:63:4b: bd:83:e8:e5:cb:75:6b:e3:79:0b:89:b9:37:6e:bc: 12:31:83:89:9b:4a:b3:3a:80:b1:6a:5c:31:03:d0: de:d5:cc:96:c6:16:cd:61:42:bb:75:29:10:ed:4a: 26:1a:00:7a:b6:00:6f:66:57:8c:67:45:9f:36:21: 50:4f:01:dc:7a:ac:ce:f7:4e:47:9d:45:6e:2c:ab: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A8:94:E9:4A:03:FB:1B:78:33:48:EF:B6:92:57:94:AF:0D:17:93 X509v3 Authority Key Identifier: keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8a:be:1f:fe:f4:57:1a:ac:94:84:39:8a:14:00:2f:a6:74: 86:27:e8:ff:3c:1b:1a:cd:5a:1d:75:9d:7c:85:e4:26:32:eb: 7d:eb:e6:12:cc:2c:3c:67:45:03:99:5a:00:48:f0:f3:89:3f: 6a:e3:bc:a4:f6:70:39:c8:02:50:77:38:b7:e0:be:fa:be:cd: 1d:c8:1d:a7:26:90:d6:9a:d2:6f:91:3e:6b:dd:14:ea:00:3f: 30:a7:c7:91:7e:7e:94:fc:ac:60:79:62:b0:8f:25:80:d8:3d: 0f:c8:a0:01:65:a1:80:6d:c3:e9:8c:dd:69:46:ac:03:6f:6b: 70:92:5b:a8:f4:fd:6b:48:d7:d2:bb:75:4d:06:db:e4:42:ed: 39:88:0c:9e:aa:2c:d1:c5:6c:44:67:40:58:4d:97:39:68:44: 40:57:49:ee:77:c8:53:a7:a2:54:48:dd:3a:b6:8f:c0:43:b9: ab:00:ff:a4:4c:8a:2d:52:3a:92:5c:36:1f:40:2e:a4:25:b9: 42:0d:77:ee:5f:cc:46:e2:b7:ff:04:82:f7:59:21:08:25:50: 34:83:31:0d:b8:33:d8:c9:66:c0:8e:18:00:d2:0c:49:5e:30: 65:f2:6f:9b:80:5e:17:1f:e7:eb:d5:23:f6:9b:af:48:58:0b: ec:99:2f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbj7vLOiMpIvwRjltZxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl ZmM2NGYwHhcNMjUxMjE1MTMwMTA5WhcNMjUxMjE2MTMwMTA5WjAzMTEwLwYDVQQD Eyg5M2E4OTRlOTRhMDNmYjFiNzgzMzQ4ZWZiNjkyNTc5NGFmMGQxNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iOGvIpNOmNHXP0TyGmbpJOg/kmk hK/C1Y7WG4qNSLL027UUd4nhZPpPolOfUUJnZrCyUs6ye4scNjqhm0qDb1u0qXgA 51sEp+THMyvnn/I/k9biXOTNIi3DZXZtyb1Lw1XuOfMKHHSMQIbthRB8IwSecGyt SyrkNDuD3BkWJlGhr9qNq6z1P+342b+RTBb5exQ0Kzz0C/kolX9TYGYFnm/YViAm 433a7gkInlB7xPz5Y0u9g+jly3Vr43kLibk3brwSMYOJm0qzOoCxalwxA9De1cyW xhbNYUK7dSkQ7UomGgB6tgBvZleMZ0WfNiFQTwHceqzO905HnUVuLKsHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOolOlKA/sbeDNI77aSV5SvDReTMB8GA1UdIwQY MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIq+H/70 VxqslIQ5ihQAL6Z0hifo/zwbGs1aHXWdfIXkJjLrfevmEswsPGdFA5laAEjw84k/ auO8pPZwOcgCUHc4t+C++r7NHcgdpyaQ1prSb5E+a90U6gA/MKfHkX5+lPysYHli sI8lgNg9D8igAWWhgG3D6YzdaUasA29rcJJbqPT9a0jX0rt1TQbb5ELtOYgMnqos 0cVsRGdAWE2XOWhEQFdJ7nfIU6eiVEjdOraPwEO5qwD/pEyKLVI6klw2H0AupCW5 Qg137l/MRuK3/wSC91khCCVQNIMxDbgz2MlmwI4YANIMSV4wZfJvm4BeFx/n69Uj 9puvSFgL7JkvEw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:28:42 2025 by rpki-client