This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json) Hash identifier: RHy9rhrDrAqYv1jafCgtIiMHwILWKD0HRo00phArnY4= Subject key identifier: 69:8B:82:D5:94:BF:33:28:C0:6C:8A:12:DF:AB:24:AA:0D:32:88:32 Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6 Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6 Certificate serial: 019AF35270536E1B7F44F1AD99B53D4BACF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: jgxPUxuw3/LhjQMQueczl0zO6WXihfj7GqW7eGAC1hg=) 2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:70:53:6e:1b:7f:44:f1:ad:99:b5:3d:4b:ac:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6 Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=698b82d594bf3328c06c8a12dfab24aa0d328832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:be:c7:fb:fa:a1:0e:d5:49:91:69:31:d9: b4:34:b3:0a:b2:38:cc:f8:d2:71:c4:83:fd:81:80: 95:1b:ce:07:e4:b6:21:e3:c7:bb:df:39:8c:f0:d8: 07:4a:7f:ef:87:f2:8b:8b:52:eb:71:b8:2e:2f:f3: 43:8a:df:cd:f7:bb:28:f4:07:79:1e:03:24:86:d2: a9:e8:6a:92:05:91:4d:66:92:81:28:44:8c:e8:94: 4c:f5:75:a6:ee:1a:c3:3d:36:c0:92:87:42:1b:a3: b4:4d:b8:cf:e8:d6:bb:f0:99:3f:7c:19:23:74:ae: 53:11:44:cc:5a:d1:75:69:ba:da:cb:0e:02:a3:ff: 0d:33:dd:6b:c4:78:ef:3f:99:cc:64:ac:b7:3c:88: 46:cc:7f:97:b4:0e:68:dd:25:41:78:8d:f3:0f:49: a3:d7:ea:7d:96:2b:46:e0:97:88:d9:04:81:6f:16: 51:fe:8c:4d:67:78:e6:8b:52:65:ab:8c:eb:b9:4e: 33:bc:fa:e1:ef:98:d7:86:93:f7:d1:5d:88:62:1f: 9e:5b:4b:9c:e9:88:2c:40:c9:d8:17:60:ee:19:9a: 60:aa:dc:c3:0a:88:7a:c7:57:50:db:01:fe:27:4a: dc:35:65:17:32:19:14:b2:47:b2:44:0e:98:86:7b: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8B:82:D5:94:BF:33:28:C0:6C:8A:12:DF:AB:24:AA:0D:32:88:32 X509v3 Authority Key Identifier: keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3e:ed:ca:b0:d2:a5:4e:9d:3d:dc:4b:1e:af:d4:67:a2:4a: 93:1c:5e:4a:d1:7d:28:7f:fb:94:b6:b5:b9:a7:03:7f:c7:ee: 3f:37:bb:df:ac:18:35:f3:cd:48:69:36:dd:c7:b0:5d:ea:41: 0a:23:4f:25:cd:33:4c:32:2f:9c:26:a1:0d:c9:9a:fb:7a:89: 4e:a6:d3:02:8e:ac:ce:df:d3:dd:d2:22:9a:b4:98:59:20:86: b0:ba:39:cc:ed:ce:77:d7:bc:43:4f:c8:34:0a:4b:fb:6c:e7: 04:b7:7a:ab:1a:a4:26:cd:74:dd:b0:2b:73:9b:da:2a:e2:82: 5a:da:ec:d6:f2:d2:28:08:42:db:85:52:65:56:58:0d:61:1f: 40:43:08:aa:37:64:e5:b8:7f:76:93:b3:9a:2a:3c:f1:b5:dc: d6:a1:67:29:14:13:dd:db:21:58:0c:fd:2a:42:7a:cc:85:09: 7d:b4:c8:2f:61:fa:55:06:1d:ad:5e:ed:f5:cc:63:41:ea:f0: dd:63:d8:49:77:6b:26:3f:2a:f9:85:6f:ea:a0:9f:c0:86:53: 46:84:48:7c:a0:ae:ec:62:74:92:b4:15:bd:ba:de:de:73:db: 07:a6:e8:45:1f:1a:6b:7c:02:25:42:3b:b6:70:a7:1e:65:e2: c8:20:62:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnBTbht/RPGtmbU9S6z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjgxYzI1NmQ2NzI5ODFjYjM5Y2UyNWNhNzhjZjIxNWNm NGVhYTYwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg2OThiODJkNTk0YmYzMzI4YzA2YzhhMTJkZmFiMjRhYTBkMzI4ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZK+x/v6oQ7VSZFpMdm0NLMKsjjM +NJxxIP9gYCVG84H5LYh48e73zmM8NgHSn/vh/KLi1LrcbguL/NDit/N97so9Ad5 HgMkhtKp6GqSBZFNZpKBKESM6JRM9XWm7hrDPTbAkodCG6O0TbjP6Na78Jk/fBkj dK5TEUTMWtF1abrayw4Co/8NM91rxHjvP5nMZKy3PIhGzH+XtA5o3SVBeI3zD0mj 1+p9litG4JeI2QSBbxZR/oxNZ3jmi1Jlq4zruU4zvPrh75jXhpP30V2IYh+eW0uc 6YgsQMnYF2DuGZpgqtzDCoh6x1dQ2wH+J0rcNWUXMhkUskeyRA6YhnsLvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmLgtWUvzMowGyKEt+rJKoNMogyMB8GA1UdIwQY MBaAFG5oHCVtZymByznOJcp4zyFc9OqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTkt MzdhNTBjZGZhZTA3LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTktMzdhNTBjZGZhZTA3 LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz7tyrDS pU6dPdxLHq/UZ6JKkxxeStF9KH/7lLa1uacDf8fuPze736wYNfPNSGk23cewXepB CiNPJc0zTDIvnCahDcma+3qJTqbTAo6szt/T3dIimrSYWSCGsLo5zO3Od9e8Q0/I NApL+2znBLd6qxqkJs103bArc5vaKuKCWtrs1vLSKAhC24VSZVZYDWEfQEMIqjdk 5bh/dpOzmio88bXc1qFnKRQT3dshWAz9KkJ6zIUJfbTIL2H6VQYdrV7t9cxjQerw 3WPYSXdrJj8q+YVv6qCfwIZTRoRIfKCu7GJ0krQVvbre3nPbB6boRR8aa3wCJUI7 tnCnHmXiyCBiVA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:29 2025 by rpki-client