This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json) Hash identifier: 7klpNtLu6ql+9oNhTqUBsWk9oOItBphLVZ18Pyq+d00= Subject key identifier: 14:92:37:52:8F:D9:55:7C:99:E8:45:43:D5:35:D6:9C:BB:33:09:5F Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Certificate serial: 019AF2095F3116A4DE0C2BA271DF5AD1CE19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: HE2g2/HU5fldrYyHBNlGSadzcgZ3x5I3frPwVhzJDrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5f:31:16:a4:de:0c:2b:a2:71:df:5a:d1:ce:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=149237528fd9557c99e84543d535d69cbb33095f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:10:72:80:99:5a:76:cf:b7:cf:0c:e4:51: a9:52:c4:40:ce:6e:8a:b9:f4:41:fb:10:1c:f2:ad: 7e:5d:66:0b:de:8c:37:16:5e:0a:4d:d6:d9:eb:f6: ae:f3:0a:a4:9e:39:9d:74:25:80:94:66:9e:80:49: ba:98:a5:1e:7d:6f:26:73:90:5c:79:f0:72:7a:2c: 13:d5:fd:66:ef:3b:29:dc:97:c1:d0:44:52:3e:06: 48:24:0b:60:93:bb:bc:a5:44:9c:34:9f:9a:f3:7f: 34:2c:4d:95:b9:14:cb:28:d3:10:e2:ec:27:41:55: 44:52:bd:a3:59:03:7d:23:3e:0c:06:12:85:a1:8e: a6:d4:c9:68:10:e3:16:13:f3:4c:54:23:a8:ef:66: 63:f0:aa:03:b3:16:18:73:60:6f:65:09:a5:4a:67: c7:63:7a:79:5d:d4:90:08:d3:c9:91:96:58:e2:83: a5:72:19:49:ab:15:68:58:00:38:80:0e:d3:ff:38: 19:ec:09:7d:b5:c7:39:4c:02:03:95:ac:93:0d:e8: c4:20:d2:a0:0f:32:f5:fc:ee:0e:f0:fa:55:bb:7e: 7d:52:c0:66:19:04:18:cb:7d:95:05:7d:5d:dd:c8: fe:1e:18:aa:e8:cc:bf:90:18:64:f8:05:c0:0c:f7: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:37:52:8F:D9:55:7C:99:E8:45:43:D5:35:D6:9C:BB:33:09:5F X509v3 Authority Key Identifier: keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:aa:f6:dc:73:6d:b3:4f:aa:76:56:5d:49:3c:c4:ad:4f:58: de:3e:52:f6:c3:e7:2f:d0:06:a0:a2:7c:34:df:db:da:cd:0e: 94:89:9d:5f:43:4d:80:3f:d2:f3:6e:91:4b:d6:a4:04:3d:59: 93:c9:b0:3d:93:08:ef:0f:37:d5:e5:a1:02:69:9f:4e:59:fa: 0d:9d:67:70:02:08:b0:e7:f8:76:3b:87:64:89:5a:c1:f5:1d: b5:a8:81:37:35:f9:31:4f:be:73:c4:90:b6:b2:7e:bf:a9:b5: 5a:12:d7:75:a8:85:65:cc:8c:23:c1:7c:62:05:83:5d:19:39: 0f:d9:99:b8:6b:9f:ac:b0:12:43:cb:b3:20:f3:db:bc:86:9f: c5:b2:3b:7c:88:a9:b5:16:2a:e9:c8:62:d3:bf:01:4b:46:9b: bc:4c:a1:67:14:02:be:c4:0c:1d:39:4e:99:7a:3b:40:91:cd: b8:b1:ca:e1:17:ed:7c:9e:46:7b:a8:94:a9:12:55:0f:fe:aa: 5e:fd:69:61:89:6b:bc:ad:8f:03:de:80:c0:65:46:6a:25:58: a3:a2:e4:12:3d:9b:4d:ca:eb:59:aa:3a:ed:3a:85:2b:24:34: 7f:15:3c:23:24:ef:9f:75:ec:99:74:c6:b8:27:00:ad:be:ac: bb:12:4a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV8xFqTeDCuicd9a0c4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMGM2NzQwNDBkMmZkZmE4YjllZTI3YmE4NmM3NDdkNmIw ZWNiNjcwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EygxNDkyMzc1MjhmZDk1NTdjOTllODQ1NDNkNTM1ZDY5Y2JiMzMwOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspcQcoCZWnbPt88M5FGpUsRAzm6K ufRB+xAc8q1+XWYL3ow3Fl4KTdbZ6/au8wqknjmddCWAlGaegEm6mKUefW8mc5Bc efByeiwT1f1m7zsp3JfB0ERSPgZIJAtgk7u8pUScNJ+a8380LE2VuRTLKNMQ4uwn QVVEUr2jWQN9Iz4MBhKFoY6m1MloEOMWE/NMVCOo72Zj8KoDsxYYc2BvZQmlSmfH Y3p5XdSQCNPJkZZY4oOlchlJqxVoWAA4gA7T/zgZ7Al9tcc5TAIDlayTDejEINKg DzL1/O4O8PpVu359UsBmGQQYy32VBX1d3cj+Hhiq6My/kBhk+AXADPdWVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSSN1KP2VV8mehFQ9U11py7MwlfMB8GA1UdIwQY MBaAFG4MZ0BA0v36i57ie6hsdH1rDstnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgt ZTI2NDgzM2FlMTc1LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgtZTI2NDgzM2FlMTc1 LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMar23HNt s0+qdlZdSTzErU9Y3j5S9sPnL9AGoKJ8NN/b2s0OlImdX0NNgD/S826RS9akBD1Z k8mwPZMI7w831eWhAmmfTln6DZ1ncAIIsOf4djuHZIlawfUdtaiBNzX5MU++c8SQ trJ+v6m1WhLXdaiFZcyMI8F8YgWDXRk5D9mZuGufrLASQ8uzIPPbvIafxbI7fIip tRYq6chi078BS0abvEyhZxQCvsQMHTlOmXo7QJHNuLHK4RftfJ5Ge6iUqRJVD/6q Xv1pYYlrvK2PA96AwGVGaiVYo6LkEj2bTcrrWao67TqFKyQ0fxU8IyTvn3XsmXTG uCcArb6suxJKow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:08 2025 by rpki-client