This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json) Hash identifier: +Vi1lWuo5bCUY32LYjX/U4f8Pt7fciwVvPjn7Sw8bOs= Subject key identifier: BC:C0:00:1D:3D:7C:0E:51:B6:58:E6:81:B3:D4:D3:FA:9E:20:DB:A0 Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6 Certificate serial: 019AF12CF0762321B8D669F19702636E0A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft Manifest number: 0872 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=) 2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: i1EAyfPsXcBWZ3gg3yF76bjm0jlc2hdLjP64eneznhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f0:76:23:21:b8:d6:69:f1:97:02:63:6e:0a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=bcc0001d3d7c0e51b658e681b3d4d3fa9e20dba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:28:ef:14:d6:0b:1e:8e:24:bc:95:37:6b: c6:11:e1:62:bb:e5:7b:f5:1f:64:4e:85:6a:b6:e4: 79:e5:a8:67:4e:c3:04:da:a2:f1:81:8f:1c:f9:48: 34:b5:c9:72:08:0c:f6:8c:6b:4a:09:b1:3f:ac:2d: 46:d9:b3:cf:0a:6a:dd:e7:90:f5:1b:c0:fe:ce:5e: c2:96:d8:64:ea:4c:a1:94:e0:6c:28:86:d1:53:c8: 58:3b:ee:b2:59:5b:a7:d2:bf:c9:32:bb:a1:28:b8: 0e:ac:3b:c7:24:e0:8b:bd:18:49:5b:78:64:e7:66: 5f:59:b2:f6:fc:ef:95:bb:3d:43:6b:13:e9:26:54: d8:42:8f:ff:5c:b6:07:60:c4:92:ac:42:92:5f:bf: 87:22:25:9b:a1:4d:18:90:5b:58:b1:55:80:c8:8c: ee:c9:36:8f:64:08:f1:0b:3c:45:0f:c8:fb:39:89: 6e:b6:cc:c2:48:56:1b:5e:80:fe:7e:db:44:21:9b: f9:2c:65:83:81:71:61:c0:86:b8:ba:ed:48:85:70: 4b:2c:93:b3:cf:32:34:6b:81:a1:5c:52:f6:df:1a: b7:ce:bd:51:b6:aa:32:43:c8:29:96:fa:b5:9d:b1: 26:de:70:20:72:c8:4b:83:cf:62:8b:19:04:79:91: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C0:00:1D:3D:7C:0E:51:B6:58:E6:81:B3:D4:D3:FA:9E:20:DB:A0 X509v3 Authority Key Identifier: keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:01:ae:11:b8:a2:77:fa:35:82:f4:16:7c:9a:50:2e:03:82: 1f:1b:14:c3:43:38:ca:c1:92:2b:b9:d2:34:eb:87:5d:b6:e6: c8:76:cc:db:c9:7a:4c:1e:56:5b:4a:d5:ab:ba:f4:4b:cf:7a: 25:2f:99:6a:74:0d:90:67:fe:ae:7f:59:7d:7a:d6:66:ba:4a: ed:f9:85:d0:e1:5b:58:30:10:c9:4b:30:6a:fb:b4:5d:b8:c9: d2:9a:fa:4a:5e:0a:ca:82:ad:ff:7c:54:a5:34:a3:57:71:bb: ad:2e:5e:9b:5a:5a:8f:e2:d0:dc:35:f5:ad:0b:ec:d5:69:48: 7e:c6:18:ba:bc:46:71:d3:7b:26:0a:56:78:1e:40:7a:51:1e: 58:c4:7d:bc:dc:7f:1e:65:18:91:15:4b:11:02:61:f0:f0:63: 91:7b:88:95:54:e4:72:5f:bc:1c:b6:3e:c5:ee:7c:0e:f1:8f: 66:81:c9:47:33:1e:8e:cc:e0:41:c9:36:a1:db:41:b7:5b:3e: 94:6a:dc:ec:fb:6a:88:49:93:51:0f:d9:1b:07:71:61:e5:cb: 61:9f:8e:8c:55:7e:00:0b:86:10:2c:d0:8c:fc:be:76:d4:1b: ef:fd:64:d4:b2:c4:90:78:9f:de:63:12:7d:cb:8d:27:14:81: f1:66:47:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPB2IyG41mnxlwJjbgpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj Nzk5ZTYwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhiY2MwMDAxZDNkN2MwZTUxYjY1OGU2ODFiM2Q0ZDNmYTllMjBkYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tso7xTWCx6OJLyVN2vGEeFiu+V7 9R9kToVqtuR55ahnTsME2qLxgY8c+Ug0tclyCAz2jGtKCbE/rC1G2bPPCmrd55D1 G8D+zl7Clthk6kyhlOBsKIbRU8hYO+6yWVun0r/JMruhKLgOrDvHJOCLvRhJW3hk 52ZfWbL2/O+Vuz1DaxPpJlTYQo//XLYHYMSSrEKSX7+HIiWboU0YkFtYsVWAyIzu yTaPZAjxCzxFD8j7OYlutszCSFYbXoD+fttEIZv5LGWDgXFhwIa4uu1IhXBLLJOz zzI0a4GhXFL23xq3zr1RtqoyQ8gplvq1nbEm3nAgcshLg89iixkEeZE63wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzAAB09fA5RtljmgbPU0/qeINugMB8GA1UdIwQY MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAGuEbii d/o1gvQWfJpQLgOCHxsUw0M4ysGSK7nSNOuHXbbmyHbM28l6TB5WW0rVq7r0S896 JS+ZanQNkGf+rn9ZfXrWZrpK7fmF0OFbWDAQyUswavu0XbjJ0pr6Sl4KyoKt/3xU pTSjV3G7rS5em1paj+LQ3DX1rQvs1WlIfsYYurxGcdN7JgpWeB5AelEeWMR9vNx/ HmUYkRVLEQJh8PBjkXuIlVTkcl+8HLY+xe58DvGPZoHJRzMejszgQck2odtBt1s+ lGrc7PtqiEmTUQ/ZGwdxYeXLYZ+OjFV+AAuGECzQjPy+dtQb7/1k1LLEkHif3mMS fcuNJxSB8WZH7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:20 2025 by rpki-client