This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json) Hash identifier: rFl7Lo0v3d0TuieXjpOutyBtV6g6UmsYUKppls8CJqM= Subject key identifier: 83:52:F7:89:23:EB:0E:A4:12:73:9F:0C:25:5C:3E:E5:91:C1:3B:30 Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2 Certificate serial: 019AF1D183564761180D56262B6512554982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: fE0bufftrjkT+QUsJYZ2tRVIJ4Oey4yri1kQ4wOEeWo=) 2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:83:56:47:61:18:0d:56:26:2b:65:12:55:49:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=8352f78923eb0ea412739f0c255c3ee591c13b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:4a:8c:10:68:ba:db:ae:56:d2:f0:2a:c1: 18:2a:c2:8d:e5:b3:f9:bf:d1:92:5f:b2:8c:ea:df: e8:19:80:a0:f6:e9:4e:4b:c2:c4:d9:b6:54:51:5f: ac:59:a0:d2:af:5c:2a:fd:43:85:2c:b1:3f:c6:a5: 6f:0e:88:01:5b:f3:db:71:20:56:07:ea:33:39:62: 4d:da:e6:28:a5:99:fa:19:05:e1:6c:e9:af:92:01: 97:c3:a3:6e:9d:d6:fd:b4:b5:08:c4:db:f4:92:37: e0:33:88:4c:88:62:a4:31:f9:ec:e2:03:3e:da:cf: e1:59:d4:67:2a:b8:80:5f:eb:c1:e5:74:39:60:af: 46:4d:a2:f3:ca:c1:b7:fe:01:8f:f6:c6:8a:6e:ef: 96:3b:4d:62:d2:57:af:df:74:66:e6:55:8c:00:67: 1e:e9:af:15:d9:b4:6b:db:9b:14:8e:29:bf:42:a3: 5f:94:aa:57:46:74:21:5a:2b:60:f2:12:30:21:c0: 90:b8:e5:ec:fd:ca:cb:9f:27:18:30:aa:fb:27:92: 76:50:d2:df:62:5b:66:6f:95:e1:21:c0:d1:5f:e0: f0:6c:ea:4f:0d:0e:7d:4b:ef:ac:1e:87:f8:78:fc: 42:66:d8:b3:12:ca:2f:de:3c:d1:e1:b8:1a:5e:da: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:52:F7:89:23:EB:0E:A4:12:73:9F:0C:25:5C:3E:E5:91:C1:3B:30 X509v3 Authority Key Identifier: keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1c:8b:08:f6:17:e9:78:ea:55:3a:09:4b:e7:04:e2:ed:42: 68:57:58:20:fe:43:d4:1c:11:59:95:7a:ee:94:28:e9:38:f9: 48:cf:9e:0c:80:54:21:4d:3a:82:d6:56:95:5f:fc:91:c0:3c: 74:1d:c0:70:a4:dd:ec:2e:0e:73:24:c0:f4:56:5b:a8:00:bd: f3:11:82:2f:a9:02:ee:9e:93:0d:f4:c0:a3:58:6b:25:10:61: 1e:52:0e:e3:b2:56:3e:22:e9:22:55:83:7b:d2:86:46:b8:ea: fd:e4:31:0c:70:36:90:4d:dd:6e:0f:fe:73:68:55:92:ab:43: ec:e0:a9:5a:31:2e:ac:08:c7:a0:52:5b:40:a5:f2:10:d2:e9: 56:79:4c:76:79:e4:6f:d5:d3:d9:05:0b:bd:f0:44:58:af:33: c8:93:51:78:63:3c:4c:31:7f:fd:c3:6f:69:3b:d7:f5:47:a9: cc:a0:2b:74:34:77:97:c6:75:a6:2f:b7:43:0b:c8:5f:76:ca: 9c:7b:c2:59:56:84:28:ea:31:0f:c5:4e:65:74:3f:79:60:e4: 86:a6:c0:28:0a:b8:a1:b9:6b:90:f8:d4:89:4c:55:d5:ac:86: 40:f0:61:57:df:e8:84:13:43:40:f2:80:a5:e7:10:21:66:bf: b8:1b:37:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YNWR2EYDVYmK2USVUmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3 OTc1ZTIwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD Eyg4MzUyZjc4OTIzZWIwZWE0MTI3MzlmMGMyNTVjM2VlNTkxYzEzYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQhKjBBoutuuVtLwKsEYKsKN5bP5 v9GSX7KM6t/oGYCg9ulOS8LE2bZUUV+sWaDSr1wq/UOFLLE/xqVvDogBW/PbcSBW B+ozOWJN2uYopZn6GQXhbOmvkgGXw6Nundb9tLUIxNv0kjfgM4hMiGKkMfns4gM+ 2s/hWdRnKriAX+vB5XQ5YK9GTaLzysG3/gGP9saKbu+WO01i0lev33Rm5lWMAGce 6a8V2bRr25sUjim/QqNflKpXRnQhWitg8hIwIcCQuOXs/crLnycYMKr7J5J2UNLf Yltmb5XhIcDRX+DwbOpPDQ59S++sHof4ePxCZtizEsov3jzR4bgaXtpzVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINS94kj6w6kEnOfDCVcPuWRwTswMB8GA1UdIwQY MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRyLCPYX 6XjqVToJS+cE4u1CaFdYIP5D1BwRWZV67pQo6Tj5SM+eDIBUIU06gtZWlV/8kcA8 dB3AcKTd7C4OcyTA9FZbqAC98xGCL6kC7p6TDfTAo1hrJRBhHlIO47JWPiLpIlWD e9KGRrjq/eQxDHA2kE3dbg/+c2hVkqtD7OCpWjEurAjHoFJbQKXyENLpVnlMdnnk b9XT2QULvfBEWK8zyJNReGM8TDF//cNvaTvX9UepzKArdDR3l8Z1pi+3QwvIX3bK nHvCWVaEKOoxD8VOZXQ/eWDkhqbAKAq4oblrkPjUiUxV1ayGQPBhV9/ohBNDQPKA pecQIWa/uBs3Jw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:35 2025 by rpki-client