This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json) Hash identifier: dBuc2ZuaQEZr8gADnMOXMbkddCLL5mg1FdCXYqBYV24= Subject key identifier: 44:5E:63:45:EF:F4:16:DB:88:3A:9A:80:3A:52:28:5A:AB:8A:89:34 Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Certificate serial: 019AF31B8B829B53E4A24B8889D297058F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: BQdQcVNS0DBcFI+JahpOpqKFG4fCrJVPj5kGiquqJLI=) 2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8b:82:9b:53:e4:a2:4b:88:89:d2:97:05:8f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=445e6345eff416db883a9a803a52285aab8a8934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:eb:11:bf:30:53:76:a6:b8:93:d0:69:52: dd:c2:9c:d8:ac:8d:31:9c:18:34:4c:a5:87:91:c0: f2:da:73:5d:37:55:10:df:df:dd:60:a5:71:92:c0: c0:12:11:bb:85:d4:35:09:e2:80:20:f4:8f:af:f4: 0c:18:a4:fc:3e:a6:8a:67:cd:22:e4:93:24:fa:ad: e1:f7:17:79:06:10:cc:ad:0a:52:70:55:27:2b:89: 42:fa:ab:40:e9:6b:25:92:87:c6:36:e5:1b:2c:b1: d6:0a:8b:84:2a:a6:b2:5b:d5:9c:2f:6a:12:ec:3a: e6:18:83:9a:17:6b:6e:5f:3b:15:9f:19:00:b2:13: 3c:67:94:47:65:6c:7a:51:aa:62:34:35:e5:d3:c2: 75:8e:c4:5a:8c:ae:7c:71:0e:6c:38:55:e7:4d:ee: b4:a0:d0:47:77:bb:83:72:a9:9a:67:cf:18:71:07: 2a:a8:de:2e:82:90:f4:8f:58:08:d3:42:90:0e:f7: f6:81:31:f9:67:44:6a:98:32:74:47:25:af:e7:85: 25:c7:35:b0:bf:c7:6a:1a:7d:6b:31:4e:d2:d1:de: d5:39:07:d8:58:53:ec:a2:5f:0c:20:41:c0:7f:f7: f3:7f:b8:4b:b7:69:2d:83:c9:ac:8a:50:18:fc:f6: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:63:45:EF:F4:16:DB:88:3A:9A:80:3A:52:28:5A:AB:8A:89:34 X509v3 Authority Key Identifier: keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b3:04:24:43:84:64:6b:9e:09:50:11:48:c3:7c:c1:a3:49: a1:2d:40:5e:14:01:55:be:5c:15:49:20:bd:dc:47:85:48:f8: 3a:38:9d:df:6c:4f:0a:10:d5:eb:df:a8:1b:24:ca:a4:3d:fc: 42:03:17:8c:53:c1:99:9e:7f:b9:76:02:9b:62:ea:dc:32:d1: 07:4d:76:ad:24:3f:28:1b:70:ad:57:a9:03:b8:9e:19:17:81: 3a:d7:a5:c4:55:74:a0:d3:96:0c:fe:8b:91:0f:9f:99:b4:4e: c9:63:05:7f:77:6f:23:9a:3c:5f:09:1e:5f:bc:c2:b3:9a:a9: e2:bf:7a:7c:7b:06:c3:34:6a:3c:82:4a:43:f7:e8:f5:25:60: 59:fd:0c:ff:ac:0d:73:40:c3:5f:13:f3:b8:5b:dd:99:f9:4f: 62:50:06:92:84:38:9b:2e:44:23:f6:c2:3b:9f:5f:b7:63:a1: 8b:2a:52:53:9f:90:d7:1b:43:5c:86:df:e8:f9:92:b1:c8:42: 2e:31:09:49:2b:b1:48:cc:a5:8f:b8:ab:00:bd:bf:a7:d2:17: d5:4d:bb:b2:88:60:96:78:e7:89:f5:6b:1b:0c:97:4b:4d:08: 22:8e:d9:6e:3c:50:1a:94:a9:0e:cf:e2:db:ef:97:9a:a3:ad: 67:36:45:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4uCm1PkokuIidKXBY94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl ZjgyNmQwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD Eyg0NDVlNjM0NWVmZjQxNmRiODgzYTlhODAzYTUyMjg1YWFiOGE4OTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtbrEb8wU3amuJPQaVLdwpzYrI0x nBg0TKWHkcDy2nNdN1UQ39/dYKVxksDAEhG7hdQ1CeKAIPSPr/QMGKT8PqaKZ80i 5JMk+q3h9xd5BhDMrQpScFUnK4lC+qtA6WslkofGNuUbLLHWCouEKqayW9WcL2oS 7DrmGIOaF2tuXzsVnxkAshM8Z5RHZWx6UapiNDXl08J1jsRajK58cQ5sOFXnTe60 oNBHd7uDcqmaZ88YcQcqqN4ugpD0j1gI00KQDvf2gTH5Z0RqmDJ0RyWv54UlxzWw v8dqGn1rMU7S0d7VOQfYWFPsol8MIEHAf/fzf7hLt2ktg8msilAY/PbsBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEReY0Xv9BbbiDqagDpSKFqriok0MB8GA1UdIwQY MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrMEJEOE ZGueCVARSMN8waNJoS1AXhQBVb5cFUkgvdxHhUj4Ojid32xPChDV69+oGyTKpD38 QgMXjFPBmZ5/uXYCm2Lq3DLRB012rSQ/KBtwrVepA7ieGReBOtelxFV0oNOWDP6L kQ+fmbROyWMFf3dvI5o8XwkeX7zCs5qp4r96fHsGwzRqPIJKQ/fo9SVgWf0M/6wN c0DDXxPzuFvdmflPYlAGkoQ4my5EI/bCO59ft2OhiypSU5+Q1xtDXIbf6PmSschC LjEJSSuxSMylj7irAL2/p9IX1U27sohglnjnifVrGwyXS00IIo7ZbjxQGpSpDs/i 2++XmqOtZzZFOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:31 2025 by rpki-client