This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json) Hash identifier: SZUtaygCLLbB5GKHW/uwYyzufqNkAwdVgDXg0mMHL7I= Subject key identifier: D1:D7:BD:BC:71:8E:F8:A5:3D:99:D4:7F:DE:77:3A:3B:18:9A:80:0A Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Certificate serial: 019B2174CCA2DB3AD6E108992B5060E41381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 10:01:01 +0000 Manifest this update: Mon 15 Dec 2025 10:01:01 +0000 Manifest next update: Tue 16 Dec 2025 10:01:01 +0000 Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: /gu1XiLjU3WqU5GP1vBgkBuarO/6jNa3g6STt4Jaai4=) 2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:cc:a2:db:3a:d6:e1:08:99:2b:50:60:e4:13:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Validity Not Before: Dec 15 10:01:01 2025 GMT Not After : Dec 16 10:01:01 2025 GMT Subject: CN=d1d7bdbc718ef8a53d99d47fde773a3b189a800a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:98:ea:42:1f:54:9d:27:5d:d9:db:c0:43: b8:67:65:ff:14:c7:ff:24:80:ce:38:34:fc:a5:3f: be:3d:86:a2:fb:ea:2a:74:96:bb:73:aa:42:4c:f8: 35:a5:11:0e:bc:ad:b7:37:b7:40:9d:10:72:bd:ca: 7f:3d:6f:0a:18:12:ee:5a:56:0a:e0:6e:07:f1:45: 0f:f9:54:ab:33:3d:3d:eb:52:4e:d0:80:70:64:62: d3:6e:85:09:fc:bb:a1:f8:1a:92:a6:7d:5f:de:f4: 18:6a:30:70:c9:66:77:65:3f:e1:45:73:36:bb:8d: e9:3c:ce:22:c7:e0:b0:d6:89:66:e6:3a:2d:7b:de: c7:c4:51:62:7c:8c:bb:c8:b2:49:a4:b4:c6:5d:f8: 9d:e9:2a:d8:2f:79:a5:3d:2b:f1:55:17:0c:f6:a1: 96:37:a1:d6:b9:51:d5:08:d5:bd:1b:fe:b2:cb:11: ee:98:a9:42:14:0b:6c:62:59:53:21:8e:f0:b0:bb: bf:3f:1f:97:36:b7:30:b2:bf:6b:5f:c6:ce:68:8f: 95:e8:17:37:3b:57:7b:10:c8:3d:b5:bb:ae:22:2d: 0b:04:c0:98:0c:43:5a:67:08:5e:91:19:ce:59:7a: 44:53:c5:6f:4e:3e:24:2b:8f:bd:d6:d8:3a:0e:f6: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D7:BD:BC:71:8E:F8:A5:3D:99:D4:7F:DE:77:3A:3B:18:9A:80:0A X509v3 Authority Key Identifier: keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a5:e3:85:60:42:5a:1d:0c:00:82:bc:0a:83:18:72:3a:0e: 70:d9:92:a8:e3:dc:79:15:6f:07:4d:31:89:f3:91:d9:15:8c: 81:b3:12:ad:1c:56:b0:12:fe:61:0f:c1:89:89:f6:42:93:e2: b4:18:a5:a9:6b:11:9d:bb:5a:61:87:53:b7:a4:83:cd:66:78: e7:91:ff:d7:4e:9a:51:e3:a8:77:8f:c5:ec:58:99:a6:63:0a: 96:40:4c:d4:d2:b8:b6:d3:e3:f7:54:26:55:cc:15:ba:32:f4: 14:01:7f:af:8a:c9:1c:79:84:7b:45:a0:79:47:83:9c:bb:e8: c3:db:71:7a:61:ff:a4:dc:d6:d2:28:9d:e1:76:c7:2c:16:29: f4:cd:d6:4b:0a:c4:33:78:61:a7:fd:a6:b6:e1:be:7e:d4:cd: 48:00:87:8d:98:87:95:8e:6a:76:b7:ff:c2:65:ba:65:0b:76: 1f:34:30:36:89:d7:f6:e0:2e:2a:1b:61:8d:bc:06:b5:e9:18: c0:da:d0:47:8f:c8:ca:92:68:f7:22:96:28:0d:fc:c7:84:1c: 6a:2d:59:89:65:70:12:ed:23:43:b6:7e:19:8e:1c:49:ff:71: e5:44:fa:6e:a7:1c:d8:0d:5c:7e:ed:45:80:7a:96:48:03:f3: 04:e5:e9:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdMyi2zrW4QiZK1Bg5BOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl ZjgyNmQwHhcNMjUxMjE1MTAwMTAxWhcNMjUxMjE2MTAwMTAxWjAzMTEwLwYDVQQD EyhkMWQ3YmRiYzcxOGVmOGE1M2Q5OWQ0N2ZkZTc3M2EzYjE4OWE4MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX6Y6kIfVJ0nXdnbwEO4Z2X/FMf/ JIDOODT8pT++PYai++oqdJa7c6pCTPg1pREOvK23N7dAnRByvcp/PW8KGBLuWlYK 4G4H8UUP+VSrMz0961JO0IBwZGLTboUJ/Luh+BqSpn1f3vQYajBwyWZ3ZT/hRXM2 u43pPM4ix+Cw1olm5jote97HxFFifIy7yLJJpLTGXfid6SrYL3mlPSvxVRcM9qGW N6HWuVHVCNW9G/6yyxHumKlCFAtsYllTIY7wsLu/Px+XNrcwsr9rX8bOaI+V6Bc3 O1d7EMg9tbuuIi0LBMCYDENaZwhekRnOWXpEU8VvTj4kK4+91tg6Dva5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHXvbxxjvilPZnUf953OjsYmoAKMB8GA1UdIwQY MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqXjhWBC Wh0MAIK8CoMYcjoOcNmSqOPceRVvB00xifOR2RWMgbMSrRxWsBL+YQ/BiYn2QpPi tBilqWsRnbtaYYdTt6SDzWZ455H/106aUeOod4/F7FiZpmMKlkBM1NK4ttPj91Qm VcwVujL0FAF/r4rJHHmEe0WgeUeDnLvow9txemH/pNzW0iid4XbHLBYp9M3WSwrE M3hhp/2mtuG+ftTNSACHjZiHlY5qdrf/wmW6ZQt2HzQwNonX9uAuKhthjbwGtekY wNrQR4/IypJo9yKWKA38x4Qcai1ZiWVwEu0jQ7Z+GY4cSf9x5UT6bqcc2A1cfu1F gHqWSAPzBOXpPg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:18:43 2025 by rpki-client