This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json) Hash identifier: HnGBbi4DQhnat69racpN5EMF1eAK8YYcMlnDIS6PGVk= Subject key identifier: 56:74:25:3E:9F:50:68:63:6A:6C:F0:13:18:C9:E8:F3:F0:E3:DF:DD Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Certificate serial: 019AF12DC4B80F6E226EF621177F102FFED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft Manifest number: 1450 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: H4S5z1vEtA2onwAlngNC/ZJPaUd/0L/EL8hmya7Q0io=) 2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c4:b8:0f:6e:22:6e:f6:21:17:7f:10:2f:fe:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=5674253e9f5068636a6cf01318c9e8f3f0e3dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:57:54:59:a4:ed:ee:36:91:58:5d:70:1d: b2:80:66:23:84:d3:5d:0e:7b:b0:7b:17:f8:9c:49: 09:56:3d:d4:69:7f:d1:c6:06:41:37:c6:fe:ae:a3: d9:b9:8b:46:62:b8:4b:a7:00:cd:d8:e4:09:0f:52: c4:f6:f8:18:d5:0f:46:fa:9b:5e:6d:ef:87:86:e8: 89:3d:b2:eb:2b:34:59:cd:25:a6:21:3c:c4:45:d7: ce:78:4c:32:e5:9c:5c:6e:6a:8f:7d:4f:db:78:0e: 8c:15:af:ad:c4:4b:6a:ce:4b:d5:97:50:c7:4a:a2: 1f:30:f8:f9:97:7d:dc:89:a0:82:9c:e5:f5:d5:c9: 66:69:a1:71:94:4a:38:cf:db:44:da:91:0f:5e:33: 17:90:15:bb:45:32:ca:5b:ab:38:65:16:d9:23:86: b9:13:c2:e5:c7:f9:2c:4d:7a:d7:20:b7:d0:65:82: 57:ac:87:fb:0c:93:8f:f5:43:dd:5c:60:af:88:22: ce:6e:71:ee:70:58:71:16:6e:c6:e7:2c:0b:fa:99: 18:64:6e:ef:a5:f7:cc:4e:ba:13:5f:10:12:af:45: 2b:b5:32:ce:01:bb:2a:69:73:37:db:b9:98:5d:35: ce:1b:49:5e:c9:f4:ff:dd:38:c9:55:b0:cf:96:32: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:74:25:3E:9F:50:68:63:6A:6C:F0:13:18:C9:E8:F3:F0:E3:DF:DD X509v3 Authority Key Identifier: keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cb:3f:29:2f:a7:a8:5d:b4:aa:7a:12:0e:ae:fc:5f:b9:66: a1:a3:af:8c:cd:5e:0b:23:de:25:97:24:e2:f1:6a:bf:c9:09: dd:82:72:d8:f6:ef:8d:1f:ee:96:e9:c8:cb:2c:d5:fa:5d:86: 1b:e1:3d:6d:c4:76:b3:ec:3e:af:64:bd:dd:9d:ad:7c:48:0a: 4c:77:da:5b:0b:52:56:7f:c3:8a:65:67:5d:16:df:5c:63:70: 7f:2d:16:58:56:36:0e:e9:dd:26:89:92:67:96:dd:82:45:16: f5:ee:b5:44:73:51:c6:e3:d0:0b:dd:59:a5:b3:e4:de:64:ac: a0:79:0f:49:5e:42:37:0c:39:dc:d7:d0:9e:bd:c5:7b:7a:ed: 3c:9d:60:08:e4:b2:e9:5f:10:aa:b8:81:38:0d:da:39:f4:2b: e5:1b:cb:66:44:43:2b:37:3c:c6:25:cb:a7:d0:38:59:8d:5a: ad:bf:86:33:28:6d:25:9a:e2:a2:7a:f2:21:68:8a:17:d8:7d: 0b:7c:cd:b2:ab:88:38:22:56:e0:f8:09:51:a7:06:95:29:b0: 45:63:29:2b:ff:6d:23:26:dc:9f:cc:61:b4:92:a9:3e:bb:bf: 0b:99:69:c9:33:31:68:d0:94:0b:6c:aa:87:36:62:aa:33:17: 24:24:5d:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcS4D24ibvYhF38QL/7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx YTA1NDcwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD Eyg1Njc0MjUzZTlmNTA2ODYzNmE2Y2YwMTMxOGM5ZThmM2YwZTNkZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk1XVFmk7e42kVhdcB2ygGYjhNNd Dnuwexf4nEkJVj3UaX/RxgZBN8b+rqPZuYtGYrhLpwDN2OQJD1LE9vgY1Q9G+pte be+HhuiJPbLrKzRZzSWmITzERdfOeEwy5ZxcbmqPfU/beA6MFa+txEtqzkvVl1DH SqIfMPj5l33ciaCCnOX11clmaaFxlEo4z9tE2pEPXjMXkBW7RTLKW6s4ZRbZI4a5 E8Llx/ksTXrXILfQZYJXrIf7DJOP9UPdXGCviCLObnHucFhxFm7G5ywL+pkYZG7v pffMTroTXxASr0UrtTLOAbsqaXM327mYXTXOG0leyfT/3TjJVbDPljLVYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ0JT6fUGhjamzwExjJ6PPw49/dMB8GA1UdIwQY MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMs/KS+n qF20qnoSDq78X7lmoaOvjM1eCyPeJZck4vFqv8kJ3YJy2PbvjR/ulunIyyzV+l2G G+E9bcR2s+w+r2S93Z2tfEgKTHfaWwtSVn/DimVnXRbfXGNwfy0WWFY2DundJomS Z5bdgkUW9e61RHNRxuPQC91ZpbPk3mSsoHkPSV5CNww53NfQnr3Fe3rtPJ1gCOSy 6V8QqriBOA3aOfQr5RvLZkRDKzc8xiXLp9A4WY1arb+GMyhtJZrionryIWiKF9h9 C3zNsquIOCJW4PgJUacGlSmwRWMpK/9tIybcn8xhtJKpPru/C5lpyTMxaNCUC2yq hzZiqjMXJCRdPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:33 2025 by rpki-client