This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json) Hash identifier: BUXRPYyIrsUSlPU4oIP9jYv+RSwsq6laXFY24aS+Qh8= Subject key identifier: 4B:15:37:05:DF:46:E1:28:84:64:47:89:50:74:9A:A4:24:36:6E:C6 Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Certificate serial: 019B30E8C91A173B26F189EAAC46F81D22EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft Manifest number: 1471 Signing time: Thu 18 Dec 2025 10:02:00 +0000 Manifest this update: Thu 18 Dec 2025 10:02:00 +0000 Manifest next update: Fri 19 Dec 2025 10:02:00 +0000 Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 3OrLoheKxtm87F8D217m8vALfHTF8shM1dbLCo5UJs0=) 2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:c9:1a:17:3b:26:f1:89:ea:ac:46:f8:1d:22:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Validity Not Before: Dec 18 10:02:00 2025 GMT Not After : Dec 19 10:02:00 2025 GMT Subject: CN=4b153705df46e1288464478950749aa424366ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:0d:8c:80:9e:a0:49:ae:37:d2:48:94:ac: 02:12:33:c4:8f:af:d3:eb:ff:41:51:f9:39:85:58: ed:9a:21:d8:8c:6f:d2:c3:69:e1:2e:a9:11:34:66: 71:53:e9:a6:c0:70:7c:d4:91:74:ef:f9:7e:22:c1: d0:3a:98:bf:1e:8d:07:41:9a:24:9f:5b:a3:3d:38: 61:f4:64:aa:52:8b:4c:7f:b6:aa:a5:d8:42:31:88: 45:d0:eb:39:b2:f9:98:1b:b1:f4:06:d4:12:d6:16: 2c:37:76:ef:36:47:09:6b:06:81:29:83:98:bb:b5: a1:c3:8b:10:1d:5f:4d:19:bc:39:e3:24:5f:91:54: 45:b6:21:83:bb:74:13:8e:05:2d:6c:99:60:c3:43: fb:72:2d:e7:a9:af:8f:e4:87:e4:84:f9:cf:92:92: 26:20:0d:83:bf:56:67:d4:88:e3:e2:38:f2:21:2a: 57:81:15:eb:62:3b:2d:16:fc:74:d9:cf:50:7b:99: 41:ce:83:9c:66:76:69:ee:68:a0:e8:34:9a:52:b9: 14:3f:2a:a3:e1:1b:0b:fe:6e:95:d1:4a:5c:87:74: 53:e6:2a:cf:e5:48:8e:2c:b3:66:75:1d:65:01:a9: 03:c1:30:52:c5:69:74:2d:13:22:24:e4:b2:90:56: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:37:05:DF:46:E1:28:84:64:47:89:50:74:9A:A4:24:36:6E:C6 X509v3 Authority Key Identifier: keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:41:66:e4:02:24:2c:2e:06:ba:fe:50:2a:6c:c7:7a:5d:aa: 1c:90:bc:ca:de:5b:39:5d:84:51:8c:0f:4f:67:b5:56:e0:9e: 61:e4:da:8d:04:d7:97:e4:aa:35:df:a0:d1:d3:38:07:e0:01: 4d:e8:f0:ee:b5:3a:b0:03:21:30:6e:2a:31:17:71:60:52:93: f7:3f:da:df:3e:6e:25:39:d3:91:50:6d:28:ce:a3:68:70:68: ce:d2:a1:6e:27:c6:45:39:2b:6c:2d:d2:19:e0:c5:c2:86:ee: f9:74:0a:79:26:9f:cf:b1:ad:24:08:ec:ad:b1:73:0a:62:fc: 8f:e0:70:8c:7c:50:f0:1d:bc:58:76:5e:d4:19:56:76:a2:16: 55:b2:0e:60:94:5e:79:c3:ab:da:07:aa:9e:21:03:88:4f:6f: fe:1a:0d:5f:e1:21:a1:e8:5a:13:33:76:5a:b5:62:32:8d:98: ca:04:84:00:76:24:34:e4:6d:f8:d6:c6:4e:81:f9:cf:83:c7: ea:cd:11:f6:8d:31:88:6c:11:43:13:cf:ec:da:3d:07:d2:a8: 6a:06:c7:35:60:05:d6:f2:5f:ce:66:68:0b:7a:13:e1:7b:af: 89:86:17:de:d1:fd:10:1f:39:1c:f6:2d:fe:77:20:ce:55:d6: 0e:2d:20:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6MkaFzsm8YnqrEb4HSLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx YTA1NDcwHhcNMjUxMjE4MTAwMjAwWhcNMjUxMjE5MTAwMjAwWjAzMTEwLwYDVQQD Eyg0YjE1MzcwNWRmNDZlMTI4ODQ2NDQ3ODk1MDc0OWFhNDI0MzY2ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk4NjICeoEmuN9JIlKwCEjPEj6/T 6/9BUfk5hVjtmiHYjG/Sw2nhLqkRNGZxU+mmwHB81JF07/l+IsHQOpi/Ho0HQZok n1ujPThh9GSqUotMf7aqpdhCMYhF0Os5svmYG7H0BtQS1hYsN3bvNkcJawaBKYOY u7Whw4sQHV9NGbw54yRfkVRFtiGDu3QTjgUtbJlgw0P7ci3nqa+P5IfkhPnPkpIm IA2Dv1Zn1Ijj4jjyISpXgRXrYjstFvx02c9Qe5lBzoOcZnZp7mig6DSaUrkUPyqj 4RsL/m6V0Upch3RT5irP5UiOLLNmdR1lAakDwTBSxWl0LRMiJOSykFYajwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsVNwXfRuEohGRHiVB0mqQkNm7GMB8GA1UdIwQY MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkFm5AIk LC4Guv5QKmzHel2qHJC8yt5bOV2EUYwPT2e1VuCeYeTajQTXl+SqNd+g0dM4B+AB Tejw7rU6sAMhMG4qMRdxYFKT9z/a3z5uJTnTkVBtKM6jaHBoztKhbifGRTkrbC3S GeDFwobu+XQKeSafz7GtJAjsrbFzCmL8j+BwjHxQ8B28WHZe1BlWdqIWVbIOYJRe ecOr2geqniEDiE9v/hoNX+EhoehaEzN2WrViMo2YygSEAHYkNORt+NbGToH5z4PH 6s0R9o0xiGwRQxPP7No9B9KoagbHNWAF1vJfzmZoC3oT4XuviYYX3tH9EB85HPYt /ncgzlXWDi0gHQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:14 2025 by rpki-client