This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File:                     BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier:          g5pbRqnjtDEGNJ0n+HVtCDvDsszzBjcBSa8qcnqNREk=
Subject key identifier:   6F:32:17:23:3C:A1:DC:DD:08:BF:46:1A:A8:9E:13:AF:08:12:D5:40
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer:       /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial:       019AF209370F46C272FA30BFD80A98A24702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number:          071F
Signing time:             Sat 06 Dec 2025 05:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:21 +0000
Files and hashes:         1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
                          2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: h+AI3T9a+EpnQ9dDANq3QJwWwYfkFYfHD6Y2t49LljU=)
                          3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:37:0f:46:c2:72:fa:30:bf:d8:0a:98:a2:47:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
        Validity
            Not Before: Dec  6 05:01:21 2025 GMT
            Not After : Dec  7 05:01:21 2025 GMT
        Subject: CN=6f3217233ca1dcdd08bf461aa89e13af0812d540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:55:d3:76:c3:54:27:4a:8d:9a:a5:6e:a6:
                    7c:15:c7:d3:b7:18:9a:f9:af:30:36:89:31:6c:89:
                    4a:93:da:fe:06:f5:a8:3a:86:c3:bd:6b:73:e9:d1:
                    5d:2d:68:b8:8f:6c:59:15:65:d4:05:be:52:f4:7e:
                    b6:a6:a4:fd:d2:16:94:98:d5:5f:d6:9b:0b:fa:7e:
                    07:a9:8a:f7:89:7b:8e:b4:3a:16:b7:2d:32:8c:5c:
                    52:ff:02:5e:a0:3f:0e:f5:be:e1:55:1b:73:8f:58:
                    bf:23:ad:11:25:5b:61:0f:d0:4f:d1:74:1d:39:ab:
                    ff:e2:f0:e0:9f:cd:84:c3:e2:de:2c:d4:d7:5a:d8:
                    be:25:d5:25:fa:f3:77:99:8b:b8:5a:f0:53:7a:00:
                    e7:78:e9:16:cf:98:01:5d:5e:5e:61:b0:c9:a3:ca:
                    62:c1:d7:3b:71:bd:53:b1:ce:c0:e3:6a:b3:cf:29:
                    fa:ca:17:f9:78:56:fe:1e:60:cd:b7:9d:fd:c6:4b:
                    75:d7:95:65:97:1f:fc:c4:76:f1:3c:49:2c:75:60:
                    80:15:d4:da:15:22:a6:04:16:26:0d:c3:b2:e1:7c:
                    fd:58:b2:0e:42:a7:65:e4:08:9c:ab:39:5e:70:a1:
                    bd:90:d3:a0:64:6c:1d:3f:f1:3c:7a:0f:c9:6d:da:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:32:17:23:3C:A1:DC:DD:08:BF:46:1A:A8:9E:13:AF:08:12:D5:40
            X509v3 Authority Key Identifier:
                keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:71:95:5e:49:80:f2:0c:6a:7e:20:7c:c4:cb:50:1b:bc:06:
         ac:ab:01:80:97:62:c5:15:a2:5f:99:8a:d4:59:6e:c2:99:36:
         c1:13:31:35:be:07:ba:b9:da:25:ed:af:9d:73:5e:75:ac:89:
         ec:3d:42:95:ae:8e:09:00:1b:16:22:77:d9:67:98:e3:28:d1:
         9d:ed:74:d9:1a:63:ea:44:ee:27:0d:02:17:9f:b5:ac:3c:35:
         ce:2f:f6:c9:cd:a9:4b:3d:cf:69:d6:0f:92:da:ef:df:d2:31:
         6b:7a:bf:44:f1:fe:bf:66:7c:2b:de:38:02:5c:86:15:8c:dc:
         03:de:d8:45:24:23:09:61:72:94:96:85:92:fe:65:8e:65:fd:
         31:63:94:06:9e:ca:1b:03:c5:3c:e4:de:c7:3d:3e:b1:ea:3a:
         b5:0a:51:b0:a7:e2:35:4c:fc:90:b2:49:03:c1:27:20:ac:33:
         45:03:da:27:cd:28:49:5b:d0:be:0a:28:60:59:87:ff:91:14:
         53:a6:c8:f4:f3:c4:55:48:38:5e:ff:12:f8:1e:42:22:34:75:
         3a:b2:4e:dc:f7:d3:c4:53:fb:a7:bb:b1:89:40:58:a2:d1:c0:
         76:b4:dd:ec:21:2d:31:7a:6b:f5:a6:51:c7:47:78:36:9d:6e:
         27:42:0d:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCTcPRsJy+jC/2AqYokcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzgxYzgwOTc0MzdjZDE3OWYzMTkxODNjMDI4MmVhNmNk
MWNhNTEwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD
Eyg2ZjMyMTcyMzNjYTFkY2RkMDhiZjQ2MWFhODllMTNhZjA4MTJkNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgZV03bDVCdKjZqlbqZ8FcfTtxia
+a8wNokxbIlKk9r+BvWoOobDvWtz6dFdLWi4j2xZFWXUBb5S9H62pqT90haUmNVf
1psL+n4HqYr3iXuOtDoWty0yjFxS/wJeoD8O9b7hVRtzj1i/I60RJVthD9BP0XQd
Oav/4vDgn82Ew+LeLNTXWti+JdUl+vN3mYu4WvBTegDneOkWz5gBXV5eYbDJo8pi
wdc7cb1Tsc7A42qzzyn6yhf5eFb+HmDNt539xkt115Vllx/8xHbxPEksdWCAFdTa
FSKmBBYmDcOy4Xz9WLIOQqdl5AicqzlecKG9kNOgZGwdP/E8eg/Jbdo0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8yFyM8odzdCL9GGqieE68IEtVAMB8GA1UdIwQY
MBaAFAXIHICXQ3zRefMZGDwCgups0cpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQt
OTc0ZmQyMzliMGVkLzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQtOTc0ZmQyMzliMGVk
LzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3GVXkmA
8gxqfiB8xMtQG7wGrKsBgJdixRWiX5mK1Fluwpk2wRMxNb4HurnaJe2vnXNedayJ
7D1Cla6OCQAbFiJ32WeY4yjRne102Rpj6kTuJw0CF5+1rDw1zi/2yc2pSz3PadYP
ktrv39Ixa3q/RPH+v2Z8K944AlyGFYzcA97YRSQjCWFylJaFkv5ljmX9MWOUBp7K
GwPFPOTexz0+seo6tQpRsKfiNUz8kLJJA8EnIKwzRQPaJ80oSVvQvgooYFmH/5EU
U6bI9PPEVUg4Xv8S+B5CIjR1OrJO3PfTxFP7p7uxiUBYotHAdrTd7CEtMXpr9aZR
x0d4Np1uJ0INsQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:25 2025 by rpki-client