This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json) Hash identifier: +PMs/UXomYGRKoiy0eokW5pZ1k7vCBiT1xz+wsfxyfQ= Subject key identifier: 4E:48:08:9B:F7:2F:90:0D:A6:E5:D8:42:32:9D:0C:34:C2:38:AB:C0 Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0 Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0 Certificate serial: 019AF209A13FF320B65EF1ED1683FE16B1AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft Manifest number: 0C18 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: cIQFjcjDvi3OIUNVn+r2xMV0f6hupFmEOI+ZcD9KMBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a1:3f:f3:20:b6:5e:f1:ed:16:83:fe:16:b1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=4e48089bf72f900da6e5d842329d0c34c238abc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:46:48:2f:92:8a:54:81:00:04:7b:8a:ce:82: b8:80:65:69:61:17:fc:b5:fb:a5:21:03:d2:f6:d0: af:65:ad:9c:55:48:cd:db:3b:df:12:97:62:cc:1c: 2b:3e:e3:a4:0f:b8:2a:e7:1f:55:ea:63:07:7d:18: ea:1c:5a:d2:06:2c:ad:a7:82:f4:40:8d:53:70:73: d7:5a:f7:fd:f6:7d:d2:57:01:3b:59:ab:e9:b2:7a: 72:52:01:55:b7:cb:a8:41:58:d0:8a:af:19:4b:ab: ff:77:f1:f0:9d:df:46:b0:0b:64:4b:8b:bf:13:81: 45:86:39:18:07:32:d5:e6:31:c6:37:53:99:a8:86: 33:c5:07:04:e3:5e:4f:52:72:a5:2f:79:d0:3f:99: e2:53:17:63:86:8d:e5:0c:bc:f2:0b:cb:84:fc:5d: d1:71:e5:ad:83:d8:08:fb:ad:b8:dd:48:e2:a8:30: 02:e6:2f:74:f0:46:04:53:d5:d4:3a:5c:69:00:72: e6:41:89:c4:a4:8e:c0:49:3a:50:a9:9f:f5:99:7f: b2:62:17:92:6e:76:e1:8f:4f:91:71:b0:08:de:66: dc:67:43:65:64:a5:05:5d:5d:b3:aa:be:af:d6:7a: 7d:bb:42:2f:eb:1a:8e:36:50:85:1b:c5:57:1f:8a: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:08:9B:F7:2F:90:0D:A6:E5:D8:42:32:9D:0C:34:C2:38:AB:C0 X509v3 Authority Key Identifier: keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:02:09:19:71:38:bf:ea:3d:90:a8:0a:df:c6:20:ee:34: 98:56:d8:00:37:67:e9:c2:49:ed:92:da:f3:a9:3e:8b:0d:fb: 5a:a1:8d:fa:2b:75:96:30:3f:c1:0b:67:40:bb:38:fa:49:df: f7:ae:9a:3c:d7:28:9d:19:20:85:3d:31:52:46:22:7f:1b:91: b4:f1:7f:56:a7:55:41:8b:5c:18:8b:29:f0:4d:99:00:79:88: 2d:fa:e7:a8:55:3c:a2:83:6a:50:cc:d9:9f:d0:12:15:4f:38: df:e4:bf:79:b8:6c:e8:7c:d4:22:0a:8c:3b:c2:7b:27:80:da: 20:ab:bb:79:b6:db:69:f8:fe:a5:d1:78:6d:5b:41:92:92:2b: 79:99:60:8f:23:c9:f2:f4:40:49:68:5a:a9:a0:1c:92:8f:4d: 11:59:51:8e:c7:31:9e:95:f3:90:df:ca:6f:1c:ae:be:16:9b: cb:9d:d2:87:bd:85:53:70:e2:13:fe:27:ff:47:4a:cb:ee:72: b2:b8:c0:ac:9a:79:ff:84:01:8f:31:e6:43:6d:dc:af:c1:d6: 08:dc:c5:54:e7:18:0e:bf:99:53:e4:08:02:46:18:9d:60:ff: a9:68:de:0d:8b:78:76:ae:96:89:16:15:4c:94:36:75:21:cb: e2:8d:14:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaE/8yC2XvHtFoP+FrGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjY5NDBiNmJhNDdmOGNjMTBhN2I0NzhlNDA1NjNjYmI4 YWI3ZjAwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg0ZTQ4MDg5YmY3MmY5MDBkYTZlNWQ4NDIzMjlkMGMzNGMyMzhhYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UZIL5KKVIEABHuKzoK4gGVpYRf8 tfulIQPS9tCvZa2cVUjN2zvfEpdizBwrPuOkD7gq5x9V6mMHfRjqHFrSBiytp4L0 QI1TcHPXWvf99n3SVwE7WavpsnpyUgFVt8uoQVjQiq8ZS6v/d/Hwnd9GsAtkS4u/ E4FFhjkYBzLV5jHGN1OZqIYzxQcE415PUnKlL3nQP5niUxdjho3lDLzyC8uE/F3R ceWtg9gI+6243UjiqDAC5i908EYEU9XUOlxpAHLmQYnEpI7ASTpQqZ/1mX+yYheS bnbhj0+RcbAI3mbcZ0NlZKUFXV2zqr6v1np9u0Iv6xqONlCFG8VXH4rk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5ICJv3L5ANpuXYQjKdDDTCOKvAMB8GA1UdIwQY MBaAFARmlAtrpH+MwQp7R45AVjy7irfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAt NTUyNjEwMjZmNTIzLzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAtNTUyNjEwMjZmNTIz LzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ0CCRlx OL/qPZCoCt/GIO40mFbYADdn6cJJ7ZLa86k+iw37WqGN+it1ljA/wQtnQLs4+knf 966aPNconRkghT0xUkYifxuRtPF/VqdVQYtcGIsp8E2ZAHmILfrnqFU8ooNqUMzZ n9ASFU843+S/ebhs6HzUIgqMO8J7J4DaIKu7ebbbafj+pdF4bVtBkpIreZlgjyPJ 8vRASWhaqaAcko9NEVlRjscxnpXzkN/Kbxyuvhaby53Sh72FU3DiE/4n/0dKy+5y srjArJp5/4QBjzHmQ23cr8HWCNzFVOcYDr+ZU+QIAkYYnWD/qWjeDYt4dq6WiRYV TJQ2dSHL4o0U3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:35 2025 by rpki-client