This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json) Hash identifier: OLzT8Q8bGpe4xzUU0PHIydO/yCEseq8P7qm5ZN9BC0I= Subject key identifier: 72:8D:2D:45:B0:8C:F0:8A:FE:DE:BF:81:05:3C:90:07:5D:B9:92:79 Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1 Certificate serial: 019B4F29485FB35D08EFFBC5D22E27E51847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft Manifest number: 1187 Signing time: Wed 24 Dec 2025 07:01:04 +0000 Manifest this update: Wed 24 Dec 2025 07:01:04 +0000 Manifest next update: Thu 25 Dec 2025 07:01:04 +0000 Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: kI8/tOdgUbe+XR2R/Z5XpZxNQLlV/MVR9yQRCvk9K3Q=) 2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:48:5f:b3:5d:08:ef:fb:c5:d2:2e:27:e5:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1 Validity Not Before: Dec 24 07:01:04 2025 GMT Not After : Dec 25 07:01:04 2025 GMT Subject: CN=728d2d45b08cf08afedebf81053c90075db99279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:e7:79:4d:21:5e:94:b0:5d:33:8f:26:0d: 0e:7d:12:5b:33:1f:67:08:43:88:f0:bb:06:f6:09: 50:e2:db:00:2c:29:15:5b:bb:51:fd:3f:4d:39:6c: a2:99:00:92:74:23:5b:16:d5:f7:e0:a6:39:b3:9c: 74:5b:10:f8:a8:98:65:25:22:ca:57:a3:2f:a0:66: d9:6c:50:aa:dc:61:0b:c6:cd:47:e8:9f:7a:13:10: 2d:7d:90:86:95:85:e5:1a:ce:ce:e8:1f:4a:04:72: 4d:10:0c:2a:a7:69:dc:c8:5b:2c:44:cd:62:ad:46: 89:8c:95:bf:2f:ba:63:11:d4:57:49:7c:79:8f:cd: 9e:dc:a5:52:98:99:0e:ad:81:d0:7a:3d:b4:8d:e5: 05:87:a4:25:87:d8:2a:75:2d:44:bc:31:b3:fa:d3: 6e:52:d7:4c:26:84:a5:7c:ee:2a:2d:ef:cf:06:86: 1c:98:e8:28:5d:45:58:1f:24:8e:c2:5d:62:57:75: 54:c3:ee:ef:01:b5:07:76:b6:15:ce:6b:89:a5:7c: 0d:c3:1c:39:19:82:57:a2:37:99:c6:3c:db:41:3f: 19:d3:c9:64:ee:03:02:c0:58:3c:a0:09:b7:ac:6e: 96:54:1d:5c:64:ee:91:a9:f5:ef:5d:4e:6a:ec:33: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:2D:45:B0:8C:F0:8A:FE:DE:BF:81:05:3C:90:07:5D:B9:92:79 X509v3 Authority Key Identifier: keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cb:5b:32:e7:36:4b:34:1c:d9:73:5e:6b:2e:20:78:34:97: 22:76:e1:a5:2d:23:37:53:55:94:17:8e:00:38:82:23:c9:98: e1:e4:42:94:7f:05:a8:93:27:7b:ad:34:4c:68:27:d3:e5:04: 1d:13:9e:c4:67:6b:6a:91:a2:4d:0c:31:3f:b4:a6:92:b7:76: ba:c1:01:a6:f1:4f:75:c2:d6:42:ad:33:d1:69:3f:b6:79:fe: 78:6e:5d:9a:77:20:76:72:fb:6b:f0:60:6f:70:57:b4:16:26: 8d:ae:d2:61:5c:e1:f1:d4:41:2e:85:7b:42:42:39:4b:00:28: 85:78:aa:c3:aa:6a:0d:fb:0d:8f:92:65:7e:d2:22:d8:7c:56: 6f:9c:06:81:c2:93:b3:db:23:ca:8c:4d:82:df:c8:02:13:c8: 0c:fc:10:04:e7:57:12:26:cd:1b:c6:88:37:cb:3d:9e:ee:52: ac:a6:80:ac:d1:7a:59:36:a5:6f:0a:5e:94:be:3c:bc:95:fb: 95:f3:58:17:93:d2:c3:c5:30:47:96:6f:23:d4:5a:10:9c:13: 57:d9:f5:9f:40:0e:95:65:97:c4:2c:c8:33:03:0e:0c:e1:16: b2:f5:22:77:d4:f7:3b:d1:b0:8e:10:c8:3a:92:11:fe:7f:37: 35:af:f4:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKUhfs10I7/vF0i4n5RhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4 Y2ZlZjEwHhcNMjUxMjI0MDcwMTA0WhcNMjUxMjI1MDcwMTA0WjAzMTEwLwYDVQQD Eyg3MjhkMmQ0NWIwOGNmMDhhZmVkZWJmODEwNTNjOTAwNzVkYjk5Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ofneU0hXpSwXTOPJg0OfRJbMx9n CEOI8LsG9glQ4tsALCkVW7tR/T9NOWyimQCSdCNbFtX34KY5s5x0WxD4qJhlJSLK V6MvoGbZbFCq3GELxs1H6J96ExAtfZCGlYXlGs7O6B9KBHJNEAwqp2ncyFssRM1i rUaJjJW/L7pjEdRXSXx5j82e3KVSmJkOrYHQej20jeUFh6Qlh9gqdS1EvDGz+tNu UtdMJoSlfO4qLe/PBoYcmOgoXUVYHySOwl1iV3VUw+7vAbUHdrYVzmuJpXwNwxw5 GYJXojeZxjzbQT8Z08lk7gMCwFg8oAm3rG6WVB1cZO6RqfXvXU5q7DMtPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKNLUWwjPCK/t6/gQU8kAdduZJ5MB8GA1UdIwQY MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2 LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMtbMuc2 SzQc2XNeay4geDSXInbhpS0jN1NVlBeOADiCI8mY4eRClH8FqJMne600TGgn0+UE HROexGdrapGiTQwxP7Smkrd2usEBpvFPdcLWQq0z0Wk/tnn+eG5dmncgdnL7a/Bg b3BXtBYmja7SYVzh8dRBLoV7QkI5SwAohXiqw6pqDfsNj5JlftIi2HxWb5wGgcKT s9sjyoxNgt/IAhPIDPwQBOdXEibNG8aIN8s9nu5SrKaArNF6WTalbwpelL48vJX7 lfNYF5PSw8UwR5ZvI9RaEJwTV9n1n0AOlWWXxCzIMwMODOEWsvUid9T3O9GwjhDI OpIR/n83Na/0iw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:59:59 2025 by rpki-client