This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json) Hash identifier: G1VyUTT0gX+LJ+w3UhrFLv7zLa73T4RyVkqG+GdHU8I= Subject key identifier: BF:B4:0F:B8:25:B1:89:38:A1:53:FE:BE:06:29:3A:4B:98:0F:75:7D Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Certificate serial: 019B65430E5F582F70B75FCFB8F5EE3FD40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft Manifest number: 0A6E Signing time: Sun 28 Dec 2025 14:00:51 +0000 Manifest this update: Sun 28 Dec 2025 14:00:51 +0000 Manifest next update: Mon 29 Dec 2025 14:00:51 +0000 Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: 1QwBBI+6gy6Db15itE6TS/kETVQU3plLjyfbHDsFY7g=) 2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:0e:5f:58:2f:70:b7:5f:cf:b8:f5:ee:3f:d4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Validity Not Before: Dec 28 14:00:51 2025 GMT Not After : Dec 29 14:00:51 2025 GMT Subject: CN=bfb40fb825b18938a153febe06293a4b980f757d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:0a:8a:d2:84:3f:11:8b:44:eb:49:15:74: 7f:14:ff:f2:b9:29:4c:e2:3c:25:74:7b:84:bd:ea: b1:86:c6:28:35:7e:39:cb:13:1d:1f:a5:a1:9d:d6: 89:75:77:74:24:cb:54:06:f5:5f:3f:7e:0f:00:78: 8a:fe:01:36:73:8c:98:98:11:1f:f0:15:c8:b0:24: 88:e3:1f:90:c6:fc:21:dd:d5:51:bb:a8:a3:c3:12: 01:b9:28:45:1d:69:e3:b0:dd:ec:c5:57:92:a5:bd: 82:8f:b6:26:24:7e:c3:9b:e0:df:40:f3:24:4a:1a: 57:34:6c:f6:ef:3a:e3:d7:d0:0e:64:43:4c:e9:ea: f0:51:fa:90:14:c3:8a:32:0b:d7:0b:c1:d5:f8:c2: eb:c1:2e:95:77:dd:56:b0:27:f9:83:2c:35:7b:9b: 68:c6:54:3a:cb:3c:0a:7c:4f:1f:52:75:c3:fe:84: 88:98:d9:f1:b8:27:55:20:ed:80:fe:dc:f7:c2:12: 86:97:bb:db:ac:39:6f:02:43:84:de:d8:ae:c8:23: 40:fa:4e:b5:f3:24:0a:e3:7f:31:a5:2f:2d:7a:03: 0a:8c:ef:4e:4d:ec:14:17:11:5c:a5:13:1f:d3:95: ee:21:9d:36:ca:46:ef:8c:2a:d6:5c:2a:22:0b:40: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:0F:B8:25:B1:89:38:A1:53:FE:BE:06:29:3A:4B:98:0F:75:7D X509v3 Authority Key Identifier: keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:da:e2:87:73:bc:da:c1:0c:2e:9e:4f:fb:fc:31:bf:7d: d3:e4:c3:d5:ba:84:4a:6f:37:a2:f7:a9:c7:bb:52:8a:18:66: ca:51:a7:a6:ac:a8:1e:3d:41:a4:a0:f0:0f:2f:da:d0:17:7e: 38:9a:92:97:c6:12:e1:14:e0:2f:0a:ba:d5:7e:f0:fb:6b:8f: 87:65:03:07:04:de:00:a2:ef:56:0f:24:7f:19:5a:a9:95:76: 8b:31:26:83:a0:57:03:da:38:04:7d:e5:f3:3a:64:20:1e:23: dd:55:07:35:21:9e:ea:d0:02:9b:08:7e:f6:2d:2a:d0:30:0e: 98:8a:eb:e1:cf:f0:34:b0:d5:62:07:d6:4e:a1:7f:06:51:07: b4:46:36:2f:60:81:da:6d:2b:7d:c2:b9:16:6d:6a:c6:86:43: f6:81:0d:c5:18:17:7d:ec:fb:12:c5:ce:6b:87:09:ae:f2:ca: 39:78:90:f2:c2:cf:45:58:89:92:0c:ac:a3:fe:a8:d0:92:c9: a0:ac:a4:bb:d6:28:f8:66:7d:c3:4b:b8:69:fc:80:2b:16:55: 73:03:6a:7d:ab:a2:ee:52:77:5a:67:83:62:6e:be:17:d4:11: e4:2b:15:cf:ed:e6:c2:2f:48:c7:79:70:a6:e5:f8:4e:43:42: 66:7a:3a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQw5fWC9wt1/PuPXuP9QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0 MGNiM2UwHhcNMjUxMjI4MTQwMDUxWhcNMjUxMjI5MTQwMDUxWjAzMTEwLwYDVQQD EyhiZmI0MGZiODI1YjE4OTM4YTE1M2ZlYmUwNjI5M2E0Yjk4MGY3NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1kKitKEPxGLROtJFXR/FP/yuSlM 4jwldHuEveqxhsYoNX45yxMdH6WhndaJdXd0JMtUBvVfP34PAHiK/gE2c4yYmBEf 8BXIsCSI4x+Qxvwh3dVRu6ijwxIBuShFHWnjsN3sxVeSpb2Cj7YmJH7Dm+DfQPMk ShpXNGz27zrj19AOZENM6erwUfqQFMOKMgvXC8HV+MLrwS6Vd91WsCf5gyw1e5to xlQ6yzwKfE8fUnXD/oSImNnxuCdVIO2A/tz3whKGl7vbrDlvAkOE3tiuyCNA+k61 8yQK438xpS8tegMKjO9OTewUFxFcpRMf05XuIZ02ykbvjCrWXCoiC0DRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+0D7glsYk4oVP+vgYpOkuYD3V9MB8GA1UdIwQY MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt MGVlMmVhN2Q0ODg0LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0 LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1na4odz vNrBDC6eT/v8Mb990+TD1bqESm83ovepx7tSihhmylGnpqyoHj1BpKDwDy/a0Bd+ OJqSl8YS4RTgLwq61X7w+2uPh2UDBwTeAKLvVg8kfxlaqZV2izEmg6BXA9o4BH3l 8zpkIB4j3VUHNSGe6tACmwh+9i0q0DAOmIrr4c/wNLDVYgfWTqF/BlEHtEY2L2CB 2m0rfcK5Fm1qxoZD9oENxRgXfez7EsXOa4cJrvLKOXiQ8sLPRViJkgyso/6o0JLJ oKyku9Yo+GZ9w0u4afyAKxZVcwNqfaui7lJ3WmeDYm6+F9QR5CsVz+3mwi9Ix3lw puX4TkNCZno6iw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:43:43 2025 by rpki-client