This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json) Hash identifier: 4bgPJLSloTVsTvTHO5EX6/O0x+hS7Ar84T4nUpYgpe4= Subject key identifier: E0:AE:83:DC:1A:34:E1:C7:80:CD:BF:01:86:0A:E6:0A:76:06:0F:18 Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d Certificate serial: 019B3AFD9B7B01F3A645FB1D45AA0EDECFC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft Manifest number: 144A Signing time: Sat 20 Dec 2025 09:00:57 +0000 Manifest this update: Sat 20 Dec 2025 09:00:57 +0000 Manifest next update: Sun 21 Dec 2025 09:00:57 +0000 Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: bqj9P77IdlLFLrRLwXnLPyW0faYII8LzEWZoR32f8aY=) 2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=) 3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:9b:7b:01:f3:a6:45:fb:1d:45:aa:0e:de:cf:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d Validity Not Before: Dec 20 09:00:57 2025 GMT Not After : Dec 21 09:00:57 2025 GMT Subject: CN=e0ae83dc1a34e1c780cdbf01860ae60a76060f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:9e:bf:1d:1e:b1:d9:66:f3:81:b7:a0:b4: c1:f4:45:df:5f:ec:d3:cb:43:58:be:1b:81:a7:1b: cf:9d:4d:f7:e2:27:7f:ca:0a:c0:86:15:d4:e6:5c: 3b:56:87:bb:fd:7a:75:62:2f:5e:76:e0:e4:b6:66: 33:8f:fb:3c:17:ba:ff:b2:c6:e1:c8:ea:c5:24:20: 7b:c0:a6:af:54:13:ed:17:f3:34:c3:d3:ab:37:e6: 4d:75:db:5a:f6:d3:4d:c4:1f:98:b3:71:82:49:6d: e3:b7:14:56:d9:71:dc:d4:f2:a4:8c:59:eb:47:10: 07:7d:8f:6b:21:d3:75:89:25:03:81:c4:dc:f5:f4: a7:d8:50:ba:47:54:62:91:32:a9:8d:f2:09:67:72: 49:27:51:ed:67:29:22:08:fd:74:2d:4b:fd:42:88: 17:de:1e:2a:e9:8a:08:67:34:f3:27:c8:ae:14:f9: 00:c2:0f:18:2b:e6:db:1b:a9:47:e8:48:c5:ce:57: 7c:bd:66:a7:1f:cf:b4:44:4f:b0:26:0b:6e:dc:4e: b4:05:a9:01:45:64:81:ea:f9:f1:f7:2f:00:42:e4: 6a:6f:35:8f:33:9f:42:5e:ad:48:9e:db:8e:31:be: 3b:41:49:b3:c1:9b:31:14:d1:16:98:7d:0b:9e:35: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AE:83:DC:1A:34:E1:C7:80:CD:BF:01:86:0A:E6:0A:76:06:0F:18 X509v3 Authority Key Identifier: keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:65:80:df:6e:df:96:78:16:41:3f:a3:93:93:3c:e0:c2:c7: bd:42:5f:6c:54:2e:68:49:cf:5f:e7:e1:ab:e2:ec:de:e0:5e: d2:64:6d:d3:d3:a2:71:f4:c1:53:d7:7c:b1:2b:8e:7b:a9:73: 25:27:65:1b:0f:70:dc:ce:86:bf:06:3f:e1:b0:e2:69:c4:24: dd:58:01:0e:a5:b7:16:99:c9:c2:64:e4:4b:a5:35:82:09:56: 1b:b3:8c:62:a9:1b:7a:bc:c1:b3:5c:b1:3b:a3:51:b9:5e:dd: 9a:f7:cb:a5:06:19:c6:73:d3:f6:49:f0:33:35:57:c2:1f:69: 6a:30:e2:24:84:bb:03:7a:1a:21:77:6b:bc:d1:d1:92:c5:07: 1d:67:06:b5:0c:80:93:e2:d4:58:bb:93:9d:64:34:71:c2:82: 34:c9:86:fc:34:4a:fe:74:30:33:ae:60:1f:c6:25:93:74:12: 40:06:98:5b:ed:db:d7:d8:1c:00:ec:fe:06:c7:32:09:23:03: 75:fe:55:31:b5:0b:d8:14:b3:3c:24:aa:e6:27:e8:98:01:e0: 72:9e:05:f7:9b:dd:c0:a2:b8:c4:29:ed:c5:5f:43:27:c0:67: 7d:bf:94:18:65:18:cf:53:17:8a:5f:7a:76:ff:05:69:65:6f: f3:de:97:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Zt7AfOmRfsdRaoO3s/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3 NTY3NGQwHhcNMjUxMjIwMDkwMDU3WhcNMjUxMjIxMDkwMDU3WjAzMTEwLwYDVQQD EyhlMGFlODNkYzFhMzRlMWM3ODBjZGJmMDE4NjBhZTYwYTc2MDYwZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdaevx0esdlm84G3oLTB9EXfX+zT y0NYvhuBpxvPnU334id/ygrAhhXU5lw7Voe7/Xp1Yi9eduDktmYzj/s8F7r/ssbh yOrFJCB7wKavVBPtF/M0w9OrN+ZNddta9tNNxB+Ys3GCSW3jtxRW2XHc1PKkjFnr RxAHfY9rIdN1iSUDgcTc9fSn2FC6R1RikTKpjfIJZ3JJJ1HtZykiCP10LUv9QogX 3h4q6YoIZzTzJ8iuFPkAwg8YK+bbG6lH6EjFzld8vWanH8+0RE+wJgtu3E60BakB RWSB6vnx9y8AQuRqbzWPM59CXq1IntuOMb47QUmzwZsxFNEWmH0LnjWMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCug9waNOHHgM2/AYYK5gp2Bg8YMB8GA1UdIwQY MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt MDkzOTYxZDM4Yzg2LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2 LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGWA327f lngWQT+jk5M84MLHvUJfbFQuaEnPX+fhq+Ls3uBe0mRt09OicfTBU9d8sSuOe6lz JSdlGw9w3M6GvwY/4bDiacQk3VgBDqW3FpnJwmTkS6U1gglWG7OMYqkberzBs1yx O6NRuV7dmvfLpQYZxnPT9knwMzVXwh9pajDiJIS7A3oaIXdrvNHRksUHHWcGtQyA k+LUWLuTnWQ0ccKCNMmG/DRK/nQwM65gH8Ylk3QSQAaYW+3b19gcAOz+BscyCSMD df5VMbUL2BSzPCSq5ifomAHgcp4F95vdwKK4xCntxV9DJ8Bnfb+UGGUYz1MXil96 dv8FaWVv896XtA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:45:04 2025 by rpki-client