This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json) Hash identifier: tJ35pag2sL8JGbsL5l/sqv/K2/ReW4DtKC+bkLv44Ko= Subject key identifier: 70:20:BB:24:A0:75:8C:65:30:8C:0C:2A:A0:8A:40:B6:18:4D:E2:8E Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Certificate serial: 019B4A71B8996CA3E871341EA3A2BD27B78B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft Manifest number: 0314 Signing time: Tue 23 Dec 2025 09:02:05 +0000 Manifest this update: Tue 23 Dec 2025 09:02:05 +0000 Manifest next update: Wed 24 Dec 2025 09:02:05 +0000 Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: GbTJjdvP6t7PUkd1T952jfgjx0Xu84oNX58DJtNvQjI=) 2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:b8:99:6c:a3:e8:71:34:1e:a3:a2:bd:27:b7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Validity Not Before: Dec 23 09:02:05 2025 GMT Not After : Dec 24 09:02:05 2025 GMT Subject: CN=7020bb24a0758c65308c0c2aa08a40b6184de28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:2e:31:89:a2:7b:1d:ae:64:d1:85:ba:04: a2:02:44:36:05:65:b4:62:a3:2b:2e:83:5f:32:3e: 75:ac:2e:63:1f:fa:9f:76:20:be:c8:72:0d:d5:4b: 8d:08:f2:77:d2:b7:a6:5d:b0:dc:9b:e1:05:3f:f7: 40:ef:44:ba:f0:9a:b0:b3:18:2a:7e:ab:13:9d:ee: a4:8e:7b:8a:7c:49:3e:29:d0:d8:3b:d2:7e:28:6f: 06:1e:ca:ad:5f:42:1c:e2:68:3d:fb:3d:c6:1e:29: a7:d5:29:08:0f:b4:38:cd:e7:7c:c6:59:cf:6d:6c: 97:ff:8a:d0:00:ab:68:39:c7:8a:7b:b5:f5:4c:9e: 37:c4:be:70:4b:95:08:ef:6b:ef:f1:57:74:23:2c: 3a:42:15:ab:c6:07:12:95:02:11:fc:2b:09:36:28: 37:ba:66:64:19:5f:1d:9f:d4:9e:8f:e0:9e:83:b0: ec:53:3b:c2:ed:ac:09:0e:79:cb:56:af:bd:c0:61: 46:9e:4c:58:f8:3c:f4:79:a1:2a:c7:a0:d5:9b:c7: 5f:78:b2:c7:da:24:06:5d:28:b5:c5:9d:e8:68:d8: 5a:6c:1c:8f:f3:3b:e9:6a:c2:87:88:97:2f:00:a9: fa:53:91:3c:34:3a:b9:b5:9d:60:86:4b:3d:58:b6: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:BB:24:A0:75:8C:65:30:8C:0C:2A:A0:8A:40:B6:18:4D:E2:8E X509v3 Authority Key Identifier: keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:13:df:69:82:aa:5c:8f:44:30:e8:7d:a8:d3:f6:13:e7:c3: ec:44:17:a6:27:7a:e7:7f:47:87:2f:a2:e8:b6:95:a6:39:f4: 11:05:c9:56:03:93:0d:88:2f:75:b0:37:ea:86:dd:c7:e4:92: 3a:07:0f:6e:c4:55:81:da:84:c1:2d:97:65:33:fc:15:91:14: 05:db:b5:d0:dd:1c:0d:5b:16:a9:ad:9d:0a:35:be:1d:d2:2c: 08:cb:bf:84:4b:ed:42:39:fc:13:d2:3b:62:b8:03:8a:cc:ff: 9a:4d:b1:7b:38:25:d1:9b:ef:e3:14:16:0e:ab:5a:eb:8b:b7: a2:f6:83:76:7b:dd:70:bb:20:74:02:3e:05:b9:f2:bc:f1:23: 35:12:82:2e:4a:6f:6d:9d:42:76:0d:95:e7:ef:f6:3d:12:af: 15:8e:08:d7:5e:88:98:22:8c:5f:f4:a1:31:45:db:c5:74:73: ee:f0:0c:04:11:7e:05:05:8f:45:99:0e:71:4a:24:87:c2:1b: 29:01:fa:00:9f:36:04:cf:a5:cd:ca:13:93:d4:42:70:b1:24: ca:04:fa:17:70:64:57:5e:77:89:8a:c3:2d:f6:48:90:6f:51: c1:a5:d0:f7:99:d4:9a:fa:96:69:b0:d3:f2:76:3b:5a:0d:dc: 33:0b:18:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcbiZbKPocTQeo6K9J7eLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy YTJjMjcwHhcNMjUxMjIzMDkwMjA1WhcNMjUxMjI0MDkwMjA1WjAzMTEwLwYDVQQD Eyg3MDIwYmIyNGEwNzU4YzY1MzA4YzBjMmFhMDhhNDBiNjE4NGRlMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8IuMYmiex2uZNGFugSiAkQ2BWW0 YqMrLoNfMj51rC5jH/qfdiC+yHIN1UuNCPJ30remXbDcm+EFP/dA70S68Jqwsxgq fqsTne6kjnuKfEk+KdDYO9J+KG8GHsqtX0Ic4mg9+z3GHimn1SkID7Q4zed8xlnP bWyX/4rQAKtoOceKe7X1TJ43xL5wS5UI72vv8Vd0Iyw6QhWrxgcSlQIR/CsJNig3 umZkGV8dn9Sej+Ceg7DsUzvC7awJDnnLVq+9wGFGnkxY+Dz0eaEqx6DVm8dfeLLH 2iQGXSi1xZ3oaNhabByP8zvpasKHiJcvAKn6U5E8NDq5tZ1ghks9WLb9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAguySgdYxlMIwMKqCKQLYYTeKOMB8GA1UdIwQY MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4 LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxPfaYKq XI9EMOh9qNP2E+fD7EQXpid6539Hhy+i6LaVpjn0EQXJVgOTDYgvdbA36obdx+SS OgcPbsRVgdqEwS2XZTP8FZEUBdu10N0cDVsWqa2dCjW+HdIsCMu/hEvtQjn8E9I7 YrgDisz/mk2xezgl0Zvv4xQWDqta64u3ovaDdnvdcLsgdAI+BbnyvPEjNRKCLkpv bZ1Cdg2V5+/2PRKvFY4I116ImCKMX/ShMUXbxXRz7vAMBBF+BQWPRZkOcUokh8Ib KQH6AJ82BM+lzcoTk9RCcLEkygT6F3BkV153iYrDLfZIkG9RwaXQ95nUmvqWabDT 8nY7Wg3cMwsYbQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:45:11 2025 by rpki-client