This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json) Hash identifier: DuJE7mBhuX9x09cIfnWI3Qr/EgSnuW5aViHBEynbQDk= Subject key identifier: 35:20:78:4A:12:97:C9:B9:27:DE:C5:77:BE:FB:16:99:35:DC:00:48 Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6 Certificate serial: 019B3C7E142BD811624F300A806964D24899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft Manifest number: 0899 Signing time: Sat 20 Dec 2025 16:00:54 +0000 Manifest this update: Sat 20 Dec 2025 16:00:54 +0000 Manifest next update: Sun 21 Dec 2025 16:00:54 +0000 Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=) 2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: nX9dOGJZeoxet6okRJJGtQCI0t0U2FBXN7aJtCmJNh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:14:2b:d8:11:62:4f:30:0a:80:69:64:d2:48:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6 Validity Not Before: Dec 20 16:00:54 2025 GMT Not After : Dec 21 16:00:54 2025 GMT Subject: CN=3520784a1297c9b927dec577befb169935dc0048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:61:f4:e4:4b:08:3a:8d:29:c5:34:58:37: 17:db:2c:84:51:7a:0e:9b:22:51:77:e0:c6:a8:a2: 1f:49:92:77:e7:39:65:e4:e7:09:43:a1:34:ad:19: 97:47:ba:fc:e6:85:b2:5d:5a:28:9d:e5:3f:cc:f9: 80:30:12:49:70:cd:bd:f5:cc:e1:c4:15:0d:d2:b0: d5:10:16:66:56:52:67:ae:fb:70:fe:50:dc:ab:e6: ea:d4:29:28:fd:4c:6a:fa:23:f2:6a:05:c4:25:c4: 1a:59:d8:37:65:eb:49:68:12:74:89:22:e1:4e:d9: c1:bd:95:c0:08:27:2b:6e:25:0e:c0:0e:03:fa:b1: 15:72:7b:eb:28:17:50:94:59:ee:a3:9f:c4:3c:1d: 71:79:61:d5:c5:9b:85:a6:9d:5e:c9:9a:c1:2d:4e: 79:79:5d:39:2d:d2:d0:39:fb:0e:e7:bb:cc:36:cf: 9e:81:c9:50:0e:8f:b2:d2:77:77:17:34:32:b3:d6: d7:ca:a8:c2:a8:4a:78:ca:1b:44:ac:e1:ba:ff:3a: 59:d0:91:86:ed:2b:03:1b:37:2b:2d:52:00:52:7b: c6:f4:6f:ba:34:23:a8:09:af:7f:a6:f6:67:c8:d2: 82:61:c5:cf:7d:b5:87:fd:43:31:4d:f0:ab:85:c8: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:78:4A:12:97:C9:B9:27:DE:C5:77:BE:FB:16:99:35:DC:00:48 X509v3 Authority Key Identifier: keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4f:12:23:c8:4d:54:ff:3c:ff:32:d7:05:00:58:02:77:52: db:43:18:95:54:a2:f1:06:93:cd:7b:70:09:3d:75:57:09:65: fe:54:c0:82:7d:01:db:89:0f:89:95:ec:9f:f4:c6:49:b2:c9: f5:51:fd:f4:44:e9:0f:a8:99:8e:6e:ec:21:60:b9:ac:c1:57: e6:c0:cb:dd:a2:0e:f0:f0:16:5a:71:6b:57:8a:f0:83:70:f5: 8c:4a:5f:87:8c:af:31:f3:d7:23:e0:ed:d8:76:bb:b4:21:a3: 00:c5:42:2a:87:a3:e9:7b:ca:c8:4b:a0:d6:03:12:bb:4d:15: 7f:64:cc:f9:8c:fd:37:08:1e:f7:6e:f0:86:48:78:fb:c9:e2: f8:2a:00:e5:fd:6d:4c:d8:86:4e:44:ee:19:a6:b8:d5:ad:87: f8:f3:b6:37:38:07:c5:6c:49:cd:44:1c:c6:5b:f1:97:c6:f5: 98:ce:1b:e8:e2:05:83:e9:d6:d0:87:3c:a4:c6:af:14:a0:c9: 64:18:12:fc:8d:ab:a7:71:a7:17:c6:ad:79:22:54:67:9f:53: e7:ce:0b:67:a5:be:96:e8:41:f1:48:51:73:c7:bd:db:70:d6: 1f:6a:cb:9a:e4:c7:b4:58:e5:cc:56:4e:f3:83:18:e8:f6:74: 33:97:54:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhQr2BFiTzAKgGlk0kiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj Nzk5ZTYwHhcNMjUxMjIwMTYwMDU0WhcNMjUxMjIxMTYwMDU0WjAzMTEwLwYDVQQD EygzNTIwNzg0YTEyOTdjOWI5MjdkZWM1NzdiZWZiMTY5OTM1ZGMwMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOJh9ORLCDqNKcU0WDcX2yyEUXoO myJRd+DGqKIfSZJ35zll5OcJQ6E0rRmXR7r85oWyXVooneU/zPmAMBJJcM299czh xBUN0rDVEBZmVlJnrvtw/lDcq+bq1Cko/Uxq+iPyagXEJcQaWdg3ZetJaBJ0iSLh TtnBvZXACCcrbiUOwA4D+rEVcnvrKBdQlFnuo5/EPB1xeWHVxZuFpp1eyZrBLU55 eV05LdLQOfsO57vMNs+egclQDo+y0nd3FzQys9bXyqjCqEp4yhtErOG6/zpZ0JGG 7SsDGzcrLVIAUnvG9G+6NCOoCa9/pvZnyNKCYcXPfbWH/UMxTfCrhchJ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUgeEoSl8m5J97Fd777Fpk13ABIMB8GA1UdIwQY MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU8SI8hN VP88/zLXBQBYAndS20MYlVSi8QaTzXtwCT11Vwll/lTAgn0B24kPiZXsn/TGSbLJ 9VH99ETpD6iZjm7sIWC5rMFX5sDL3aIO8PAWWnFrV4rwg3D1jEpfh4yvMfPXI+Dt 2Ha7tCGjAMVCKoej6XvKyEug1gMSu00Vf2TM+Yz9Nwge927whkh4+8ni+CoA5f1t TNiGTkTuGaa41a2H+PO2NzgHxWxJzUQcxlvxl8b1mM4b6OIFg+nW0Ic8pMavFKDJ ZBgS/I2rp3GnF8ateSJUZ59T584LZ6W+luhB8UhRc8e923DWH2rLmuTHtFjlzFZO 84MY6PZ0M5dUtw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:21:33 2025 by rpki-client