This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json) Hash identifier: 5rl9H8Rpv1qkIcBNy/lT7Tn2oChIjBsmkD1tv3NrCeo= Subject key identifier: C6:17:81:47:99:F4:1C:02:E3:47:30:4C:C4:9D:82:3D:9B:EB:46:1E Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2 Certificate serial: 019B46CAF91D7361A0C24D0B5373AA71E66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 16:01:05 +0000 Manifest this update: Mon 22 Dec 2025 16:01:05 +0000 Manifest next update: Tue 23 Dec 2025 16:01:05 +0000 Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: WZXrGt/CQcuROeeKxQHyLZHY5vXV8zIEW6GKaJdQNcE=) 2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:f9:1d:73:61:a0:c2:4d:0b:53:73:aa:71:e6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2 Validity Not Before: Dec 22 16:01:05 2025 GMT Not After : Dec 23 16:01:05 2025 GMT Subject: CN=c617814799f41c02e347304cc49d823d9beb461e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:29:dd:ea:36:99:87:80:26:79:a6:9b:84: 2e:9b:d9:20:2f:1d:37:23:33:b6:c1:5d:b8:f4:18: 71:27:ef:b4:de:a4:2d:be:af:3d:53:e4:d2:f2:12: ad:33:23:2e:0b:65:9b:6e:32:8a:41:11:9f:36:db: 1d:30:47:6b:1d:a4:41:d1:38:c7:3e:21:d4:a5:13: c6:b5:43:29:32:c3:a2:0a:8a:5f:b9:59:d4:5f:3d: ab:2c:75:7b:33:9e:08:48:d3:e7:07:42:ef:c5:c3: 28:2c:02:78:e2:21:89:14:7a:f7:6e:45:48:4e:19: 48:00:85:e9:75:6b:10:87:bf:9d:0e:71:7c:3e:ad: d0:b0:bd:dd:8a:bc:b7:22:71:d5:ff:fa:87:c6:7f: d4:26:1b:f0:3d:9b:c2:d7:0a:35:22:c8:76:a0:cd: 84:e5:58:aa:2f:77:e1:49:42:e4:08:00:b1:81:3e: b0:9d:90:21:e8:0f:ba:f9:d3:80:be:f3:9a:47:d7: b9:89:9c:bd:e2:1e:ed:57:83:7b:64:f7:b5:1d:0f: 64:1d:86:d1:fa:24:8c:1f:64:51:fd:a1:35:d7:16: 46:75:a8:b5:fa:b0:14:4b:07:47:80:ae:4b:19:bf: f8:fd:ae:2c:97:20:b0:ef:f5:bb:5b:d7:bb:89:1c: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:17:81:47:99:F4:1C:02:E3:47:30:4C:C4:9D:82:3D:9B:EB:46:1E X509v3 Authority Key Identifier: keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:38:a2:b3:3a:1c:fd:7d:2b:40:66:b2:5c:a9:8f:0c:d3:52: 40:56:de:dc:75:00:6f:a6:64:96:ad:12:74:dd:bc:fe:ab:54: db:a9:c3:17:39:68:1a:a4:e5:07:86:36:e8:e4:3d:31:06:2e: 0a:58:c2:d4:7c:c8:ec:1d:f0:74:f5:1b:36:3d:ad:66:0f:e8: 3f:62:62:c9:2b:c2:3a:55:90:76:21:d4:ee:fb:17:03:66:86: 33:12:a2:5b:6b:51:9a:16:c1:80:44:75:9b:4a:be:4a:21:80: be:4d:09:33:70:22:69:8b:75:b8:d9:be:7a:6f:28:a6:16:e5: 8c:4e:f3:ce:52:39:e9:c0:83:ee:99:e9:f5:d0:82:b2:b5:29: 42:53:07:8e:e5:a0:71:02:70:93:bf:31:13:e6:e2:b6:62:55: 42:c3:af:4f:60:e3:86:eb:e3:52:0c:48:6e:ae:1e:c1:eb:4b: a2:89:11:1f:59:04:c7:50:ab:6d:58:3f:2a:71:9f:a3:89:b9: 31:4c:e9:b3:9f:bb:70:d1:0a:2b:b3:f9:d7:e5:bc:2c:d5:df: 89:47:ea:e9:17:6a:fe:0d:62:04:c1:27:24:d7:85:09:2e:ff: fb:23:e2:59:aa:73:81:09:43:78:bd:82:52:9f:16:c0:17:dc: 75:4a:33:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyvkdc2Ggwk0LU3OqceZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3 OTc1ZTIwHhcNMjUxMjIyMTYwMTA1WhcNMjUxMjIzMTYwMTA1WjAzMTEwLwYDVQQD EyhjNjE3ODE0Nzk5ZjQxYzAyZTM0NzMwNGNjNDlkODIzZDliZWI0NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUUp3eo2mYeAJnmmm4Qum9kgLx03 IzO2wV249BhxJ++03qQtvq89U+TS8hKtMyMuC2WbbjKKQRGfNtsdMEdrHaRB0TjH PiHUpRPGtUMpMsOiCopfuVnUXz2rLHV7M54ISNPnB0LvxcMoLAJ44iGJFHr3bkVI ThlIAIXpdWsQh7+dDnF8Pq3QsL3diry3InHV//qHxn/UJhvwPZvC1wo1Ish2oM2E 5ViqL3fhSULkCACxgT6wnZAh6A+6+dOAvvOaR9e5iZy94h7tV4N7ZPe1HQ9kHYbR +iSMH2RR/aE11xZGdai1+rAUSwdHgK5LGb/4/a4slyCw7/W7W9e7iRyYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYXgUeZ9BwC40cwTMSdgj2b60YeMB8GA1UdIwQY MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvziiszoc /X0rQGayXKmPDNNSQFbe3HUAb6Zklq0SdN28/qtU26nDFzloGqTlB4Y26OQ9MQYu CljC1HzI7B3wdPUbNj2tZg/oP2JiySvCOlWQdiHU7vsXA2aGMxKiW2tRmhbBgER1 m0q+SiGAvk0JM3AiaYt1uNm+em8ophbljE7zzlI56cCD7pnp9dCCsrUpQlMHjuWg cQJwk78xE+bitmJVQsOvT2DjhuvjUgxIbq4ewetLookRH1kEx1CrbVg/KnGfo4m5 MUzps5+7cNEKK7P51+W8LNXfiUfq6Rdq/g1iBMEnJNeFCS7/+yPiWapzgQlDeL2C Up8WwBfcdUozSA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:49:05 2025 by rpki-client