This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json) Hash identifier: yPZsAQ1DarWefsjJz5kr8HVXZbZS9l2vin2by1cwZqg= Subject key identifier: A9:4C:B4:69:97:30:72:F7:CE:C0:C7:31:1C:AA:9C:AA:39:EA:D5:3F Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Certificate serial: 019B3C7DCBDEBE9F95DB4B69AD988CD42FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 1nNZ1QbVZSZxPxwd07ssB3L2ucBCL+RVoUkJP/BUqEg=) 2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cb:de:be:9f:95:db:4b:69:ad:98:8c:d4:2f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=a94cb469973072f7cec0c7311caa9caa39ead53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:f7:a2:ae:69:6f:3e:f6:e1:61:bf:5b:aa: a7:58:cb:7e:9f:5d:9a:da:cf:06:c4:9f:26:72:be: 5f:67:c5:fa:2f:1b:a5:2c:68:9e:f8:0b:c7:be:36: 45:3e:d9:df:94:f3:1d:21:52:c1:25:21:fb:83:00: ab:5a:ed:c2:f9:c1:dc:ad:88:dc:bc:48:92:84:80: 6b:b9:af:04:51:79:95:54:fd:5c:56:70:39:ba:5e: be:71:36:89:1d:0f:b9:cc:f8:fe:d9:f1:c9:20:02: 23:b3:f5:21:02:c2:6a:29:33:2a:70:4c:ec:c8:01: 38:38:23:a1:b2:4b:06:87:2d:99:0a:b6:d7:6c:c2: 81:0d:de:7a:ba:21:c8:c1:77:8d:80:b1:a7:81:52: 14:d4:6b:6e:1b:c2:1f:51:2d:4a:f8:f0:12:d4:53: f8:fa:79:6d:6b:49:12:0f:a6:1e:25:8c:49:ed:47: 88:31:e5:f7:51:77:4c:70:c5:c5:92:d8:d8:6d:6c: ec:6b:29:d8:ff:06:47:86:65:68:69:ed:c8:bf:2a: d0:c2:1c:85:a3:01:a6:a3:7a:7b:94:1b:64:14:ba: 56:95:f3:b4:c7:bf:2d:66:f7:15:c8:39:ec:4c:4c: 9c:8f:2f:42:d7:a8:e5:1c:11:05:0e:d9:ff:c1:92: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4C:B4:69:97:30:72:F7:CE:C0:C7:31:1C:AA:9C:AA:39:EA:D5:3F X509v3 Authority Key Identifier: keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cf:97:9d:3a:0e:a2:0b:b5:e8:50:fb:65:59:35:21:a4:30: 1a:90:fc:72:ec:cc:7c:32:4f:16:9a:0c:7d:9c:9c:73:df:58: 0b:6f:eb:86:70:eb:00:c3:ee:38:60:08:73:cc:82:a4:f2:03: 65:bb:d7:7b:f0:20:14:9a:ee:97:e4:4a:ca:fc:0e:66:c7:d3: 99:59:80:13:c0:2d:4e:2f:27:26:7d:04:aa:bf:99:96:1d:4b: d7:7d:b6:1a:27:16:bf:99:da:7a:91:bf:ee:03:9f:22:a3:20: d5:87:ad:b7:95:d7:8d:03:f0:06:07:08:43:85:5d:36:86:7e: 5e:48:6e:ab:68:0a:ed:a3:21:f0:d0:5b:4d:8a:d7:aa:56:88: 09:3f:14:d5:7c:41:96:18:4f:78:cb:23:a1:25:3b:11:a7:e8: 85:6b:91:fd:e9:b1:59:c5:d7:72:36:29:3d:f4:38:64:1f:98: 81:89:b2:45:fe:02:c4:a9:3d:a2:f8:b8:7d:f8:de:f9:8f:b2: 07:ca:15:4f:9f:bc:44:5b:77:37:d6:c6:ac:7f:05:91:e7:e7: 46:87:8e:3d:ab:68:70:0d:ed:08:a7:93:c3:3d:a3:a5:40:fd: 6e:9b:c5:93:d8:99:90:c0:a4:c8:ea:a4:54:68:70:cc:63:d2: 2d:e6:64:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcvevp+V20tprZiM1C/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl ZjgyNmQwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD EyhhOTRjYjQ2OTk3MzA3MmY3Y2VjMGM3MzExY2FhOWNhYTM5ZWFkNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWP3oq5pbz724WG/W6qnWMt+n12a 2s8GxJ8mcr5fZ8X6LxulLGie+AvHvjZFPtnflPMdIVLBJSH7gwCrWu3C+cHcrYjc vEiShIBrua8EUXmVVP1cVnA5ul6+cTaJHQ+5zPj+2fHJIAIjs/UhAsJqKTMqcEzs yAE4OCOhsksGhy2ZCrbXbMKBDd56uiHIwXeNgLGngVIU1GtuG8IfUS1K+PAS1FP4 +nlta0kSD6YeJYxJ7UeIMeX3UXdMcMXFktjYbWzsaynY/wZHhmVoae3IvyrQwhyF owGmo3p7lBtkFLpWlfO0x78tZvcVyDnsTEycjy9C16jlHBEFDtn/wZI2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlMtGmXMHL3zsDHMRyqnKo56tU/MB8GA1UdIwQY MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas+XnToO ogu16FD7ZVk1IaQwGpD8cuzMfDJPFpoMfZycc99YC2/rhnDrAMPuOGAIc8yCpPID ZbvXe/AgFJrul+RKyvwOZsfTmVmAE8AtTi8nJn0Eqr+Zlh1L1322GicWv5naepG/ 7gOfIqMg1Yett5XXjQPwBgcIQ4VdNoZ+Xkhuq2gK7aMh8NBbTYrXqlaICT8U1XxB lhhPeMsjoSU7EafohWuR/emxWcXXcjYpPfQ4ZB+YgYmyRf4CxKk9ovi4ffje+Y+y B8oVT5+8RFt3N9bGrH8FkefnRoeOPatocA3tCKeTwz2jpUD9bpvFk9iZkMCkyOqk VGhwzGPSLeZk9g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:35 2025 by rpki-client