This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json) Hash identifier: Nrcaw9QVd9gwsiFiJmejBwFclQP9UWZDQc1JuOOQjDg= Subject key identifier: 68:15:3C:0F:23:2D:DC:F8:65:47:3A:71:0C:01:4E:56:DB:FB:DB:FE Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Certificate serial: 019B3E6D50497203DF61BFBD02611E16963D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft Manifest number: 1478 Signing time: Sun 21 Dec 2025 01:01:49 +0000 Manifest this update: Sun 21 Dec 2025 01:01:49 +0000 Manifest next update: Mon 22 Dec 2025 01:01:49 +0000 Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: BPc0ZRh0NGMFCGNboOsi6xeKcCob69fiCsYkE84FuNM=) 2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:50:49:72:03:df:61:bf:bd:02:61:1e:16:96:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Validity Not Before: Dec 21 01:01:49 2025 GMT Not After : Dec 22 01:01:49 2025 GMT Subject: CN=68153c0f232ddcf865473a710c014e56dbfbdbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:3c:dc:72:aa:40:23:db:19:3e:30:ea:1d: 68:82:c4:e8:18:c7:5c:78:7b:7b:a5:90:84:bf:c9: 92:b6:1d:a5:c0:32:c8:48:3a:0b:d4:8f:68:12:13: c2:60:e4:80:13:70:d6:fc:16:f4:42:c1:d2:39:28: cc:0b:e9:02:18:84:b7:33:0b:47:d4:04:cc:24:af: 22:bd:c9:57:d0:16:e6:f8:d2:1a:4d:d1:41:69:2d: 86:80:20:41:72:9c:58:b0:51:63:3d:99:66:1f:b9: 3e:5c:c7:82:d6:40:4e:c0:23:53:8e:8f:ca:d6:0e: 85:97:9e:6c:93:67:23:33:53:c6:26:1d:97:dc:b0: 98:92:ea:ce:eb:66:e7:78:ad:b6:18:6b:6d:ce:d3: c2:86:f6:0e:e9:2d:ae:c2:8a:0b:b4:4a:34:f2:49: d6:6f:5a:d8:d9:d4:28:80:8c:b4:0f:3a:6c:1f:be: fc:3e:2c:06:1a:52:df:f3:99:42:96:b8:cd:41:7f: a3:33:04:02:6e:e2:e3:08:86:c7:53:77:98:b6:f9: 59:8f:01:64:b0:06:a8:d7:47:a9:3e:4b:e2:ad:87: fc:8e:4a:45:4f:e1:c3:44:34:81:84:4d:7a:3a:d9: d3:39:bb:63:9a:8d:ae:d1:49:49:4c:d1:6b:63:43: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:3C:0F:23:2D:DC:F8:65:47:3A:71:0C:01:4E:56:DB:FB:DB:FE X509v3 Authority Key Identifier: keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e5:a1:4f:82:c7:a7:c8:43:3b:0c:57:e9:50:11:66:5b:eb: 33:1f:c9:c8:cd:34:fd:02:73:15:79:b4:4f:cf:af:df:92:de: a8:c2:4b:e9:44:1f:af:56:8f:aa:5d:bd:42:0e:b6:55:ce:0c: 72:13:e3:89:72:72:56:fd:0d:d1:93:b1:76:87:6e:7d:27:8b: 1a:3d:41:40:3e:bc:ef:f1:e6:fd:6d:02:3b:87:e9:78:22:70: 04:07:83:fe:c8:bd:25:7d:3c:01:4b:fb:57:cf:ef:61:5b:c6: b4:5a:4b:bb:e9:30:bf:b5:eb:49:2f:2f:b3:13:15:7e:c1:08: fb:1c:69:4d:8c:b4:ba:19:7b:3a:9a:91:b0:bb:6a:a8:7b:18: 56:0c:f9:19:2c:dc:cb:78:d3:fc:88:6f:ec:c4:e7:97:34:ea: ee:7a:3c:65:94:b0:b6:ac:dc:50:d7:08:5a:c0:50:b0:36:2d: df:21:93:61:6b:72:14:6a:70:50:d1:41:77:ef:52:38:9f:72: 04:b8:32:2f:a9:6a:36:2b:12:33:44:0d:37:e9:fb:ac:2e:7d: f4:82:96:71:dc:a6:9f:8d:50:61:d2:49:99:90:50:6c:ca:27: ea:c3:38:aa:f2:b5:5c:e0:c2:94:12:02:c4:e6:a2:a8:29:c4: 07:cd:78:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVBJcgPfYb+9AmEeFpY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx YTA1NDcwHhcNMjUxMjIxMDEwMTQ5WhcNMjUxMjIyMDEwMTQ5WjAzMTEwLwYDVQQD Eyg2ODE1M2MwZjIzMmRkY2Y4NjU0NzNhNzEwYzAxNGU1NmRiZmJkYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg883HKqQCPbGT4w6h1ogsToGMdc eHt7pZCEv8mSth2lwDLISDoL1I9oEhPCYOSAE3DW/Bb0QsHSOSjMC+kCGIS3MwtH 1ATMJK8ivclX0Bbm+NIaTdFBaS2GgCBBcpxYsFFjPZlmH7k+XMeC1kBOwCNTjo/K 1g6Fl55sk2cjM1PGJh2X3LCYkurO62bneK22GGttztPChvYO6S2uwooLtEo08knW b1rY2dQogIy0DzpsH778PiwGGlLf85lClrjNQX+jMwQCbuLjCIbHU3eYtvlZjwFk sAao10epPkvirYf8jkpFT+HDRDSBhE16OtnTObtjmo2u0UlJTNFrY0PGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgVPA8jLdz4ZUc6cQwBTlbb+9v+MB8GA1UdIwQY MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeWhT4LH p8hDOwxX6VARZlvrMx/JyM00/QJzFXm0T8+v35LeqMJL6UQfr1aPql29Qg62Vc4M chPjiXJyVv0N0ZOxdodufSeLGj1BQD687/Hm/W0CO4fpeCJwBAeD/si9JX08AUv7 V8/vYVvGtFpLu+kwv7XrSS8vsxMVfsEI+xxpTYy0uhl7OpqRsLtqqHsYVgz5GSzc y3jT/Ihv7MTnlzTq7no8ZZSwtqzcUNcIWsBQsDYt3yGTYWtyFGpwUNFBd+9SOJ9y BLgyL6lqNisSM0QNN+n7rC599IKWcdymn41QYdJJmZBQbMon6sM4qvK1XODClBIC xOaiqCnEB8146Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:20 2025 by rpki-client