This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json) Hash identifier: VzRWI7IgKU8ynhgz0W2I4W6znezTKc0BU2osrMjgU7k= Subject key identifier: 78:64:38:EC:CD:DD:F1:B5:B7:9A:94:57:C2:7F:4F:58:DE:AA:9F:64 Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0 Certificate serial: 019B33B1B69F738BD70DBA79B403F5C5BCBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 23:00:43 +0000 Manifest this update: Thu 18 Dec 2025 23:00:43 +0000 Manifest next update: Fri 19 Dec 2025 23:00:43 +0000 Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: zGJAV3J3UNFeNGIK537+R0BjK31Uq/w34jf6ILqt8Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:b6:9f:73:8b:d7:0d:ba:79:b4:03:f5:c5:bc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0 Validity Not Before: Dec 18 23:00:43 2025 GMT Not After : Dec 19 23:00:43 2025 GMT Subject: CN=786438eccdddf1b5b79a9457c27f4f58deaa9f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:0f:61:70:85:62:82:f7:e7:64:5a:9c:bc: 44:20:c1:88:35:d2:d4:d4:ef:7b:b9:95:dd:7d:c2: c1:25:70:b4:e4:e6:e3:0f:f0:b2:75:a9:50:ab:61: 3d:1a:c5:d2:0c:3d:8a:5b:80:08:dc:f6:b8:9a:36: 2f:ab:87:91:f9:a6:9f:85:cb:40:ac:28:95:ff:92: 23:a8:20:35:55:93:1d:bf:e7:50:74:e8:a2:07:b9: 2c:1f:c8:a1:f1:3a:5e:16:c1:f6:b3:c5:fe:e6:51: d5:45:62:9f:6e:74:58:bc:16:dc:2c:df:ff:63:a2: e2:a6:18:55:02:9d:61:09:6e:df:2f:71:95:21:5f: b7:8d:b7:05:87:ad:5c:da:51:f1:7a:5a:f7:aa:22: 5b:a7:02:08:73:65:39:41:ad:27:a2:ae:10:8d:d6: 03:fa:cc:5d:0f:c1:01:29:45:17:93:62:fc:de:2a: 05:e8:62:7a:ff:8d:a4:7b:12:e5:0d:05:fb:86:96: 7e:78:20:79:be:74:e5:59:c0:88:13:23:d1:f7:78: ae:17:3b:22:f6:d1:da:27:00:e9:3f:1f:4a:7d:2f: 4a:b2:90:c2:8e:bb:6d:cf:78:fb:46:d5:c1:2f:55: 82:84:93:4d:0c:7e:bb:38:c5:9e:e7:0e:ef:5b:7b: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:38:EC:CD:DD:F1:B5:B7:9A:94:57:C2:7F:4F:58:DE:AA:9F:64 X509v3 Authority Key Identifier: keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6d:ac:26:8f:8d:25:31:86:ba:ff:b5:44:fb:d8:65:cc:5a: fb:57:7b:3c:4d:c4:8f:49:98:67:45:46:50:c9:3c:02:e1:85: dc:86:3a:d7:bc:02:f2:b3:4e:c9:95:e6:e7:79:6f:e9:8c:91: 4a:7d:09:2b:20:8c:7c:f1:c6:fe:4c:39:2e:e7:ac:27:74:17: 42:c1:08:20:a1:5b:b6:05:82:70:53:ad:d6:a3:f7:85:d2:64: fa:ff:92:39:4c:8a:98:3c:2b:03:b1:6f:b2:56:a6:46:8f:e9: 89:c9:b1:26:e7:66:09:c6:8c:20:4e:0b:a5:2c:cc:51:69:e3: 7c:a9:53:73:3d:14:f5:83:3d:ab:19:e0:6f:db:01:6f:69:65: 47:8e:1b:4b:5b:a1:b3:4d:3d:de:02:37:48:81:c8:69:ec:36: 1d:6a:d1:dd:78:d1:ad:b1:61:6f:78:b5:c0:e1:a0:7b:2d:80: 49:d8:e6:1a:d8:d6:fa:4c:eb:64:99:70:22:57:67:30:6e:64: 90:72:2a:ea:19:9c:0f:30:42:b8:e9:d1:8d:5f:05:35:ab:f3: 82:9e:6d:15:d9:52:e9:c6:e7:47:f7:52:14:2e:6b:7c:2a:fb: 5b:90:cb:49:62:35:c2:7a:8f:b7:e6:fd:be:fa:da:7e:a2:dc: 10:c7:4a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsbafc4vXDbp5tAP1xby8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMDBiYmE2NGY1MTZiOGQ2MzM1YTAxY2YzMDRiODIyZGVl MWFlZDAwHhcNMjUxMjE4MjMwMDQzWhcNMjUxMjE5MjMwMDQzWjAzMTEwLwYDVQQD Eyg3ODY0MzhlY2NkZGRmMWI1Yjc5YTk0NTdjMjdmNGY1OGRlYWE5ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jwPYXCFYoL352RanLxEIMGINdLU 1O97uZXdfcLBJXC05ObjD/CydalQq2E9GsXSDD2KW4AI3Pa4mjYvq4eR+aafhctA rCiV/5IjqCA1VZMdv+dQdOiiB7ksH8ih8TpeFsH2s8X+5lHVRWKfbnRYvBbcLN// Y6LiphhVAp1hCW7fL3GVIV+3jbcFh61c2lHxelr3qiJbpwIIc2U5Qa0noq4QjdYD +sxdD8EBKUUXk2L83ioF6GJ6/42kexLlDQX7hpZ+eCB5vnTlWcCIEyPR93iuFzsi 9tHaJwDpPx9KfS9KspDCjrttz3j7RtXBL1WChJNNDH67OMWe5w7vW3ucswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhkOOzN3fG1t5qUV8J/T1jeqp9kMB8GA1UdIwQY MBaAFG4Au6ZPUWuNYzWgHPMEuCLe4a7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQt NTc1Y2Y1ZDMzNWU0LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQtNTc1Y2Y1ZDMzNWU0 LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG2sJo+N JTGGuv+1RPvYZcxa+1d7PE3Ej0mYZ0VGUMk8AuGF3IY617wC8rNOyZXm53lv6YyR Sn0JKyCMfPHG/kw5LuesJ3QXQsEIIKFbtgWCcFOt1qP3hdJk+v+SOUyKmDwrA7Fv slamRo/picmxJudmCcaMIE4LpSzMUWnjfKlTcz0U9YM9qxngb9sBb2llR44bS1uh s0093gI3SIHIaew2HWrR3XjRrbFhb3i1wOGgey2ASdjmGtjW+kzrZJlwIldnMG5k kHIq6hmcDzBCuOnRjV8FNavzgp5tFdlS6cbnR/dSFC5rfCr7W5DLSWI1wnqPt+b9 vvrafqLcEMdKIA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:40:04 2025 by rpki-client