This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json) Hash identifier: jQ2oRLxEbEQS/nw1BOFpCV18KOIp7CQyYG5GvRsooXk= Subject key identifier: 14:D5:6E:6A:93:00:88:B8:8B:1D:59:C2:B6:77:B8:1E:26:2D:74:64 Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1 Certificate serial: 019B37FC81712B49A7AAC89EAF56C3ECB533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft Manifest number: 117B Signing time: Fri 19 Dec 2025 19:00:53 +0000 Manifest this update: Fri 19 Dec 2025 19:00:53 +0000 Manifest next update: Sat 20 Dec 2025 19:00:53 +0000 Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: gJNzI3DnRt4503ztwWJBGLxhsCRhixE0MfM/EUQGcS0=) 2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:81:71:2b:49:a7:aa:c8:9e:af:56:c3:ec:b5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1 Validity Not Before: Dec 19 19:00:53 2025 GMT Not After : Dec 20 19:00:53 2025 GMT Subject: CN=14d56e6a930088b88b1d59c2b677b81e262d7464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:a7:9b:8c:54:be:d4:14:d5:0f:85:e6:2a: fa:3c:7b:d2:7e:77:6f:9b:05:e4:80:6b:80:b8:36: c4:2d:a2:a8:20:5e:30:97:3e:a1:54:1d:23:1b:f8: 27:46:b8:fc:73:20:ee:79:9e:be:9d:50:08:53:26: 97:85:65:04:08:bf:30:f5:d5:13:7e:31:a4:c7:87: dc:23:9b:30:36:82:07:13:c6:e8:45:70:2d:33:62: dd:03:c4:df:55:11:62:e1:10:7f:d0:0b:25:96:6a: 29:b1:33:af:84:63:e9:eb:4d:0a:d4:1c:94:d4:b2: d1:1b:15:1a:fa:0a:0e:26:29:8f:a0:c7:cf:d5:ed: 30:8d:01:91:e6:ac:d4:31:e1:26:d3:d8:1e:5d:b2: 4d:0b:8f:f0:d0:85:ac:d2:58:3f:a2:58:d6:59:1e: e5:d1:9f:f0:44:a8:07:b8:77:dd:77:13:22:a4:ad: 5c:e2:17:c1:87:8c:9d:32:8a:df:2e:06:20:82:13: 4b:e1:15:6e:8d:0b:06:b1:60:1e:9b:8b:e9:3f:3d: 90:d2:23:50:d8:d1:e3:e9:84:8a:10:bd:17:4f:06: 9d:c2:08:75:0e:98:97:b0:89:68:8f:1c:30:44:3e: ca:74:43:2a:e5:65:78:7a:50:90:8d:87:ba:63:4b: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:6E:6A:93:00:88:B8:8B:1D:59:C2:B6:77:B8:1E:26:2D:74:64 X509v3 Authority Key Identifier: keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:df:58:80:99:e0:db:07:a9:bb:f3:d5:89:e1:2f:c2:ba: c8:98:82:27:51:16:52:bc:4c:a1:17:03:17:f0:f8:04:46:73: 96:3f:f3:9e:42:60:a5:d1:7b:6f:80:e7:65:26:bb:c4:e0:2d: ed:50:74:46:06:f9:47:ea:9f:55:e0:b4:27:e3:ed:c1:40:d5: aa:64:35:88:a0:7d:21:a8:11:63:c3:27:b9:36:c1:16:8b:1c: bd:4b:8a:2e:48:10:3c:eb:80:32:69:47:52:ed:dd:d7:8d:d3: c6:d0:2e:87:53:34:6e:84:f5:9a:c2:af:75:2c:e1:9d:5f:6d: ad:33:8d:aa:a2:19:8f:2c:17:a5:9d:21:ad:5e:d4:c3:d9:69: 3d:27:a1:ef:4d:a0:01:6d:99:8c:32:49:5a:ae:29:ef:88:78: 4f:ba:e7:d1:17:d4:fc:c4:7d:5b:5b:8c:2b:38:06:06:c6:ef: 34:7a:36:0f:e8:c9:69:be:70:86:d9:a6:35:36:46:ab:60:dc: 2d:ab:25:ba:a3:dc:99:f3:ab:39:d7:eb:53:4c:00:67:56:91: e5:10:af:ae:50:8a:ab:57:ae:3b:ad:70:a1:e6:7f:26:47:c1: 4b:c9:e7:67:d5:7a:be:56:c5:25:18:5c:29:53:69:b0:82:c7: 76:36:73:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/IFxK0mnqsier1bD7LUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4 Y2ZlZjEwHhcNMjUxMjE5MTkwMDUzWhcNMjUxMjIwMTkwMDUzWjAzMTEwLwYDVQQD EygxNGQ1NmU2YTkzMDA4OGI4OGIxZDU5YzJiNjc3YjgxZTI2MmQ3NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqSnm4xUvtQU1Q+F5ir6PHvSfndv mwXkgGuAuDbELaKoIF4wlz6hVB0jG/gnRrj8cyDueZ6+nVAIUyaXhWUECL8w9dUT fjGkx4fcI5swNoIHE8boRXAtM2LdA8TfVRFi4RB/0AsllmopsTOvhGPp600K1ByU 1LLRGxUa+goOJimPoMfP1e0wjQGR5qzUMeEm09geXbJNC4/w0IWs0lg/oljWWR7l 0Z/wRKgHuHfddxMipK1c4hfBh4ydMorfLgYgghNL4RVujQsGsWAem4vpPz2Q0iNQ 2NHj6YSKEL0XTwadwgh1DpiXsIlojxwwRD7KdEMq5WV4elCQjYe6Y0umgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTVbmqTAIi4ix1ZwrZ3uB4mLXRkMB8GA1UdIwQY MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2 LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIbfWICZ 4NsHqbvz1YnhL8K6yJiCJ1EWUrxMoRcDF/D4BEZzlj/znkJgpdF7b4DnZSa7xOAt 7VB0Rgb5R+qfVeC0J+PtwUDVqmQ1iKB9IagRY8MnuTbBFoscvUuKLkgQPOuAMmlH Uu3d143TxtAuh1M0boT1msKvdSzhnV9trTONqqIZjywXpZ0hrV7Uw9lpPSeh702g AW2ZjDJJWq4p74h4T7rn0RfU/MR9W1uMKzgGBsbvNHo2D+jJab5whtmmNTZGq2Dc LasluqPcmfOrOdfrU0wAZ1aR5RCvrlCKq1euO61woeZ/JkfBS8nnZ9V6vlbFJRhc KVNpsILHdjZzeg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:25 2025 by rpki-client