This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: XwN++6oVwuYJbjgukFqhnWmqW0ywUpTNfmkYvkiD5rE=
Subject key identifier: 29:7C:62:11:E9:D3:FF:3D:D4:40:09:B1:7A:B6:84:86:D3:B4:55:13
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019B1C177F8C4FC9BEB20A508229E474AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 143A
Signing time: Sun 14 Dec 2025 09:01:00 +0000
Manifest this update: Sun 14 Dec 2025 09:01:00 +0000
Manifest next update: Mon 15 Dec 2025 09:01:00 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: IYv6HlzSVpwMACkkIl1qMSwfvZZbb/XitIiAm9vDoUM=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1c:17:7f:8c:4f:c9:be:b2:0a:50:82:29:e4:74:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Dec 14 09:01:00 2025 GMT
Not After : Dec 15 09:01:00 2025 GMT
Subject: CN=297c6211e9d3ff3dd44009b17ab68486d3b45513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:6a:c1:be:31:6d:c0:c3:ad:b4:6b:22:50:
0d:e0:78:15:53:27:00:1e:12:89:64:f3:2a:4e:dd:
75:c9:2f:73:cd:12:fa:8c:a2:53:f3:0e:8c:83:d3:
71:97:3c:08:46:8b:f7:5b:ba:9c:ff:07:b5:70:cb:
dc:08:9a:7d:6f:fa:a9:40:40:94:52:24:10:44:1e:
68:c2:99:f3:17:9d:b9:cf:01:97:6a:24:8c:d9:88:
76:19:f2:05:0d:7b:85:ad:c3:be:a0:a8:17:f9:38:
3c:5f:86:f4:9a:52:09:84:78:df:9a:30:82:69:c6:
e2:be:d6:c6:17:64:c0:0f:89:a7:3f:01:3b:e7:f5:
7d:f6:0d:76:f4:76:8c:85:aa:83:e3:e2:67:da:88:
c1:ba:61:4f:3a:ff:87:df:19:16:97:6d:ec:62:dd:
0d:97:90:82:9d:ee:fc:20:6a:a8:be:0d:f4:6a:9e:
2d:e0:20:70:2a:a4:0c:94:e4:b6:cf:aa:6c:ab:26:
11:eb:26:8e:a0:34:25:19:d2:0e:c5:2e:92:80:b8:
de:53:73:10:9a:fe:98:6f:f9:3b:e6:91:f2:b8:97:
7a:94:b8:d3:2b:cd:91:7a:eb:2c:cf:07:15:99:7b:
3a:b6:f4:d5:cc:3f:82:ed:f2:83:c3:21:09:ff:b3:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:62:11:E9:D3:FF:3D:D4:40:09:B1:7A:B6:84:86:D3:B4:55:13
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:a8:12:ee:a1:5c:7e:1c:59:09:c4:5b:f7:05:37:95:93:
d9:bc:15:c5:8d:ab:dc:b5:0a:db:55:92:5b:ca:c9:35:b7:8e:
59:68:44:b2:73:31:2d:14:c3:fd:a1:b8:1d:1b:26:dd:d7:f5:
82:9f:30:95:d2:cf:62:ea:16:fd:f8:42:af:e3:20:bc:41:b5:
d3:96:1d:5d:ff:59:0b:3f:20:2d:d7:01:9d:c4:e4:39:62:5c:
37:06:9d:bf:11:88:e4:9f:02:67:74:25:8a:e7:85:fa:3f:85:
a7:66:81:8f:bc:3a:41:d0:f2:77:eb:c3:14:73:40:ec:40:1e:
50:a6:ac:42:46:b6:00:4e:c7:f0:c9:30:af:02:d1:aa:e1:a9:
b7:17:76:8d:25:82:df:14:64:36:28:0e:70:c5:ff:d5:a3:1c:
7c:93:6c:f8:99:52:17:3a:d5:d4:2e:a6:05:08:bc:4b:07:a0:
78:8d:db:8f:9f:ad:2a:e1:ad:c6:5c:36:03:55:fb:6a:e1:9b:
dd:eb:5c:eb:fc:89:9d:38:a3:5f:57:39:44:50:35:27:fc:3b:
2c:cf:4e:83:e3:1f:28:d3:60:15:12:20:5f:db:c4:b8:e7:72:
d7:63:84:87:dd:b9:f2:45:c3:f7:65:e8:9d:7c:f7:fb:56:a3:
99:bf:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:26:29 2025 by rpki-client