This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json) Hash identifier: qNIghXbcfEGKmRjDtF++5UXHbCtxR/OhwiP5gTMX/fg= Subject key identifier: A6:D6:2E:A9:4D:2B:88:C5:F1:07:D4:B2:82:8F:48:2F:50:54:11:EE Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Certificate serial: 019B3532D0060AA31E15F82420BCA968F692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft Manifest number: 0309 Signing time: Fri 19 Dec 2025 06:01:21 +0000 Manifest this update: Fri 19 Dec 2025 06:01:21 +0000 Manifest next update: Sat 20 Dec 2025 06:01:21 +0000 Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: iBqmDcX6P7zkPQlESOVCVDSa9s6duvlQhIJ+47m/WkA=) 2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:d0:06:0a:a3:1e:15:f8:24:20:bc:a9:68:f6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Validity Not Before: Dec 19 06:01:21 2025 GMT Not After : Dec 20 06:01:21 2025 GMT Subject: CN=a6d62ea94d2b88c5f107d4b2828f482f505411ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:0c:9c:e9:28:84:2c:bd:06:8e:9c:f7:6c: f1:d6:61:a7:bc:3f:5c:c6:dd:6b:57:a5:e7:0e:42: 4c:39:4f:2f:b3:0c:05:f9:ad:4a:cd:76:99:72:04: b4:be:dd:14:2a:f7:0d:f4:b7:d9:80:e2:c7:dc:78: dc:b8:7f:60:a2:37:67:db:44:a9:9a:e7:eb:4a:99: 39:c8:f9:88:11:49:ea:ab:3d:45:ed:f2:82:45:27: f8:d7:4c:b1:54:57:f9:61:97:0c:35:cb:5c:81:33: b9:4c:16:d9:84:59:45:90:dd:77:91:16:ac:63:ed: 51:10:0d:b2:bc:f5:83:ed:44:88:08:b6:5b:10:92: d0:9a:f1:57:d8:30:8a:1c:2d:f6:51:5d:71:52:ca: 89:5b:79:b8:76:c7:a2:2d:5f:6e:1f:04:f3:1c:66: 1b:ec:b7:0d:ff:d5:61:8d:34:ba:8f:d5:0c:2a:ae: de:bd:63:a5:3d:be:e1:61:d4:96:87:95:b5:a7:c3: dd:fd:f2:eb:a3:fd:8b:46:39:2e:0e:75:90:21:4c: 9f:53:61:15:f3:1e:06:d5:02:ba:08:dd:b4:2f:52: cf:b3:97:17:6a:de:e5:d6:d7:e7:b7:73:23:3b:85: e5:95:9c:9c:ed:56:1d:9b:8f:25:0c:13:38:6f:b0: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D6:2E:A9:4D:2B:88:C5:F1:07:D4:B2:82:8F:48:2F:50:54:11:EE X509v3 Authority Key Identifier: keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:28:b5:b3:d5:40:4b:0d:8b:37:b3:bb:98:f6:2e:5e:a5: 6c:e1:84:04:c9:e4:64:27:9f:ef:82:6e:49:51:a8:00:e2:e9: b7:08:d4:96:41:16:58:50:75:6f:07:97:a3:25:0a:40:85:4b: 0e:96:d8:42:68:e8:df:9e:56:ba:67:c7:2f:fb:5f:50:cc:64: 24:c4:26:61:e1:05:ac:61:14:30:0c:f0:ea:39:67:29:fa:c1: cc:12:e4:3a:5b:63:a6:7f:10:1e:9a:4c:ef:6a:c8:ee:c3:a3: d6:f3:23:ca:e0:49:f8:3a:f2:d5:52:27:60:69:51:4e:40:76: 74:51:58:ca:97:d2:ed:82:6c:17:26:1e:13:d5:a8:7a:75:3d: 39:ee:75:c3:f9:56:cb:90:fc:30:bc:67:9b:a9:f8:95:96:08: 12:1c:9c:12:1d:0e:b8:1f:d8:cf:f0:6f:6d:9e:f2:d3:42:88: e6:1c:f8:2e:7a:50:c3:22:2e:2d:80:c6:0c:5d:89:7f:cb:2d: 4e:95:f6:03:c0:f6:a9:eb:79:f4:f4:a4:4c:a6:cd:6d:07:0c: 4c:83:d8:d9:b3:82:aa:0b:fb:00:f0:d1:93:73:2b:6d:ac:cc: d3:7b:bf:2f:41:18:a3:aa:25:fd:fa:e9:e1:92:04:67:28:9b: 26:2f:e6:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtAGCqMeFfgkILypaPaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy YTJjMjcwHhcNMjUxMjE5MDYwMTIxWhcNMjUxMjIwMDYwMTIxWjAzMTEwLwYDVQQD EyhhNmQ2MmVhOTRkMmI4OGM1ZjEwN2Q0YjI4MjhmNDgyZjUwNTQxMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4MnOkohCy9Bo6c92zx1mGnvD9c xt1rV6XnDkJMOU8vswwF+a1KzXaZcgS0vt0UKvcN9LfZgOLH3HjcuH9gojdn20Sp mufrSpk5yPmIEUnqqz1F7fKCRSf410yxVFf5YZcMNctcgTO5TBbZhFlFkN13kRas Y+1REA2yvPWD7USICLZbEJLQmvFX2DCKHC32UV1xUsqJW3m4dseiLV9uHwTzHGYb 7LcN/9VhjTS6j9UMKq7evWOlPb7hYdSWh5W1p8Pd/fLro/2LRjkuDnWQIUyfU2EV 8x4G1QK6CN20L1LPs5cXat7l1tfnt3MjO4XllZyc7VYdm48lDBM4b7DZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbWLqlNK4jF8QfUsoKPSC9QVBHuMB8GA1UdIwQY MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4 LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxgotbPV QEsNizezu5j2Ll6lbOGEBMnkZCef74JuSVGoAOLptwjUlkEWWFB1bweXoyUKQIVL DpbYQmjo355WumfHL/tfUMxkJMQmYeEFrGEUMAzw6jlnKfrBzBLkOltjpn8QHppM 72rI7sOj1vMjyuBJ+Dry1VInYGlRTkB2dFFYypfS7YJsFyYeE9WoenU9Oe51w/lW y5D8MLxnm6n4lZYIEhycEh0OuB/Yz/BvbZ7y00KI5hz4LnpQwyIuLYDGDF2Jf8st TpX2A8D2qet59PSkTKbNbQcMTIPY2bOCqgv7APDRk3MrbazM03u/L0EYo6ol/frp 4ZIEZyibJi/m4g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:06 2025 by rpki-client