This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json) Hash identifier: grctX0f5WSaF6xIppPqrsmlXUeReFpSnkFUPIDc5eoo= Subject key identifier: 30:D7:9C:F1:21:E9:00:27:08:0E:3B:19:B7:28:6B:77:94:13:EC:49 Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Certificate serial: 019B23D1AA0190E9B01D800C0732000F98F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft Manifest number: 0300 Signing time: Mon 15 Dec 2025 21:01:41 +0000 Manifest this update: Mon 15 Dec 2025 21:01:41 +0000 Manifest next update: Tue 16 Dec 2025 21:01:41 +0000 Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 2dtDV5e77zRwjj9z4wZtsQCWGq1gWo89lboC9f0Ce0A=) 2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:aa:01:90:e9:b0:1d:80:0c:07:32:00:0f:98:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Validity Not Before: Dec 15 21:01:41 2025 GMT Not After : Dec 16 21:01:41 2025 GMT Subject: CN=30d79cf121e90027080e3b19b7286b779413ec49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:af:81:78:99:5f:11:73:1c:10:cd:14:66: ee:de:bf:f9:ad:29:04:7f:ff:61:f3:8f:14:d2:b9: ad:cb:0d:93:53:ff:51:8f:2b:7a:8e:9b:ea:8c:39: a9:9b:eb:bc:74:8c:4b:9a:e3:bd:a4:3d:07:14:03: 97:d7:f6:31:1e:09:36:0d:77:6f:6e:8d:48:17:b3: 99:e7:00:b3:1e:ae:81:09:67:06:9a:d2:27:c5:1b: 14:14:e4:fc:e5:9d:a0:0d:50:cc:4b:d3:78:e9:ba: c9:92:84:49:6c:dc:d4:b6:de:a9:4a:42:70:a8:32: b0:80:44:61:fa:44:9b:e5:59:55:85:56:13:6b:23: a5:86:b5:c4:e5:76:52:4c:8c:ae:54:e9:4a:9f:0a: cd:55:37:04:7c:49:ac:a6:39:00:4e:20:7a:0b:33: 43:fc:0a:ff:57:b9:08:4b:da:2d:b1:f0:3a:90:9e: 46:7a:3d:c9:c9:e9:4c:50:b4:3b:84:ac:46:52:a1: 31:06:a9:fb:e3:b3:f4:e4:b8:0e:5e:c1:58:5a:04: 6d:54:b5:f0:25:ae:67:e6:01:bb:b2:6e:5a:70:47: 82:03:42:87:31:70:2b:e9:5a:46:cc:9e:f3:e3:4e: 4a:a8:d3:40:df:32:f6:b4:50:2e:2e:fa:2b:42:c6: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:9C:F1:21:E9:00:27:08:0E:3B:19:B7:28:6B:77:94:13:EC:49 X509v3 Authority Key Identifier: keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:b4:30:07:57:35:04:54:ef:a8:b5:67:01:24:42:c0:97: ae:e8:12:f2:88:91:77:88:c4:b5:1f:73:b9:21:3c:92:e6:e2: 8f:58:b0:1c:db:98:b3:1b:04:25:34:ef:e6:9c:b3:ac:23:f8: 61:8c:b8:e0:d2:bc:95:e0:65:18:75:cf:80:05:9b:6f:59:3a: ca:52:c7:e9:53:7e:d0:c3:02:5f:a6:34:e2:5f:c5:66:e7:82: f3:fe:8a:61:56:6e:fe:6d:f5:04:60:52:9d:27:4f:25:b5:01: 4a:80:be:01:00:0b:98:f9:71:7f:54:0d:2f:c7:b0:01:ab:14: ce:27:d1:79:4a:73:31:67:07:fd:33:a4:f0:f2:f0:fd:1b:29: 1b:a3:6c:dd:28:35:6d:70:b6:20:bc:1a:a9:70:e6:69:b2:ab: f8:57:24:0f:f8:48:e5:4d:f1:a5:15:d8:22:27:b5:39:f7:b2: ed:3d:c8:dc:53:23:ea:fe:22:6f:8b:45:a2:b1:56:34:e6:71: 08:71:e3:88:ff:cc:33:af:49:c7:3d:9b:f2:c8:3e:4b:b1:1a: 75:20:42:4c:d1:2d:ec:a6:e4:d7:ef:ac:7d:2c:d0:38:7d:b2: 32:98:0e:b3:99:89:b4:83:fb:fc:8e:1c:21:c7:b1:1b:1c:5f: a3:67:f3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0aoBkOmwHYAMBzIAD5j4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy YTJjMjcwHhcNMjUxMjE1MjEwMTQxWhcNMjUxMjE2MjEwMTQxWjAzMTEwLwYDVQQD EygzMGQ3OWNmMTIxZTkwMDI3MDgwZTNiMTliNzI4NmI3Nzk0MTNlYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6WvgXiZXxFzHBDNFGbu3r/5rSkE f/9h848U0rmtyw2TU/9Rjyt6jpvqjDmpm+u8dIxLmuO9pD0HFAOX1/YxHgk2DXdv bo1IF7OZ5wCzHq6BCWcGmtInxRsUFOT85Z2gDVDMS9N46brJkoRJbNzUtt6pSkJw qDKwgERh+kSb5VlVhVYTayOlhrXE5XZSTIyuVOlKnwrNVTcEfEmspjkATiB6CzND /Ar/V7kIS9otsfA6kJ5Gej3JyelMULQ7hKxGUqExBqn747P05LgOXsFYWgRtVLXw Ja5n5gG7sm5acEeCA0KHMXAr6VpGzJ7z405KqNNA3zL2tFAuLvorQsZvkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDXnPEh6QAnCA47Gbcoa3eUE+xJMB8GA1UdIwQY MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4 LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+q0MAdX NQRU76i1ZwEkQsCXrugS8oiRd4jEtR9zuSE8kubij1iwHNuYsxsEJTTv5pyzrCP4 YYy44NK8leBlGHXPgAWbb1k6ylLH6VN+0MMCX6Y04l/FZueC8/6KYVZu/m31BGBS nSdPJbUBSoC+AQALmPlxf1QNL8ewAasUzifReUpzMWcH/TOk8PLw/RspG6Ns3Sg1 bXC2ILwaqXDmabKr+FckD/hI5U3xpRXYIie1Ofey7T3I3FMj6v4ib4tForFWNOZx CHHjiP/MM69Jxz2b8sg+S7EadSBCTNEt7Kbk1++sfSzQOH2yMpgOs5mJtIP7/I4c IcexGxxfo2fz2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 05:00:08 2025 by rpki-client