This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json) Hash identifier: WImskSe5BE7ReEmNrowHuTqphvM0/WcIVOErfHhPXT4= Subject key identifier: 2A:86:AB:AB:4D:B4:4A:D2:8F:B8:14:D2:E3:60:4E:26:42:0A:86:EC Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Certificate serial: 019B334460A7676422E258CDEF2E3615A0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft Manifest number: 0308 Signing time: Thu 18 Dec 2025 21:01:17 +0000 Manifest this update: Thu 18 Dec 2025 21:01:17 +0000 Manifest next update: Fri 19 Dec 2025 21:01:17 +0000 Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: xtfbYaxssMGFbVCxnDt7OmvChg69PnyEjowWwcnCO4Q=) 2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:60:a7:67:64:22:e2:58:cd:ef:2e:36:15:a0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27 Validity Not Before: Dec 18 21:01:17 2025 GMT Not After : Dec 19 21:01:17 2025 GMT Subject: CN=2a86abab4db44ad28fb814d2e3604e26420a86ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:71:d6:49:bb:1c:bb:95:96:38:21:0a:80: 34:0b:47:5e:20:a1:56:fd:95:30:32:e9:c8:7f:7c: a7:c5:3a:c2:c8:ed:45:bd:4b:92:c3:e1:1a:dc:4a: 76:e7:52:ec:a7:41:c7:5e:47:e4:11:39:18:24:6c: 90:25:57:4e:ad:c3:f3:e7:08:b8:d1:46:d1:9a:10: 45:9a:c0:29:12:8c:6b:2d:f1:70:f8:10:ed:1d:a7: 5e:71:4b:35:39:8b:93:1a:6d:19:6c:78:2f:b4:f9: c2:19:35:62:d5:b4:0a:6b:69:11:c8:dc:86:c9:f7: 1c:78:11:f5:c8:4b:90:25:e0:fe:66:56:f5:be:a6: 34:c6:d7:3a:87:01:ca:47:4f:dd:9c:dd:41:7d:01: 62:d0:27:bd:dd:b3:6f:c1:30:5a:8e:7f:b9:68:89: 64:ef:71:fc:ec:64:d9:17:cb:ec:06:85:0a:d0:87: 7f:44:df:d4:28:c4:da:8e:10:85:01:53:c4:a8:05: fa:66:13:7c:cd:cb:d7:47:62:cd:3d:b3:29:cb:4f: e1:af:48:e6:be:0e:e3:42:8a:78:0b:03:ce:7a:73: 89:36:3b:c5:9f:f9:e9:d7:6b:69:62:71:ee:b6:3f: 61:80:28:b7:be:f4:d8:a0:18:6f:0c:6b:3d:7a:07: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:86:AB:AB:4D:B4:4A:D2:8F:B8:14:D2:E3:60:4E:26:42:0A:86:EC X509v3 Authority Key Identifier: keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ec:2a:ff:50:01:dc:2d:a4:39:a7:d1:a8:f8:ec:9b:9b:7c: 91:ea:dd:07:1a:3b:52:80:31:38:43:86:64:2d:90:14:10:1a: 83:d4:bc:27:1f:ae:55:da:bf:7b:25:4a:01:78:bb:af:2c:27: fe:51:35:e1:8e:d6:07:96:40:05:6c:67:d3:cb:2f:25:7d:5d: 03:66:97:bd:1a:a3:68:8f:52:2d:5d:d9:ae:53:4b:23:b2:57: 62:8f:d3:11:0a:8c:95:1d:c4:5a:7d:9d:78:d1:1b:85:1d:f4: 57:28:ee:70:d1:63:d3:ab:58:a0:ad:f8:f3:3a:f2:70:a6:8e: 54:c5:64:1b:ce:ac:d5:30:32:83:e7:18:7d:7e:e0:d4:c1:45: cf:55:f3:ef:9c:2e:16:3e:bc:5b:b0:92:04:b9:a6:22:08:56: 90:68:af:16:b8:cd:a4:50:a9:15:49:ac:d5:0c:15:34:b5:aa: 93:c4:89:8c:db:30:be:7d:d8:10:08:86:de:d3:b4:81:31:21: 6f:b3:08:4d:95:50:c0:13:ce:43:d1:04:63:99:e7:82:24:06: 22:31:c3:c2:8f:91:c6:46:c6:07:21:ce:f7:37:6b:82:b9:c8: 91:d4:2d:31:cb:f4:8d:35:ba:06:5c:ec:81:6f:f7:e3:35:0f: c4:54:1f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGCnZ2Qi4ljN7y42FaCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy YTJjMjcwHhcNMjUxMjE4MjEwMTE3WhcNMjUxMjE5MjEwMTE3WjAzMTEwLwYDVQQD EygyYTg2YWJhYjRkYjQ0YWQyOGZiODE0ZDJlMzYwNGUyNjQyMGE4NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBx1km7HLuVljghCoA0C0deIKFW /ZUwMunIf3ynxTrCyO1FvUuSw+Ea3Ep251Lsp0HHXkfkETkYJGyQJVdOrcPz5wi4 0UbRmhBFmsApEoxrLfFw+BDtHadecUs1OYuTGm0ZbHgvtPnCGTVi1bQKa2kRyNyG yfcceBH1yEuQJeD+Zlb1vqY0xtc6hwHKR0/dnN1BfQFi0Ce93bNvwTBajn+5aIlk 73H87GTZF8vsBoUK0Id/RN/UKMTajhCFAVPEqAX6ZhN8zcvXR2LNPbMpy0/hr0jm vg7jQop4CwPOenOJNjvFn/np12tpYnHutj9hgCi3vvTYoBhvDGs9egdY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqGq6tNtErSj7gU0uNgTiZCCobsMB8GA1UdIwQY MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4 LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOwq/1AB 3C2kOafRqPjsm5t8kerdBxo7UoAxOEOGZC2QFBAag9S8Jx+uVdq/eyVKAXi7rywn /lE14Y7WB5ZABWxn08svJX1dA2aXvRqjaI9SLV3ZrlNLI7JXYo/TEQqMlR3EWn2d eNEbhR30VyjucNFj06tYoK348zrycKaOVMVkG86s1TAyg+cYfX7g1MFFz1Xz75wu Fj68W7CSBLmmIghWkGivFrjNpFCpFUms1QwVNLWqk8SJjNswvn3YEAiG3tO0gTEh b7MITZVQwBPOQ9EEY5nngiQGIjHDwo+RxkbGByHO9zdrgrnIkdQtMcv0jTW6Blzs gW/34zUPxFQfWg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:31 2025 by rpki-client