This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json) Hash identifier: L0AOTLncPpnYocs6TfKraRjjMIA6E7mSQ1lomJg8dKQ= Subject key identifier: 4D:34:2E:CD:2A:57:AF:1D:11:0F:85:0C:0E:76:45:57:E1:82:9B:AB Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Certificate serial: 019B432545ED2360732012127E705127DD63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft Manifest number: 128B Signing time: Sun 21 Dec 2025 23:01:14 +0000 Manifest this update: Sun 21 Dec 2025 23:01:14 +0000 Manifest next update: Mon 22 Dec 2025 23:01:14 +0000 Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: eqhHOa/ufcAI1nQe1AIWDe0Q8hrQcx3uZ5Yq9ZO3UGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:45:ed:23:60:73:20:12:12:7e:70:51:27:dd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Validity Not Before: Dec 21 23:01:14 2025 GMT Not After : Dec 22 23:01:14 2025 GMT Subject: CN=4d342ecd2a57af1d110f850c0e764557e1829bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:0f:56:ab:26:36:2b:15:c2:d1:3f:ae:3e: 73:e7:2c:e8:d0:18:98:83:4c:b9:40:67:16:e6:19: 14:b2:9a:b6:d6:45:1e:11:b9:fd:02:c6:26:70:ee: 59:c0:6f:6f:90:fa:95:50:3c:09:4c:9c:15:58:e8: e1:48:72:f9:29:42:92:a6:e2:61:a5:7d:b2:f4:a7: 12:a1:52:d0:84:d4:39:2c:b1:ec:bb:bb:fb:32:22: d6:ec:d4:73:27:43:5d:eb:ac:c0:12:b0:35:40:5b: f8:dc:27:ee:a6:1d:81:20:b6:67:0f:49:a5:a8:2f: d4:85:46:9f:40:52:38:a2:70:32:82:72:36:53:fe: 38:8b:ae:83:77:74:e3:2e:0a:c4:2a:d0:6c:26:0f: 2f:4a:2e:29:70:06:81:ab:70:2e:b2:3e:00:67:08: 64:26:34:a0:7d:07:f9:ca:d1:e4:25:e0:14:b5:d9: 8d:dd:d9:6d:51:ca:a6:89:40:23:a2:cc:a6:93:d9: bf:ae:1d:a0:63:36:fe:b2:f9:85:45:3f:3e:3d:72: 70:93:5f:9f:9f:fb:85:88:69:90:55:81:64:6f:3f: 66:72:6c:11:6d:b3:1b:27:8d:de:ec:12:7d:bc:1f: b0:42:b1:10:c0:a5:fa:e4:13:bf:df:ee:13:c7:67: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:34:2E:CD:2A:57:AF:1D:11:0F:85:0C:0E:76:45:57:E1:82:9B:AB X509v3 Authority Key Identifier: keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fb:3d:c8:1e:84:96:66:d5:a5:0a:5c:c7:a8:d2:a6:b2:3b: 1c:ac:19:af:89:de:2b:ca:6b:77:70:38:f7:c5:9f:55:09:1e: c9:ac:f1:ed:7f:51:9d:51:dd:06:f7:cd:79:15:0e:7c:d3:55: 51:ec:0a:ed:9e:f0:56:4d:2e:65:d9:f0:6d:8c:39:73:a6:d0: 37:1e:fb:c7:b2:07:ca:94:66:32:81:3e:9e:07:e9:9b:a6:cd: 7d:2c:c1:3e:7f:0d:f9:7d:e8:d6:3a:19:bb:5e:50:33:3d:70: 23:9f:84:48:b5:f0:44:f0:f2:3e:71:f3:05:14:5e:13:e3:a4: b6:28:1f:8b:21:6c:84:6d:5a:53:ed:ac:84:3e:7f:9e:7b:13: 48:36:8f:5f:6d:61:59:95:21:fb:37:17:e2:cb:db:23:e5:dd: 58:de:0b:c1:8b:e8:5a:32:94:bb:d6:dd:f3:39:c4:20:53:e6: 10:e6:b6:0e:94:1a:bd:9b:ad:66:4e:18:a1:76:ee:39:23:d4: f8:9b:87:d4:bf:02:c1:53:0b:55:9a:98:39:74:05:87:02:25: 25:a5:4b:61:83:b6:71:23:8c:ef:1e:18:53:9e:0a:dd:e6:bb: 8e:f7:ac:e0:84:83:5f:e7:2a:77:10:26:9b:ca:3e:00:d0:fb: 1c:1d:7d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJUXtI2BzIBISfnBRJ91jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMGM2NzQwNDBkMmZkZmE4YjllZTI3YmE4NmM3NDdkNmIw ZWNiNjcwHhcNMjUxMjIxMjMwMTE0WhcNMjUxMjIyMjMwMTE0WjAzMTEwLwYDVQQD Eyg0ZDM0MmVjZDJhNTdhZjFkMTEwZjg1MGMwZTc2NDU1N2UxODI5YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwysPVqsmNisVwtE/rj5z5yzo0BiY g0y5QGcW5hkUspq21kUeEbn9AsYmcO5ZwG9vkPqVUDwJTJwVWOjhSHL5KUKSpuJh pX2y9KcSoVLQhNQ5LLHsu7v7MiLW7NRzJ0Nd66zAErA1QFv43Cfuph2BILZnD0ml qC/UhUafQFI4onAygnI2U/44i66Dd3TjLgrEKtBsJg8vSi4pcAaBq3Ausj4AZwhk JjSgfQf5ytHkJeAUtdmN3dltUcqmiUAjosymk9m/rh2gYzb+svmFRT8+PXJwk1+f n/uFiGmQVYFkbz9mcmwRbbMbJ43e7BJ9vB+wQrEQwKX65BO/3+4Tx2egbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE00Ls0qV68dEQ+FDA52RVfhgpurMB8GA1UdIwQY MBaAFG4MZ0BA0v36i57ie6hsdH1rDstnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgt ZTI2NDgzM2FlMTc1LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgtZTI2NDgzM2FlMTc1 LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPs9yB6E lmbVpQpcx6jSprI7HKwZr4neK8prd3A498WfVQkeyazx7X9RnVHdBvfNeRUOfNNV UewK7Z7wVk0uZdnwbYw5c6bQNx77x7IHypRmMoE+ngfpm6bNfSzBPn8N+X3o1joZ u15QMz1wI5+ESLXwRPDyPnHzBRReE+OktigfiyFshG1aU+2shD5/nnsTSDaPX21h WZUh+zcX4svbI+XdWN4LwYvoWjKUu9bd8znEIFPmEOa2DpQavZutZk4YoXbuOSPU +JuH1L8CwVMLVZqYOXQFhwIlJaVLYYO2cSOM7x4YU54K3ea7jves4ISDX+cqdxAm m8o+AND7HB19+w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:05:08 2025 by rpki-client