This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json) Hash identifier: yeTiiyxbr9dsZnS/5xIqLBrMQMp8+TwXLBQkUtZHT5M= Subject key identifier: F2:A0:C4:C9:3F:30:5A:8B:48:01:19:73:E7:E1:44:C8:0F:B9:8B:B2 Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2 Certificate serial: 019B1871B5BA7A08045A2F676746DDECF3B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 16:01:03 +0000 Manifest this update: Sat 13 Dec 2025 16:01:03 +0000 Manifest next update: Sun 14 Dec 2025 16:01:03 +0000 Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: pj6HDZV3xVtgS/ezkPgw7j4/WNcCZ1dwmlC8XZcSPRk=) 2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:b5:ba:7a:08:04:5a:2f:67:67:46:dd:ec:f3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2 Validity Not Before: Dec 13 16:01:03 2025 GMT Not After : Dec 14 16:01:03 2025 GMT Subject: CN=f2a0c4c93f305a8b48011973e7e144c80fb98bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:f0:52:a8:84:36:68:b3:bb:1c:24:31:c7: 94:02:ce:c9:a4:23:a7:26:6f:cd:09:55:c1:7d:ec: 4a:01:83:53:6a:eb:f8:51:55:05:f9:a8:d4:29:6d: 00:9e:2d:37:16:4a:c9:cc:be:e0:cb:bd:f1:e8:59: 4e:e6:38:a6:8d:f7:25:66:15:10:9e:7f:bd:fe:cc: d4:1c:fd:d2:fd:75:1f:f2:db:b3:61:5c:34:04:60: 38:81:aa:87:44:ac:6d:6b:07:6e:37:1c:12:8f:04: 3b:95:80:f7:29:7d:db:1c:e0:f6:fc:9a:c4:66:a2: 48:dd:ab:87:0b:e0:3a:a4:cb:ed:77:ef:8b:15:2f: 99:88:09:3d:d0:48:e4:ea:e9:64:07:d7:51:cb:ee: 25:bb:64:81:1c:99:ef:62:94:ac:30:77:29:3e:a3: c1:0b:b3:bf:20:6a:76:d0:f6:d7:e3:97:19:c7:05: ba:2e:5d:68:2e:b5:a1:35:1e:df:07:32:95:52:b4: d8:ce:c4:33:31:9a:4b:af:5a:53:77:b3:db:1d:00: 2f:4b:2f:f8:06:76:1c:c7:c3:83:fd:f7:97:a1:64: e8:a9:45:68:5c:2c:fa:8a:3e:79:6e:75:39:8f:c1: bd:a6:4a:33:50:33:1d:46:a3:08:0f:82:64:4e:2c: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:C4:C9:3F:30:5A:8B:48:01:19:73:E7:E1:44:C8:0F:B9:8B:B2 X509v3 Authority Key Identifier: keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:49:ed:e7:4e:1e:21:8c:5a:9e:32:bb:1f:a7:08:22:98:63: 7d:d8:54:fb:a4:85:a1:e9:a0:34:0a:db:0e:e2:f4:89:41:68: 9f:06:ba:22:2d:91:9e:d3:b6:0c:cb:54:13:1d:0d:96:19:22: da:f6:0c:93:83:43:13:0f:f3:f1:ed:33:d4:59:c2:b6:d7:51: f2:1a:fb:8e:82:f1:62:fd:46:d0:c2:2d:6c:64:6b:d4:93:27: 98:9f:1d:9e:de:82:a6:39:a0:5b:26:18:c2:52:be:a8:e1:b7: 90:e7:3b:48:28:6d:65:ec:9d:26:5c:04:3e:51:b1:b4:1f:ca: 00:19:29:fc:ce:b1:27:1e:46:6f:85:39:2b:92:03:48:07:8c: c1:b3:d8:31:b5:7b:55:f4:91:27:3a:9e:45:67:5d:50:0e:05: c3:da:ea:8c:a9:ce:8b:62:ea:96:29:71:d9:8a:d0:24:e7:43: a8:78:d6:d0:dc:5f:aa:b3:4b:2c:f2:d9:6a:e9:af:49:66:3c: 25:88:f8:5d:ed:a7:db:c1:6e:34:f3:57:5d:b8:47:69:07:3e: 13:f4:53:ee:7e:73:e9:a0:b3:20:42:ab:ee:00:66:d4:66:ce: 47:4b:cc:cd:c1:c2:74:a1:0d:5c:3c:53:0b:c9:d6:6a:1a:31: 83:57:7a:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcbW6eggEWi9nZ0bd7PO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3 OTc1ZTIwHhcNMjUxMjEzMTYwMTAzWhcNMjUxMjE0MTYwMTAzWjAzMTEwLwYDVQQD EyhmMmEwYzRjOTNmMzA1YThiNDgwMTE5NzNlN2UxNDRjODBmYjk4YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMjwUqiENmizuxwkMceUAs7JpCOn Jm/NCVXBfexKAYNTauv4UVUF+ajUKW0Ani03FkrJzL7gy73x6FlO5jimjfclZhUQ nn+9/szUHP3S/XUf8tuzYVw0BGA4gaqHRKxtawduNxwSjwQ7lYD3KX3bHOD2/JrE ZqJI3auHC+A6pMvtd++LFS+ZiAk90Ejk6ulkB9dRy+4lu2SBHJnvYpSsMHcpPqPB C7O/IGp20PbX45cZxwW6Ll1oLrWhNR7fBzKVUrTYzsQzMZpLr1pTd7PbHQAvSy/4 BnYcx8OD/feXoWToqUVoXCz6ij55bnU5j8G9pkozUDMdRqMID4JkTiyXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKgxMk/MFqLSAEZc+fhRMgPuYuyMB8GA1UdIwQY MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0nt504e IYxanjK7H6cIIphjfdhU+6SFoemgNArbDuL0iUFonwa6Ii2RntO2DMtUEx0Nlhki 2vYMk4NDEw/z8e0z1FnCttdR8hr7joLxYv1G0MItbGRr1JMnmJ8dnt6CpjmgWyYY wlK+qOG3kOc7SChtZeydJlwEPlGxtB/KABkp/M6xJx5Gb4U5K5IDSAeMwbPYMbV7 VfSRJzqeRWddUA4Fw9rqjKnOi2Lqlilx2YrQJOdDqHjW0NxfqrNLLPLZaumvSWY8 JYj4Xe2n28FuNPNXXbhHaQc+E/RT7n5z6aCzIEKr7gBm1GbOR0vMzcHCdKENXDxT C8nWahoxg1d6GA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:29 2025 by rpki-client