This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json) Hash identifier: zBy10M8dIB94vRbW/IyODEp0pmr443LIEV/H0y7rl+8= Subject key identifier: 78:50:A5:20:22:BA:53:47:0A:26:9F:C4:CC:11:36:2C:99:65:8F:C3 Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Certificate serial: 019B23640646A3973F6F7CB65E7BDB816499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft Manifest number: 146A Signing time: Mon 15 Dec 2025 19:01:56 +0000 Manifest this update: Mon 15 Dec 2025 19:01:56 +0000 Manifest next update: Tue 16 Dec 2025 19:01:56 +0000 Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 2m0cuEK2FkMroEZNyDTi8huJrOZR8ajDlnZvVRhL6BQ=) 2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:06:46:a3:97:3f:6f:7c:b6:5e:7b:db:81:64:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547 Validity Not Before: Dec 15 19:01:56 2025 GMT Not After : Dec 16 19:01:56 2025 GMT Subject: CN=7850a52022ba53470a269fc4cc11362c99658fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:7d:a5:cf:51:93:40:70:bd:54:69:10:94: 71:82:e4:5d:61:66:74:d6:63:bc:0d:80:e1:d6:3c: 4e:34:2b:51:7c:96:1f:a0:ea:f0:66:cb:31:70:b2: 6e:3b:02:9e:54:3f:fa:e4:ea:64:96:eb:0f:b7:5c: 25:e3:51:35:60:2a:ff:c2:71:1c:e7:3e:b3:f7:0d: e4:3d:0b:a2:50:28:c1:d2:93:3e:6e:c5:27:fd:75: 02:0b:75:64:fb:d0:85:0e:f7:63:62:d3:e4:ec:aa: 2f:43:ff:02:cf:fc:7c:8d:44:5c:93:e4:a6:e4:42: 65:3f:a8:e5:c1:26:8f:99:6d:b4:69:26:3c:22:4f: 00:37:8a:22:e5:93:27:1b:fb:78:3c:3b:e0:cd:f8: 88:0d:37:0e:7d:9d:44:b2:f6:f1:d9:98:c2:21:af: 59:0f:9a:9f:1c:34:62:b9:25:2a:b8:01:96:b0:92: dd:c0:52:d0:32:aa:0e:1f:d0:60:9d:6f:d8:e0:0e: 7f:a7:c9:2d:8d:39:fe:46:6c:29:b3:f2:a4:b1:53: 40:27:80:41:1c:af:36:5e:84:a9:b4:64:99:93:44: b5:9b:5c:95:b3:34:ed:45:f8:52:2a:4d:24:c5:dc: 33:e3:bc:8d:5a:d8:95:91:b3:e9:c2:4d:91:66:2f: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:50:A5:20:22:BA:53:47:0A:26:9F:C4:CC:11:36:2C:99:65:8F:C3 X509v3 Authority Key Identifier: keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:e6:8a:68:c6:93:e0:e5:61:a7:2d:f3:f8:73:8d:a6:3b: f6:66:48:ff:05:93:8d:41:c6:6f:53:84:35:37:e5:a4:67:19: 70:97:66:56:5f:b9:db:1a:ca:aa:8a:f5:05:3d:e9:30:53:f7: 10:32:8a:51:88:f6:b9:be:94:94:fd:0a:4c:1f:14:0d:6a:ac: 2a:ce:2a:fa:36:7f:ac:c9:e0:50:8c:67:2b:e2:4f:d3:c0:13: c1:13:14:cd:44:db:59:f7:c7:6e:ea:f8:d6:19:bb:ee:99:68: 2f:c5:0c:c4:82:2d:d7:e4:fe:69:87:e9:de:b7:8d:5d:5c:68: 7b:23:4b:83:c0:84:1b:fe:18:e7:0c:41:ba:35:cf:8a:4c:59: 98:75:3c:f7:50:34:32:2d:0a:46:01:b0:9f:c0:83:15:b6:a2: 64:c5:e2:09:72:ee:7b:34:37:db:84:e2:8a:7d:fa:19:35:77: df:e4:01:da:a5:e2:8d:ae:cc:98:f1:0a:02:1d:f9:87:12:fe: 13:40:d0:71:34:dc:69:41:eb:16:cc:ae:69:6c:a6:6d:3a:1a: 01:48:19:23:cb:4e:ca:a6:da:ef:33:44:5d:30:a0:6c:b9:64: 8b:37:21:7f:4a:a7:ff:1b:09:6b:23:bf:a6:c5:00:30:49:52: cd:e9:0b:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZAZGo5c/b3y2XnvbgWSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx YTA1NDcwHhcNMjUxMjE1MTkwMTU2WhcNMjUxMjE2MTkwMTU2WjAzMTEwLwYDVQQD Eyg3ODUwYTUyMDIyYmE1MzQ3MGEyNjlmYzRjYzExMzYyYzk5NjU4ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY59pc9Rk0BwvVRpEJRxguRdYWZ0 1mO8DYDh1jxONCtRfJYfoOrwZssxcLJuOwKeVD/65OpklusPt1wl41E1YCr/wnEc 5z6z9w3kPQuiUCjB0pM+bsUn/XUCC3Vk+9CFDvdjYtPk7KovQ/8Cz/x8jURck+Sm 5EJlP6jlwSaPmW20aSY8Ik8AN4oi5ZMnG/t4PDvgzfiIDTcOfZ1Esvbx2ZjCIa9Z D5qfHDRiuSUquAGWsJLdwFLQMqoOH9BgnW/Y4A5/p8ktjTn+Rmwps/KksVNAJ4BB HK82XoSptGSZk0S1m1yVszTtRfhSKk0kxdwz47yNWtiVkbPpwk2RZi8ADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhQpSAiulNHCiafxMwRNiyZZY/DMB8GA1UdIwQY MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgDmimjG k+DlYact8/hzjaY79mZI/wWTjUHGb1OENTflpGcZcJdmVl+52xrKqor1BT3pMFP3 EDKKUYj2ub6UlP0KTB8UDWqsKs4q+jZ/rMngUIxnK+JP08ATwRMUzUTbWffHbur4 1hm77ploL8UMxIIt1+T+aYfp3reNXVxoeyNLg8CEG/4Y5wxBujXPikxZmHU891A0 Mi0KRgGwn8CDFbaiZMXiCXLuezQ324Tiin36GTV33+QB2qXija7MmPEKAh35hxL+ E0DQcTTcaUHrFsyuaWymbToaAUgZI8tOyqba7zNEXTCgbLlkizchf0qn/xsJayO/ psUAMElSzekLwA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:24:40 2025 by rpki-client