This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json) Hash identifier: THlN4mPiOS5vKBoh/NI4nFYA6BttH9LFpfBScRNcgaE= Subject key identifier: 24:3C:B3:FD:99:CF:50:EA:6F:4A:0F:54:2C:B9:02:25:52:51:EC:75 Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51 Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51 Certificate serial: 019B413702F54DC2C75D80A556DEA0109D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft Manifest number: 0748 Signing time: Sun 21 Dec 2025 14:01:22 +0000 Manifest this update: Sun 21 Dec 2025 14:01:22 +0000 Manifest next update: Mon 22 Dec 2025 14:01:22 +0000 Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=) 2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: lknY/HEoxjVTf0k5pGJjO01ZkPC/WjP7eWuWaPWqFww=) 3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:02:f5:4d:c2:c7:5d:80:a5:56:de:a0:10:9d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51 Validity Not Before: Dec 21 14:01:22 2025 GMT Not After : Dec 22 14:01:22 2025 GMT Subject: CN=243cb3fd99cf50ea6f4a0f542cb902255251ec75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:79:23:c6:81:77:60:bd:75:e0:64:c6:4e: 44:f6:0e:7e:b3:6c:61:4d:70:91:4f:3d:69:9b:25: 28:b5:c9:9d:d4:1b:66:92:ee:11:e1:58:97:e6:c2: 17:94:84:e4:b6:7a:ef:3d:d7:96:a4:d2:4a:08:e0: e3:5c:53:bf:3c:0a:d4:49:ee:7b:1a:65:8f:ee:8e: df:bf:30:3b:1e:5f:c7:68:eb:b0:d0:5a:ea:d5:62: 28:44:1f:23:a1:12:32:16:9f:80:4e:fc:84:87:3f: 24:1a:6c:da:98:c3:3a:cd:c4:0c:ff:51:d2:60:ad: 06:c6:00:c5:d2:ad:fb:e4:f6:93:3c:02:72:16:b1: 2f:e3:1c:87:f7:47:9c:4b:c9:ec:ff:4f:ff:12:87: 95:5d:cc:27:03:60:0d:8b:d9:4a:64:40:67:30:4a: 66:31:39:6e:35:9d:74:af:4b:42:1e:11:7b:7a:46: b7:09:c2:87:56:a6:dc:95:40:eb:d2:dd:79:53:3b: 8f:26:6c:ff:2f:e5:0c:94:7b:ee:d7:b3:7b:a2:e8: ef:83:16:af:8b:36:ad:46:ad:4b:0b:fb:ab:2e:18: 50:04:91:0c:c3:84:1c:20:b4:8e:c5:35:04:84:0a: 06:9d:fd:76:2e:e3:71:32:94:fe:ef:34:1f:cc:11: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:B3:FD:99:CF:50:EA:6F:4A:0F:54:2C:B9:02:25:52:51:EC:75 X509v3 Authority Key Identifier: keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e5:75:38:2b:da:82:68:75:b6:58:dc:1b:e3:47:93:5f:1b: ec:82:64:ad:3e:da:1b:ef:f2:64:00:95:41:18:a2:c3:06:3a: 2d:86:d4:1d:eb:44:ca:29:45:b8:44:3c:ec:b3:79:58:24:97: fe:22:e9:7e:bf:b5:45:aa:22:4e:f9:0d:5d:1e:5c:90:08:12: 6c:4e:c8:26:d1:f6:c9:42:08:3e:03:33:d7:e1:c2:ad:91:be: b6:8d:4f:5f:bd:8b:3a:0e:ee:9e:eb:df:86:85:4a:e2:1f:a9: ca:b9:3e:90:da:f1:f3:67:fa:b0:0c:3a:7a:6d:da:d0:64:8f: 81:dc:31:d4:bd:78:3d:cf:96:5f:0e:58:48:2f:9c:a8:6e:8c: 64:37:a4:2a:41:3b:1b:17:2e:80:2d:6d:d4:a9:6f:f6:1e:e3: e5:8c:1e:2e:cb:43:06:cc:dd:8e:60:c9:5f:22:b6:73:75:ca: cc:1d:7c:31:e0:64:34:44:5f:fc:06:48:a8:fb:46:dd:99:ef: 30:0e:3f:b6:31:bd:2c:66:69:07:6b:25:bb:4b:bc:5d:39:63: 22:a1:84:ec:d3:0a:dc:78:be:d3:31:80:03:d9:58:1e:50:bb: 30:ff:e0:9a:31:8e:b3:70:0b:f5:0d:71:34:2a:eb:03:7c:5c: bc:17:9a:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwL1TcLHXYClVt6gEJ2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzgxYzgwOTc0MzdjZDE3OWYzMTkxODNjMDI4MmVhNmNk MWNhNTEwHhcNMjUxMjIxMTQwMTIyWhcNMjUxMjIyMTQwMTIyWjAzMTEwLwYDVQQD EygyNDNjYjNmZDk5Y2Y1MGVhNmY0YTBmNTQyY2I5MDIyNTUyNTFlYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mV5I8aBd2C9deBkxk5E9g5+s2xh TXCRTz1pmyUotcmd1Btmku4R4ViX5sIXlITktnrvPdeWpNJKCODjXFO/PArUSe57 GmWP7o7fvzA7Hl/HaOuw0Frq1WIoRB8joRIyFp+ATvyEhz8kGmzamMM6zcQM/1HS YK0GxgDF0q375PaTPAJyFrEv4xyH90ecS8ns/0//EoeVXcwnA2ANi9lKZEBnMEpm MTluNZ10r0tCHhF7eka3CcKHVqbclUDr0t15UzuPJmz/L+UMlHvu17N7oujvgxav izatRq1LC/urLhhQBJEMw4QcILSOxTUEhAoGnf12LuNxMpT+7zQfzBGREQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ8s/2Zz1Dqb0oPVCy5AiVSUex1MB8GA1UdIwQY MBaAFAXIHICXQ3zRefMZGDwCgups0cpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQt OTc0ZmQyMzliMGVkLzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQtOTc0ZmQyMzliMGVk LzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+V1OCva gmh1tljcG+NHk18b7IJkrT7aG+/yZACVQRiiwwY6LYbUHetEyilFuEQ87LN5WCSX /iLpfr+1RaoiTvkNXR5ckAgSbE7IJtH2yUIIPgMz1+HCrZG+to1PX72LOg7unuvf hoVK4h+pyrk+kNrx82f6sAw6em3a0GSPgdwx1L14Pc+WXw5YSC+cqG6MZDekKkE7 GxcugC1t1Klv9h7j5YweLstDBszdjmDJXyK2c3XKzB18MeBkNERf/AZIqPtG3Znv MA4/tjG9LGZpB2slu0u8XTljIqGE7NMK3Hi+0zGAA9lYHlC7MP/gmjGOs3AL9Q1x NCrrA3xcvBeaJA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:59 2025 by rpki-client