This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json) Hash identifier: f9wxAmHlGxv0NJ2MIrgJOnNyjnMzuqtuIw5chtCIyA0= Subject key identifier: D3:A9:19:31:62:11:B7:A4:E8:A5:EF:0E:40:81:78:6D:4A:0E:45:41 Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Certificate serial: 019AF50A272A10F205634F660EE90563B64B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft Manifest number: 139B Signing time: Sat 06 Dec 2025 19:01:14 +0000 Manifest this update: Sat 06 Dec 2025 19:01:14 +0000 Manifest next update: Sun 07 Dec 2025 19:01:14 +0000 Files and hashes: 1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=) 2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: aK2o3hi0f+snbCgbmwxqtSyAkPAHmZy8Hjh7q4uAjI4=) 3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=) 4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:27:2a:10:f2:05:63:4f:66:0e:e9:05:63:b6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Validity Not Before: Dec 6 19:01:14 2025 GMT Not After : Dec 7 19:01:14 2025 GMT Subject: CN=d3a919316211b7a4e8a5ef0e4081786d4a0e4541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:a4:16:cb:2a:88:14:42:0a:23:3a:6d:3b: 22:35:c2:cb:a5:c4:2c:8b:4a:65:8c:fb:22:b3:d8: 01:b1:ab:c9:c0:c7:ea:f9:d4:78:88:d2:e7:05:c1: b4:eb:9c:67:b1:20:b8:ba:19:e4:8b:cb:ea:8a:2a: 8e:76:7e:06:2d:dc:57:29:a0:b8:07:5d:01:3c:14: e7:05:09:b3:fc:ea:7b:1f:c1:be:6e:24:0f:bd:73: af:a9:4b:76:07:66:2c:f8:2d:16:bb:9f:30:2a:7c: 49:dd:9b:e7:cf:d9:21:47:4b:81:28:2e:58:75:73: 89:e9:24:4c:4e:d6:6e:aa:c4:e5:c3:4e:81:53:7c: 80:4e:68:89:0a:c1:9b:39:c7:da:0c:c6:90:b5:00: 4d:3d:e9:91:84:dc:5d:11:43:72:ce:da:89:9e:5c: d5:85:af:c2:bc:30:3c:db:b7:00:f3:55:04:f4:67: 05:6a:02:b7:bb:b8:cc:8d:31:d8:df:68:27:60:1a: 6b:c5:90:a6:66:22:ea:8d:03:c5:5b:ca:f6:25:4c: 22:99:7b:a8:45:12:67:11:2a:4d:6a:e3:8b:7b:5f: d1:57:95:45:ed:c6:75:32:34:95:5f:e4:ec:56:8c: 2f:65:ef:d1:16:d9:55:3f:fd:e2:f4:c0:f6:6f:22: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A9:19:31:62:11:B7:A4:E8:A5:EF:0E:40:81:78:6D:4A:0E:45:41 X509v3 Authority Key Identifier: keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:74:e5:13:84:32:26:c1:09:a0:42:c5:c2:29:ce:a4:e8:e2: 31:1f:61:f8:97:3d:a5:ee:19:49:f5:e8:19:fe:f7:d5:28:e6: 8f:2a:30:94:3b:d7:f4:9c:a7:86:9d:11:24:66:f8:c2:12:ff: 53:31:0a:d0:a2:22:cd:db:99:f6:19:79:61:a3:29:d1:89:4b: 2f:51:b9:c4:6f:81:61:b5:53:78:f4:07:b1:e9:17:49:19:ff: 4d:1d:f6:37:b6:63:13:4f:15:24:d0:48:65:f7:3b:44:c8:bb: 88:f3:69:71:52:5a:c0:e2:48:3f:48:2c:9c:bc:02:e7:f1:eb: b9:5c:ea:3c:83:8f:f1:d7:a8:3b:0b:d5:42:f1:5e:47:10:60: 26:3c:c3:06:8d:40:54:1b:f2:87:d3:d2:35:48:01:c4:86:34: 09:74:0f:b7:6d:5f:ef:06:ee:d0:3d:95:0a:26:d2:6b:b6:fe: e0:12:02:84:94:e0:59:39:74:7e:7a:ca:06:4d:bf:ab:27:2e: f0:71:dd:60:c8:b4:b5:b2:95:de:a0:ec:45:ff:68:b2:b0:1b: 79:98:13:43:6d:a9:92:8c:70:1f:bf:c7:36:63:ed:fb:35:20: 07:87:0e:62:35:4e:3c:a1:9b:69:b5:8b:5a:53:0a:a9:ba:91: 15:d5:a4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CicqEPIFY09mDukFY7ZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm MDNjNGEwHhcNMjUxMjA2MTkwMTE0WhcNMjUxMjA3MTkwMTE0WjAzMTEwLwYDVQQD EyhkM2E5MTkzMTYyMTFiN2E0ZThhNWVmMGU0MDgxNzg2ZDRhMGU0NTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxmkFssqiBRCCiM6bTsiNcLLpcQs i0pljPsis9gBsavJwMfq+dR4iNLnBcG065xnsSC4uhnki8vqiiqOdn4GLdxXKaC4 B10BPBTnBQmz/Op7H8G+biQPvXOvqUt2B2Ys+C0Wu58wKnxJ3Zvnz9khR0uBKC5Y dXOJ6SRMTtZuqsTlw06BU3yATmiJCsGbOcfaDMaQtQBNPemRhNxdEUNyztqJnlzV ha/CvDA827cA81UE9GcFagK3u7jMjTHY32gnYBprxZCmZiLqjQPFW8r2JUwimXuo RRJnESpNauOLe1/RV5VF7cZ1MjSVX+TsVowvZe/RFtlVP/3i9MD2byLi1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOpGTFiEbek6KXvDkCBeG1KDkVBMB8GA1UdIwQY MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3TlE4Qy JsEJoELFwinOpOjiMR9h+Jc9pe4ZSfXoGf731SjmjyowlDvX9Jynhp0RJGb4whL/ UzEK0KIizduZ9hl5YaMp0YlLL1G5xG+BYbVTePQHsekXSRn/TR32N7ZjE08VJNBI Zfc7RMi7iPNpcVJawOJIP0gsnLwC5/HruVzqPIOP8deoOwvVQvFeRxBgJjzDBo1A VBvyh9PSNUgBxIY0CXQPt21f7wbu0D2VCibSa7b+4BIChJTgWTl0fnrKBk2/qycu 8HHdYMi0tbKV3qDsRf9osrAbeZgTQ22pkoxwH7/HNmPt+zUgB4cOYjVOPKGbabWL WlMKqbqRFdWkSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:45 2025 by rpki-client