This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json) Hash identifier: qtJKG1Oqg6bSh5FhRXQ5elBy0J5cc9KlRRBUvI+Bdz0= Subject key identifier: AC:84:B1:B1:2E:76:FD:79:73:86:EB:35:A5:DE:72:CF:F7:50:93:95 Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019AF389EF932B4A247A067DF8C0EFC13E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: 6qXsiHF0K21WF8ccnfC/t538EakF2+G+g+Iy/DXfInI=) 2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ef:93:2b:4a:24:7a:06:7d:f8:c0:ef:c1:3e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=ac84b1b12e76fd797386eb35a5de72cff7509395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:37:65:8b:99:3c:35:c4:d5:7c:01:b8:2d: 09:cc:10:a2:45:31:ca:00:17:b2:28:f4:be:a2:85: e8:e8:56:22:c6:ac:bb:4a:0f:13:c3:de:bd:5b:26: 62:4d:c5:50:ba:4b:c7:45:4a:88:71:53:76:bf:00: 3d:95:b3:fb:ad:89:92:fd:89:23:d5:1e:3f:6c:5c: 30:b5:0b:20:4b:7a:d8:e4:83:f4:0c:cc:a0:e4:12: 4e:95:a3:6b:b4:54:3a:ad:3b:e9:8c:9d:59:98:e9: 32:7a:02:7d:9f:b8:11:fb:50:4c:09:6e:f5:5f:c9: 96:97:05:ab:38:ea:bc:59:53:4e:85:6f:a0:41:1b: 8f:b3:6c:f6:a1:86:00:44:d4:f0:41:98:4f:9e:9b: 33:5c:a6:5b:d0:01:ec:be:47:dd:5b:54:fc:05:0b: 01:d9:38:89:bc:43:b7:11:98:ca:78:7f:31:7e:5b: fc:53:e0:6d:ec:80:9a:2c:67:07:bd:7d:18:f8:dc: 02:9d:cf:f3:ef:13:1b:9d:d8:7d:ba:88:97:e2:67: fe:50:26:26:60:f3:c6:1f:ee:4a:91:5e:8e:55:69: 2b:c2:e6:d2:5b:d0:90:6e:15:ea:0a:be:f7:79:49: b0:8f:22:38:26:8b:7a:01:3a:47:b2:34:a1:fa:32: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:84:B1:B1:2E:76:FD:79:73:86:EB:35:A5:DE:72:CF:F7:50:93:95 X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2a:32:b5:b4:b5:f2:07:c1:93:97:d8:9e:f3:39:f0:34:da: a7:29:ac:75:b4:c0:3f:25:e3:c9:87:52:2e:dc:49:dd:5c:e7: a9:ce:18:ce:5d:b7:16:8a:56:fc:8a:a5:8a:5c:38:d2:9f:77: 07:ed:ec:53:9d:34:e0:06:60:26:6c:f2:62:93:c5:e5:a5:58: e5:0f:fb:d5:6e:76:f0:ce:c6:fc:98:06:48:85:0e:d0:18:14: e1:13:21:16:07:e4:ec:cd:42:45:64:38:cd:cf:e4:db:9e:83: 68:ae:ff:9d:72:75:be:0b:2b:2b:99:69:8a:0d:4c:c4:1f:84: d7:2f:9c:73:9d:77:51:a9:05:cc:64:67:3f:f5:ed:da:05:62: 45:49:91:bf:42:a0:b8:f2:91:e5:80:b7:85:6a:83:26:c8:43: ca:28:e1:1e:cc:42:10:5c:bd:9b:7e:5d:0f:47:d0:29:b2:e6: 71:5a:14:a2:66:04:b2:58:e0:7a:90:11:93:61:73:c5:ae:1c: 5e:54:93:8b:11:b2:75:fe:70:12:00:87:78:f0:34:53:18:6f: 9c:ed:d3:a4:e8:c5:7e:00:71:cf:5d:4d:87:54:34:76:fc:e0: 96:26:55:9e:ff:cc:ab:ec:cf:96:d4:8c:9d:5f:75:fe:7c:55: 9a:43:65:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzie+TK0okegZ9+MDvwT5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD EyhhYzg0YjFiMTJlNzZmZDc5NzM4NmViMzVhNWRlNzJjZmY3NTA5Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzg3ZYuZPDXE1XwBuC0JzBCiRTHK ABeyKPS+ooXo6FYixqy7Sg8Tw969WyZiTcVQukvHRUqIcVN2vwA9lbP7rYmS/Ykj 1R4/bFwwtQsgS3rY5IP0DMyg5BJOlaNrtFQ6rTvpjJ1ZmOkyegJ9n7gR+1BMCW71 X8mWlwWrOOq8WVNOhW+gQRuPs2z2oYYARNTwQZhPnpszXKZb0AHsvkfdW1T8BQsB 2TiJvEO3EZjKeH8xflv8U+Bt7ICaLGcHvX0Y+NwCnc/z7xMbndh9uoiX4mf+UCYm YPPGH+5KkV6OVWkrwubSW9CQbhXqCr73eUmwjyI4Jot6ATpHsjSh+jKk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyEsbEudv15c4brNaXecs/3UJOVMB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyoytbS1 8gfBk5fYnvM58DTapymsdbTAPyXjyYdSLtxJ3Vznqc4Yzl23FopW/Iqlilw40p93 B+3sU5004AZgJmzyYpPF5aVY5Q/71W528M7G/JgGSIUO0BgU4RMhFgfk7M1CRWQ4 zc/k256DaK7/nXJ1vgsrK5lpig1MxB+E1y+cc513UakFzGRnP/Xt2gViRUmRv0Kg uPKR5YC3hWqDJshDyijhHsxCEFy9m35dD0fQKbLmcVoUomYEsljgepARk2Fzxa4c XlSTixGydf5wEgCHePA0UxhvnO3TpOjFfgBxz11Nh1Q0dvzgliZVnv/Mq+zPltSM nV91/nxVmkNl3A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:33 2025 by rpki-client