This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json) Hash identifier: ZBTg3r6WrlmLqSsC9Z1Jm6XcO3f56or/UMUyDV9I5ls= Subject key identifier: B0:24:6F:54:AD:2E:08:CC:D7:D2:B7:87:B3:38:0A:90:0E:42:93:C3 Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51 Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151 Certificate serial: 019AF2AD6483C857A32A267494BBCE5D28CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft Manifest number: 0E5F Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: tGo9hWmvue6EWPdOBpB5Aub3Yf/f9Yz6sXz73L5t/N0=) 2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:64:83:c8:57:a3:2a:26:74:94:bb:ce:5d:28:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=b0246f54ad2e08ccd7d2b787b3380a900e4293c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:85:7b:6b:5d:4b:20:ec:a5:e7:30:1a:81: c9:6f:fa:39:35:66:78:7a:c2:89:3e:ef:e6:22:3c: 01:d3:b2:f4:36:e6:cc:9f:76:86:15:5e:e2:9a:24: f2:8c:fd:89:e1:6d:ce:50:ae:4e:e4:7e:b2:fb:cd: 86:95:ae:7d:40:77:59:cb:d3:14:f8:ef:b5:80:65: ad:8c:4b:c0:23:ca:b3:92:d2:ec:ad:c7:57:6a:63: 7d:9d:28:b4:01:2d:7c:a3:97:ff:21:2e:e2:99:f3: 75:07:c2:6b:95:42:aa:fb:b5:c5:a4:6d:b2:72:23: 12:26:53:87:30:b2:7c:99:96:5e:3a:f5:5d:c0:66: d8:28:db:79:ba:1f:8a:f4:c8:e4:38:d4:69:0a:99: c5:e8:58:9c:6e:96:77:d8:5a:57:f8:4e:e1:d7:d8: cd:68:34:7c:4b:3b:3d:f8:28:b6:38:54:76:54:0f: bc:48:95:83:eb:c9:a1:0f:e3:66:b9:5a:b7:8a:69: 4b:3c:38:8c:37:27:27:17:c1:7a:fd:3e:89:4c:c2: 85:7f:ff:c6:7c:31:e6:31:74:e6:85:bc:52:f4:7a: 45:85:9c:29:e4:2c:28:09:f2:fc:31:a9:c3:7d:77: ec:5f:8b:73:3c:96:bc:c4:3b:25:f4:97:7b:60:38: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:24:6F:54:AD:2E:08:CC:D7:D2:B7:87:B3:38:0A:90:0E:42:93:C3 X509v3 Authority Key Identifier: keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:aa:ee:d7:43:c4:73:09:86:0f:a4:49:c8:e0:09:9f:82:e7: 84:58:bf:36:64:0f:b2:8b:0d:70:b4:1e:b2:6a:b0:5c:5a:ca: a7:8c:7b:f6:e4:94:e9:a7:86:76:4e:5d:9f:d4:45:6b:f0:6c: 46:83:a8:7f:d1:50:0e:37:03:f4:5b:7d:11:3f:2e:99:28:fb: fe:c1:fc:dc:67:ce:26:59:2f:f5:22:2b:ce:44:8a:f4:47:a2: ac:90:ce:b0:35:03:03:20:20:f2:6b:2e:6b:eb:47:38:83:db: d9:2b:10:56:8d:52:09:bb:54:82:16:35:10:44:28:6b:c2:95: ff:33:d4:17:16:80:5c:df:b9:82:ad:36:8d:4b:9c:94:ab:08: fb:19:5a:bc:42:07:c7:48:32:bc:3a:ce:0a:06:cf:88:b4:81: af:ec:56:ff:70:25:bc:af:99:a6:9a:6a:35:33:00:c3:82:c6: c6:20:c4:8d:fe:d0:f5:eb:6e:95:9b:42:48:fb:fe:f3:fb:3a: fd:dd:f2:cc:de:62:3f:ec:e9:21:47:2e:be:e2:c0:a1:43:4f: d0:61:f1:79:e0:34:76:57:7e:18:63:29:16:96:97:52:7a:a0: b8:77:fe:9e:2e:73:bd:d7:0e:eb:1a:d5:97:d5:06:28:99:89: a4:ae:e7:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWSDyFejKiZ0lLvOXSjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTRjMThkMmUyMGRiNjRmZjlkYjUyOTJiMzc5ZjUzOGI3 NmExNTEwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EyhiMDI0NmY1NGFkMmUwOGNjZDdkMmI3ODdiMzM4MGE5MDBlNDI5M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHGFe2tdSyDspecwGoHJb/o5NWZ4 esKJPu/mIjwB07L0NubMn3aGFV7imiTyjP2J4W3OUK5O5H6y+82Gla59QHdZy9MU +O+1gGWtjEvAI8qzktLsrcdXamN9nSi0AS18o5f/IS7imfN1B8JrlUKq+7XFpG2y ciMSJlOHMLJ8mZZeOvVdwGbYKNt5uh+K9MjkONRpCpnF6FicbpZ32FpX+E7h19jN aDR8Szs9+Ci2OFR2VA+8SJWD68mhD+NmuVq3imlLPDiMNycnF8F6/T6JTMKFf//G fDHmMXTmhbxS9HpFhZwp5CwoCfL8ManDfXfsX4tzPJa8xDsl9Jd7YDhnIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAkb1StLgjM19K3h7M4CpAOQpPDMB8GA1UdIwQY MBaAFAakwY0uINtk/521KSs3n1OLdqFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4Yjkt NTMyZWQyNTY3ZTliLzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4YjktNTMyZWQyNTY3ZTli LzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6ru10PE cwmGD6RJyOAJn4LnhFi/NmQPsosNcLQesmqwXFrKp4x79uSU6aeGdk5dn9RFa/Bs RoOof9FQDjcD9Ft9ET8umSj7/sH83GfOJlkv9SIrzkSK9EeirJDOsDUDAyAg8msu a+tHOIPb2SsQVo1SCbtUghY1EEQoa8KV/zPUFxaAXN+5gq02jUuclKsI+xlavEIH x0gyvDrOCgbPiLSBr+xW/3AlvK+ZpppqNTMAw4LGxiDEjf7Q9etulZtCSPv+8/s6 /d3yzN5iP+zpIUcuvuLAoUNP0GHxeeA0dld+GGMpFpaXUnqguHf+ni5zvdcO6xrV l9UGKJmJpK7nHA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:22 2025 by rpki-client