This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json) Hash identifier: 5Jnrze7z4RayCOSzuPwGykTwobpf7h63PrUTS4TUTGk= Subject key identifier: 83:FE:A7:1A:BB:C1:A5:62:BF:B4:DE:1D:F7:0A:45:13:4E:BB:81:C7 Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7 Certificate serial: 019AF2401F7BF04B739AFA0DB82FB672FA0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: r0eg4XI2Yr6ct081M1C691hc//OCCQXbtp5UQU0plvc=) 2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1f:7b:f0:4b:73:9a:fa:0d:b8:2f:b6:72:fa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=83fea71abbc1a562bfb4de1df70a45134ebb81c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:eb:65:58:15:e2:7f:1e:ee:b9:19:fa:56: bc:6c:50:5e:3a:59:9b:c7:8e:46:9b:6d:41:99:50: 61:3b:79:b9:14:fc:68:84:83:ac:6d:82:d7:b0:ed: 29:6c:8e:21:cd:9e:40:14:8e:3c:18:37:69:31:3c: 13:46:fa:21:b9:b1:53:5d:97:67:5a:b9:48:66:40: 08:37:7f:80:26:0b:d3:93:3f:65:33:6e:42:5d:9a: a1:65:44:81:59:a0:1b:b7:32:8e:e7:cb:06:65:b9: 1c:89:16:fe:19:13:0a:55:73:7d:0e:68:71:4c:51: 67:d1:60:4b:14:00:d6:98:64:e5:78:5d:9e:a7:56: 44:d4:77:2d:18:3a:35:e0:8d:a6:78:42:ad:e1:1b: 17:b1:f2:6b:aa:68:b5:86:e0:8e:b7:57:08:ce:54: 07:0d:d4:fa:b4:99:20:bd:94:b4:8e:38:80:36:7a: e0:10:3d:ee:ab:8d:47:24:af:8e:41:ff:a1:ad:f4: 27:be:31:3e:4b:ac:0d:e7:40:05:ec:4a:03:0e:66: d1:47:4c:f8:91:57:f0:7b:2e:b3:6b:2c:35:d1:1d: 76:0b:3d:2f:1c:0c:29:4f:68:c5:5c:46:c1:3d:2d: d8:c0:df:16:06:02:1e:65:c7:aa:e9:b8:6a:62:ee: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:A7:1A:BB:C1:A5:62:BF:B4:DE:1D:F7:0A:45:13:4E:BB:81:C7 X509v3 Authority Key Identifier: keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:45:36:1e:dd:07:ef:a9:90:78:cf:26:8d:87:49:36:d7: 9a:0e:74:b6:a7:79:fa:94:0d:6a:b8:27:17:f5:19:38:19:96: e7:de:ac:5e:17:c5:69:b1:ad:92:c3:a9:74:7f:8f:b2:f8:31: 95:24:ae:99:00:c5:54:9c:a4:04:24:29:c1:5e:ab:b0:0e:37: c0:89:5e:b2:64:98:e9:68:1a:0b:89:95:4a:c3:2b:7e:69:28: 24:31:72:23:d3:42:af:58:38:b3:45:db:93:a8:8c:a1:74:09: 99:ef:27:3a:77:fd:26:2c:fc:51:6f:d2:26:f6:b4:0b:19:95: c8:3c:dd:4e:6d:18:04:b3:3f:da:b7:2a:ee:ab:2e:83:8f:d6: 70:38:3a:4d:a3:cc:a9:66:6e:66:a6:b2:f1:da:c4:3d:d1:8f: 31:88:1f:ca:55:29:3c:b2:52:05:45:7c:5e:4d:85:fa:c0:34: 9e:4a:d4:bf:e3:13:02:bc:7d:21:ed:64:6c:9c:9c:1e:c2:83: 3e:04:01:cc:37:91:2f:e1:f4:04:23:17:ed:dc:af:fe:f2:89: fc:03:a2:9d:f2:a8:b0:6f:f8:b0:9e:d8:98:a3:52:99:6e:1f: c6:7f:55:58:bd:38:aa:20:3b:cd:ef:ca:de:48:18:b4:3b:ec: 57:47:55:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB978EtzmvoNuC+2cvoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0 NzRkYzcwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg4M2ZlYTcxYWJiYzFhNTYyYmZiNGRlMWRmNzBhNDUxMzRlYmI4MWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAnrZVgV4n8e7rkZ+la8bFBeOlmb x45Gm21BmVBhO3m5FPxohIOsbYLXsO0pbI4hzZ5AFI48GDdpMTwTRvohubFTXZdn WrlIZkAIN3+AJgvTkz9lM25CXZqhZUSBWaAbtzKO58sGZbkciRb+GRMKVXN9Dmhx TFFn0WBLFADWmGTleF2ep1ZE1HctGDo14I2meEKt4RsXsfJrqmi1huCOt1cIzlQH DdT6tJkgvZS0jjiANnrgED3uq41HJK+OQf+hrfQnvjE+S6wN50AF7EoDDmbRR0z4 kVfwey6zayw10R12Cz0vHAwpT2jFXEbBPS3YwN8WBgIeZceq6bhqYu7LqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP+pxq7waViv7TeHfcKRRNOu4HHMB8GA1UdIwQY MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2 LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4BFNh7d B++pkHjPJo2HSTbXmg50tqd5+pQNargnF/UZOBmW596sXhfFabGtksOpdH+Psvgx lSSumQDFVJykBCQpwV6rsA43wIlesmSY6WgaC4mVSsMrfmkoJDFyI9NCr1g4s0Xb k6iMoXQJme8nOnf9Jiz8UW/SJva0CxmVyDzdTm0YBLM/2rcq7qsug4/WcDg6TaPM qWZuZqay8drEPdGPMYgfylUpPLJSBUV8Xk2F+sA0nkrUv+MTArx9Ie1kbJycHsKD PgQBzDeRL+H0BCMX7dyv/vKJ/AOinfKosG/4sJ7YmKNSmW4fxn9VWL04qiA7ze/K 3kgYtDvsV0dVuA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:11 2025 by rpki-client