This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json) Hash identifier: /x9y2t6+hmv8cswafQQuPg4l1zkZKBP7Gff8l0mYEG8= Subject key identifier: BA:FA:AE:82:FA:01:9C:4D:4C:DC:2D:FA:EB:B7:16:BB:0C:00:C7:C8 Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406 Certificate serial: 019AF1D20386752760B3FB5BF4949C4EBFD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=) 2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: lDlNgy5AYwg7ETgToh5krFCECbAkeMyIAjEsjWtZ018=) 3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=) 4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:03:86:75:27:60:b3:fb:5b:f4:94:9c:4e:bf:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=bafaae82fa019c4d4cdc2dfaebb716bb0c00c7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:bf:90:f6:2c:e0:be:84:a1:17:ec:62:f0: 1a:81:1b:67:b4:42:00:d6:aa:0b:d7:33:d4:36:29: 79:44:79:90:db:66:08:5d:e4:25:52:58:b4:8b:01: 73:cb:a7:c1:4f:fc:55:10:d7:54:79:92:6c:3e:0f: 2e:ce:ce:08:ee:d7:68:03:78:41:9d:c6:23:76:58: 63:2c:e9:a4:62:5f:f3:ca:1b:b0:5b:ca:73:42:92: 81:80:0c:25:ea:41:ad:44:04:48:58:d5:33:05:05: 31:fc:c1:f6:83:63:a4:82:e8:63:b0:2c:71:f9:3f: 55:21:73:5e:c5:47:b2:51:9e:6d:78:62:81:92:5f: 4c:28:36:38:83:9e:bc:b5:6b:80:86:71:2a:31:ce: 59:ae:36:20:47:aa:44:e1:0d:ae:52:e5:6d:4a:14: 26:0e:a8:d4:b4:e8:da:82:2f:42:67:3e:90:87:1f: 0e:f8:10:21:fc:92:80:10:1a:95:f1:fe:1b:5f:a5: 5f:14:87:ba:6d:2f:60:2e:dd:19:b6:45:fb:1a:1a: cf:b5:06:be:65:bb:c9:ab:8a:8b:4a:e3:00:df:77: 29:25:a0:4e:a5:6e:2a:b8:1c:99:72:4e:7a:98:f9: ae:c1:44:54:ee:da:15:ca:33:0b:88:a0:43:19:ce: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:AE:82:FA:01:9C:4D:4C:DC:2D:FA:EB:B7:16:BB:0C:00:C7:C8 X509v3 Authority Key Identifier: keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:93:43:d5:ab:6d:8d:e5:f2:1c:de:cd:bd:4d:f8:63:0f:3f: f1:fd:1f:9e:eb:82:97:44:a9:e1:d4:2d:b1:9c:d0:77:87:a9: 65:af:73:39:f6:1b:6d:76:da:19:bc:0c:83:f8:b3:be:54:c4: 71:10:de:8a:83:d9:5e:ef:52:a8:dc:c4:c2:c8:65:b8:13:e4: fb:44:99:29:08:ff:59:46:47:16:02:6c:6c:ea:f4:62:41:16: 1b:76:26:72:10:8a:20:30:b6:9a:cd:2b:a4:fb:24:27:38:20: bf:f7:59:76:f0:07:06:af:4a:a0:04:66:c3:dd:a1:40:b8:81: 36:e7:37:9a:60:91:c0:b9:34:22:dc:b6:8a:c8:c4:27:5d:38: 77:ff:f9:0b:84:d4:e0:0e:e6:12:12:c3:cb:68:dd:41:ea:d6: 0b:81:6a:b1:74:66:94:27:eb:a4:9e:77:99:05:82:d5:f2:4a: 70:cf:ea:40:0d:6b:55:ed:60:1d:b7:16:08:d8:5d:bc:28:a1: 03:f4:56:7b:e4:2c:53:02:24:bb:fe:0d:1d:9f:b6:76:01:e3: ea:2d:24:2f:74:49:58:a3:0b:2c:80:5f:f2:f5:ec:e9:ea:2d: 05:98:b3:7a:53:4e:09:d4:6c:17:9b:16:f9:63:e0:60:c3:c3: e3:15:fd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gOGdSdgs/tb9JScTr/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh MWY0MDYwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EyhiYWZhYWU4MmZhMDE5YzRkNGNkYzJkZmFlYmI3MTZiYjBjMDBjN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD2/kPYs4L6EoRfsYvAagRtntEIA 1qoL1zPUNil5RHmQ22YIXeQlUli0iwFzy6fBT/xVENdUeZJsPg8uzs4I7tdoA3hB ncYjdlhjLOmkYl/zyhuwW8pzQpKBgAwl6kGtRARIWNUzBQUx/MH2g2OkguhjsCxx +T9VIXNexUeyUZ5teGKBkl9MKDY4g568tWuAhnEqMc5ZrjYgR6pE4Q2uUuVtShQm DqjUtOjagi9CZz6Qhx8O+BAh/JKAEBqV8f4bX6VfFIe6bS9gLt0ZtkX7GhrPtQa+ ZbvJq4qLSuMA33cpJaBOpW4quByZck56mPmuwURU7toVyjMLiKBDGc6XHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr6roL6AZxNTNwt+uu3FrsMAMfIMB8GA1UdIwQY MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt MGM2NGRlYmU5ZWM0LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0 LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpND1att jeXyHN7NvU34Yw8/8f0fnuuCl0Sp4dQtsZzQd4epZa9zOfYbbXbaGbwMg/izvlTE cRDeioPZXu9SqNzEwshluBPk+0SZKQj/WUZHFgJsbOr0YkEWG3YmchCKIDC2ms0r pPskJzggv/dZdvAHBq9KoARmw92hQLiBNuc3mmCRwLk0Ity2isjEJ104d//5C4TU 4A7mEhLDy2jdQerWC4FqsXRmlCfrpJ53mQWC1fJKcM/qQA1rVe1gHbcWCNhdvCih A/RWe+QsUwIku/4NHZ+2dgHj6i0kL3RJWKMLLIBf8vXs6eotBZizelNOCdRsF5sW +WPgYMPD4xX9/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:18 2025 by rpki-client