This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json) Hash identifier: LAIK+XQcDSGFWA+D6nnVl+6papbE8TwRxM0sRZvxpaU= Subject key identifier: 16:2B:DF:84:23:0F:DC:B2:02:1B:14:01:10:55:E7:33:FB:51:2F:E7 Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019AF352CCD1F31BE0668DE0587691471D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: wcDFFf/suPRP/F7yhR7LwyfQ1sh/WAcTlsNuprrHe20=) 2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=) 3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cc:d1:f3:1b:e0:66:8d:e0:58:76:91:47:1d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=162bdf84230fdcb2021b14011055e733fb512fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:ca:d9:26:fa:0f:8d:fd:18:70:52:1c:12: 7c:ef:eb:d2:f8:f0:40:45:e2:8f:d5:41:10:b6:03: 27:1f:af:5a:da:f7:f0:cd:c7:13:00:d1:6f:6d:f8: 2a:9d:66:05:18:a0:4e:1b:f4:f3:a1:bf:94:69:38: 84:ca:d6:28:81:d0:b6:cc:01:59:07:6b:46:34:f6: 8e:ac:63:b7:49:42:70:f8:32:65:7c:b5:9d:a4:2e: 1d:96:a6:7e:23:de:5c:cc:3c:ff:a8:0c:ce:bf:18: a4:9b:3c:ee:38:27:4d:f2:41:c8:cc:f5:ff:f5:0d: 15:3a:6d:91:da:36:f8:3b:b6:8a:59:7e:b3:e6:f2: 6f:60:f3:ff:f1:84:33:9c:dd:09:95:1c:8a:35:6d: 7f:d1:be:47:0e:01:ed:a4:65:10:f2:d0:e4:80:21: f8:56:c9:e7:d6:ed:a7:bd:72:10:43:b9:26:c3:fc: a9:21:e6:ec:0e:ce:65:76:cb:29:06:53:e7:9b:44: dc:d2:c7:6c:c1:1a:aa:48:26:e6:13:62:7d:06:5a: d3:c8:84:e3:61:47:5d:24:72:a2:c5:33:31:50:12: b8:d4:be:a2:75:8a:d6:30:31:29:14:dd:02:e5:59: 14:75:b4:38:f7:e2:1a:11:bf:fb:d7:91:a4:c0:a0: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:DF:84:23:0F:DC:B2:02:1B:14:01:10:55:E7:33:FB:51:2F:E7 X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d8:1f:e6:a1:49:0c:50:bb:d4:ee:d6:63:eb:d1:8f:67:8a: 30:aa:fd:75:57:4c:55:e0:25:b8:e3:c1:48:49:c4:55:73:d9: d4:19:e2:0f:99:5d:4d:95:93:cc:d4:49:5e:d1:2f:57:03:6c: 24:43:51:42:e3:28:9b:6a:6e:59:ba:cf:6c:4f:3d:02:12:22: 51:56:bb:10:66:68:a1:26:c4:54:d9:00:b2:8e:4a:12:48:e1: 2d:aa:67:b4:47:34:a7:43:7a:e3:b8:83:6c:5a:80:4b:70:8c: e8:2c:98:57:63:0f:18:03:d7:66:fe:4f:05:d6:2d:93:b0:5e: 5d:af:96:fa:98:68:a7:86:33:40:a2:a6:63:2d:bf:b4:99:47: 79:5d:f0:7f:d1:cc:36:19:9e:5b:bb:a2:d0:aa:da:1f:3f:ab: fa:8f:5b:e9:19:95:f5:f4:bd:fa:d2:7d:12:c3:13:4c:8f:ca: 6b:22:10:4b:74:05:64:2b:bc:81:e7:91:c9:a8:ac:b3:ce:f6: b6:17:c3:90:6e:af:25:f2:f7:22:af:7f:c4:2e:ea:00:88:6b: fd:43:09:a4:e1:c7:15:02:59:51:d7:59:2c:d5:63:e7:53:bc: 61:d7:d3:79:fd:14:20:bd:bb:9c:fa:72:8e:aa:3d:4a:0f:1d: 8d:4b:19:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUszR8xvgZo3gWHaRRx1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EygxNjJiZGY4NDIzMGZkY2IyMDIxYjE0MDExMDU1ZTczM2ZiNTEyZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvK2Sb6D439GHBSHBJ87+vS+PBA ReKP1UEQtgMnH69a2vfwzccTANFvbfgqnWYFGKBOG/Tzob+UaTiEytYogdC2zAFZ B2tGNPaOrGO3SUJw+DJlfLWdpC4dlqZ+I95czDz/qAzOvxikmzzuOCdN8kHIzPX/ 9Q0VOm2R2jb4O7aKWX6z5vJvYPP/8YQznN0JlRyKNW1/0b5HDgHtpGUQ8tDkgCH4 Vsnn1u2nvXIQQ7kmw/ypIebsDs5ldsspBlPnm0Tc0sdswRqqSCbmE2J9BlrTyITj YUddJHKixTMxUBK41L6idYrWMDEpFN0C5VkUdbQ49+IaEb/715GkwKAppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYr34QjD9yyAhsUARBV5zP7US/nMB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNgf5qFJ DFC71O7WY+vRj2eKMKr9dVdMVeAluOPBSEnEVXPZ1BniD5ldTZWTzNRJXtEvVwNs JENRQuMom2puWbrPbE89AhIiUVa7EGZooSbEVNkAso5KEkjhLapntEc0p0N647iD bFqAS3CM6CyYV2MPGAPXZv5PBdYtk7BeXa+W+phop4YzQKKmYy2/tJlHeV3wf9HM NhmeW7ui0KraHz+r+o9b6RmV9fS9+tJ9EsMTTI/KayIQS3QFZCu8geeRyaiss872 thfDkG6vJfL3Iq9/xC7qAIhr/UMJpOHHFQJZUddZLNVj51O8YdfTef0UIL27nPpy jqo9Sg8djUsZng== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:59 2025 by rpki-client