This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json) Hash identifier: S1xiHajEIis4gkzWGfu4Yv5ZDTf98ahk7S3w8ADhf4M= Subject key identifier: 46:10:41:21:51:55:03:72:24:D8:84:BA:27:9F:4D:E7:B7:6A:AA:1F Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7 Certificate serial: 019B18DFCCCFA31E2896956F5D3D25D633CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 18:01:18 +0000 Manifest this update: Sat 13 Dec 2025 18:01:18 +0000 Manifest next update: Sun 14 Dec 2025 18:01:18 +0000 Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: QwrX6W1siX9XuYHJnppBsMG/XvbphfdX6M4n3jH6fRw=) 2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:cc:cf:a3:1e:28:96:95:6f:5d:3d:25:d6:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7 Validity Not Before: Dec 13 18:01:18 2025 GMT Not After : Dec 14 18:01:18 2025 GMT Subject: CN=461041215155037224d884ba279f4de7b76aaa1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:44:c8:87:8d:e8:90:1c:3c:03:cd:f8:9f: 6e:5f:ff:20:d6:30:28:63:3c:40:c1:c9:a6:35:c5: 24:08:08:84:41:c8:64:48:4a:62:21:ae:29:3b:e5: c8:ef:65:67:b3:39:46:b0:b5:9b:93:11:e2:32:70: 1b:58:49:44:e8:c9:e3:7a:db:f5:8c:42:3e:e3:45: ff:25:36:25:61:69:68:0d:7a:b4:8d:a0:04:87:26: d9:41:4b:56:18:14:4c:96:a0:7e:39:8e:ef:8c:25: 36:df:09:6f:e4:1b:60:a5:57:2f:62:e7:1a:c1:9f: 5f:66:96:ba:e2:ac:a0:c7:66:45:48:dd:61:84:b1: 05:bc:9b:b5:e1:dc:0e:55:61:fd:00:69:ad:06:77: 56:59:f1:dc:2f:b1:c9:4d:86:de:14:c5:15:25:a0: 05:0f:f3:a6:77:7d:08:10:77:53:62:ba:02:76:7a: 3c:e6:1b:9c:c6:d1:6b:bf:53:ed:d6:67:da:b1:85: 17:ea:fa:e2:a3:99:e4:7c:03:59:78:9e:40:20:fd: 97:c3:2a:da:fe:c8:51:b1:12:8c:99:0b:01:2a:42: 76:20:0c:c3:34:8c:54:41:31:c5:b1:55:e8:99:44: 31:9a:6d:bf:d6:55:1c:e0:a4:b1:91:9a:2d:c8:62: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:41:21:51:55:03:72:24:D8:84:BA:27:9F:4D:E7:B7:6A:AA:1F X509v3 Authority Key Identifier: keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b1:3e:40:e0:ce:9b:03:e0:3a:c2:3d:d2:af:2c:48:46:ce: 40:42:08:d8:1f:21:c3:c6:83:80:71:0e:dd:ed:e4:e3:2c:c2: 0e:b5:71:75:87:1d:d4:4b:1c:4b:61:9a:62:8a:fc:bd:3f:7a: ab:67:39:7b:ab:3a:3c:bb:ed:2c:ab:27:36:b7:16:0e:2e:78: 63:05:1b:e5:52:cd:a4:00:e9:a9:2f:ee:14:7f:ac:78:17:6b: ce:93:20:95:f4:f2:c4:3c:4e:b4:7a:d0:c8:b4:59:e6:71:9e: 94:5d:2d:de:ac:02:70:1f:25:56:25:86:55:02:62:1c:29:16: 60:3f:be:20:1d:1d:a4:1c:ab:1e:52:1b:04:e6:09:b4:f5:c8: 0d:16:4c:ab:98:30:7c:0c:1a:9f:24:c9:84:20:d0:c4:dd:50: de:9e:49:54:d3:0e:7e:0c:df:66:6f:35:34:ba:53:8d:00:0c: e6:f7:42:b7:89:ab:56:78:f4:3f:d2:61:ce:86:43:ac:29:c6: d7:f4:25:79:46:a2:a0:fe:3e:55:6a:8e:d7:a0:c3:96:3b:58: 75:ea:56:fb:37:19:ad:64:21:c1:07:ff:93:55:62:16:86:9e: 0a:8b:87:04:ad:dd:c8:0f:a3:96:bf:0f:6e:21:48:4f:f0:46: 88:86:03:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY38zPox4olpVvXT0l1jPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0 NzRkYzcwHhcNMjUxMjEzMTgwMTE4WhcNMjUxMjE0MTgwMTE4WjAzMTEwLwYDVQQD Eyg0NjEwNDEyMTUxNTUwMzcyMjRkODg0YmEyNzlmNGRlN2I3NmFhYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ElEyIeN6JAcPAPN+J9uX/8g1jAo YzxAwcmmNcUkCAiEQchkSEpiIa4pO+XI72VnszlGsLWbkxHiMnAbWElE6Mnjetv1 jEI+40X/JTYlYWloDXq0jaAEhybZQUtWGBRMlqB+OY7vjCU23wlv5BtgpVcvYuca wZ9fZpa64qygx2ZFSN1hhLEFvJu14dwOVWH9AGmtBndWWfHcL7HJTYbeFMUVJaAF D/Omd30IEHdTYroCdno85hucxtFrv1Pt1mfasYUX6vrio5nkfANZeJ5AIP2Xwyra /shRsRKMmQsBKkJ2IAzDNIxUQTHFsVXomUQxmm2/1lUc4KSxkZotyGJw7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYQQSFRVQNyJNiEuiefTee3aqofMB8GA1UdIwQY MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2 LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7E+QODO mwPgOsI90q8sSEbOQEII2B8hw8aDgHEO3e3k4yzCDrVxdYcd1EscS2GaYor8vT96 q2c5e6s6PLvtLKsnNrcWDi54YwUb5VLNpADpqS/uFH+seBdrzpMglfTyxDxOtHrQ yLRZ5nGelF0t3qwCcB8lViWGVQJiHCkWYD++IB0dpByrHlIbBOYJtPXIDRZMq5gw fAwanyTJhCDQxN1Q3p5JVNMOfgzfZm81NLpTjQAM5vdCt4mrVnj0P9JhzoZDrCnG 1/QleUaioP4+VWqO16DDljtYdepW+zcZrWQhwQf/k1ViFoaeCouHBK3dyA+jlr8P biFIT/BGiIYD1g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:46 2025 by rpki-client