This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json) Hash identifier: nS2+EBZPH0BIo1xDFQuhoZh40TNdTpec9kVzKv1bOus= Subject key identifier: B4:B9:48:34:FE:0B:F0:E2:25:58:41:E3:1E:B5:2A:41:BF:48:E6:E4 Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Certificate serial: 019B066B96465F352862BE43CEBEC536CABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft Manifest number: 13A4 Signing time: Wed 10 Dec 2025 04:01:12 +0000 Manifest this update: Wed 10 Dec 2025 04:01:12 +0000 Manifest next update: Thu 11 Dec 2025 04:01:12 +0000 Files and hashes: 1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=) 2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: 1kLRCe1VpjKxu2K8Hg1V+Xgsbz7WJUm5cc8dOnE9yVM=) 3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=) 4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:96:46:5f:35:28:62:be:43:ce:be:c5:36:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Validity Not Before: Dec 10 04:01:12 2025 GMT Not After : Dec 11 04:01:12 2025 GMT Subject: CN=b4b94834fe0bf0e2255841e31eb52a41bf48e6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:c0:19:5f:8d:77:81:3e:4a:9f:75:41:39: 15:62:45:38:03:8b:63:79:c2:f9:97:ee:cb:08:0e: c5:25:84:39:f8:25:e5:91:ff:f8:f7:e2:6e:f7:9e: 1c:ca:8b:fe:28:71:15:ec:6f:2b:86:31:8d:98:c1: e9:22:14:1d:cb:18:ff:f2:8f:64:11:c6:49:4d:cc: d1:39:a4:15:32:b9:ee:53:40:34:41:66:00:ad:14: 39:4c:91:d1:5c:1e:a2:8e:9c:be:eb:ac:9f:fd:2e: 09:0f:10:5d:9f:a9:c3:12:8d:52:83:5e:bf:4e:81: a9:4c:d4:98:db:b4:94:92:97:49:d7:98:e0:4b:51: 87:c1:ed:61:77:23:d7:c5:be:99:df:bc:59:ec:09: 86:70:9d:2b:91:9c:28:56:1d:90:05:d8:ff:43:63: 5f:88:85:55:00:a6:14:d5:0a:f0:77:79:2d:0d:04: 0d:20:93:b1:59:ee:af:3b:b9:a5:27:90:68:18:1b: 1c:65:b4:cd:1d:1d:d8:72:f1:2b:27:4d:a7:ff:f4: 02:f2:4e:d1:8f:70:1e:39:8a:bc:74:9c:0d:ef:b4: b0:60:67:6e:60:fd:2f:80:15:63:e2:71:2f:ed:1b: 23:43:47:c0:25:7f:62:c8:68:64:0f:49:b5:a0:13: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B9:48:34:FE:0B:F0:E2:25:58:41:E3:1E:B5:2A:41:BF:48:E6:E4 X509v3 Authority Key Identifier: keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:65:fc:3b:85:8f:f5:57:9a:47:ee:67:7e:53:83:a0:f6: a8:3f:f4:5f:41:a1:1c:2e:d8:54:e1:a2:1a:47:96:15:48:a7: 52:98:c7:63:dd:aa:df:a5:58:86:33:16:97:96:43:d0:7b:5a: c5:8e:50:49:8b:cf:49:10:2c:a2:1f:23:50:b5:46:1c:32:57: 90:62:8f:3f:26:e5:83:a9:e3:a7:a2:54:bd:47:56:e4:f7:15: 5c:a4:f7:4a:d5:5b:02:e0:1d:77:56:de:77:1e:1f:1b:d6:9e: 78:8f:4a:f2:da:63:e8:1c:e0:2d:9b:c5:7d:29:39:e0:8f:52: fe:85:9f:c7:08:20:40:5e:45:89:f1:e1:b0:81:d9:49:ed:3a: bd:8e:7c:11:e3:74:d9:9e:69:0c:36:45:80:1d:f6:b6:45:4b: 1a:17:1b:2c:df:c0:d6:35:12:0b:7a:ac:1c:e1:94:5f:55:dd: 51:28:83:08:b6:8d:8b:2b:f3:45:9a:a0:52:ef:cb:78:79:d5: 33:d8:93:00:7d:0f:2e:f3:47:49:88:2b:65:03:75:cf:ef:a2: 6d:19:b0:92:2c:1a:cb:d7:03:6b:64:f0:9c:8d:27:5d:42:9e: ca:a5:9c:b8:6f:9c:6d:d9:ed:f6:bc:be:58:7f:c6:ae:92:93: d4:c0:bb:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa5ZGXzUoYr5Dzr7FNsq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm MDNjNGEwHhcNMjUxMjEwMDQwMTEyWhcNMjUxMjExMDQwMTEyWjAzMTEwLwYDVQQD EyhiNGI5NDgzNGZlMGJmMGUyMjU1ODQxZTMxZWI1MmE0MWJmNDhlNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4bAGV+Nd4E+Sp91QTkVYkU4A4tj ecL5l+7LCA7FJYQ5+CXlkf/49+Ju954cyov+KHEV7G8rhjGNmMHpIhQdyxj/8o9k EcZJTczROaQVMrnuU0A0QWYArRQ5TJHRXB6ijpy+66yf/S4JDxBdn6nDEo1Sg16/ ToGpTNSY27SUkpdJ15jgS1GHwe1hdyPXxb6Z37xZ7AmGcJ0rkZwoVh2QBdj/Q2Nf iIVVAKYU1Qrwd3ktDQQNIJOxWe6vO7mlJ5BoGBscZbTNHR3YcvErJ02n//QC8k7R j3AeOYq8dJwN77SwYGduYP0vgBVj4nEv7RsjQ0fAJX9iyGhkD0m1oBOOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS5SDT+C/DiJVhB4x61KkG/SObkMB8GA1UdIwQY MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAftl/DuF j/VXmkfuZ35Tg6D2qD/0X0GhHC7YVOGiGkeWFUinUpjHY92q36VYhjMWl5ZD0Hta xY5QSYvPSRAsoh8jULVGHDJXkGKPPyblg6njp6JUvUdW5PcVXKT3StVbAuAdd1be dx4fG9aeeI9K8tpj6BzgLZvFfSk54I9S/oWfxwggQF5FifHhsIHZSe06vY58EeN0 2Z5pDDZFgB32tkVLGhcbLN/A1jUSC3qsHOGUX1XdUSiDCLaNiyvzRZqgUu/LeHnV M9iTAH0PLvNHSYgrZQN1z++ibRmwkiway9cDa2TwnI0nXUKeyqWcuG+cbdnt9ry+ WH/GrpKT1MC7UQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:21 2025 by rpki-client