This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json) Hash identifier: kFlO+ldAJwBH9NoVF6kixyX/LwBZdLXL7V9xzXYtMTU= Subject key identifier: FC:8B:44:BA:57:2D:3A:1A:CD:61:15:5F:CD:EF:A0:86:77:1F:79:8B Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76 Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76 Certificate serial: 019B41A455579AB0BFACE3685459759410B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft Manifest number: 0B76 Signing time: Sun 21 Dec 2025 16:00:47 +0000 Manifest this update: Sun 21 Dec 2025 16:00:47 +0000 Manifest next update: Mon 22 Dec 2025 16:00:47 +0000 Files and hashes: 1: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (hash: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=) 2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: qLBZAq9CMqwU4K6Ytw00BHkWW4zODCILp210yC3zUjs=) 3: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (hash: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:55:57:9a:b0:bf:ac:e3:68:54:59:75:94:10:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052b864969e9680764899015e163ece77bb4cb76 Validity Not Before: Dec 21 16:00:47 2025 GMT Not After : Dec 22 16:00:47 2025 GMT Subject: CN=fc8b44ba572d3a1acd61155fcdefa086771f798b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:57:3e:e4:fe:ae:92:e4:6c:d8:c1:f6:3e: 60:78:12:89:4e:e4:80:d2:3f:58:75:0d:1b:c6:8c: 38:5d:b3:25:35:c9:da:64:22:65:44:40:cc:86:d1: fc:c3:95:84:6f:12:d2:bc:92:7b:7c:f9:4c:70:f1: 61:51:fe:a3:90:a6:d9:43:4e:b7:58:95:5f:3b:ba: fd:0d:3a:9e:0d:69:af:9f:ae:3d:8b:ec:63:6f:44: f1:b7:56:8e:db:c5:e3:a5:0b:94:22:20:d0:7f:d3: 1c:37:9c:1d:45:cd:56:7a:6e:c9:d5:36:76:13:fd: 31:c4:0a:95:01:dc:98:da:49:5e:a4:f6:e9:a6:9c: 77:69:bd:1b:db:1d:b1:00:d4:8d:c6:ba:47:24:05: 6d:8d:65:40:45:3b:ba:18:20:ae:fe:0d:2b:19:06: 24:4b:8c:a0:66:93:d1:e0:37:44:9b:65:c6:ee:33: ef:0b:67:7b:1c:2a:c3:52:0c:84:fa:d4:e3:0d:3a: c2:d7:cb:cf:3b:b6:eb:95:7e:0b:3d:1a:b6:d1:93: 9d:49:64:ac:18:c9:96:7c:aa:6f:99:77:7b:1e:f3: 1d:94:89:fd:49:9c:d6:be:b1:cb:8a:bc:db:46:21: 7d:f2:13:de:16:79:65:75:ee:39:af:5a:f5:86:55: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8B:44:BA:57:2D:3A:1A:CD:61:15:5F:CD:EF:A0:86:77:1F:79:8B X509v3 Authority Key Identifier: keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:07:a0:e9:99:1d:ed:04:86:c8:2c:7b:0f:90:11:26:c8:54: 54:54:9a:c6:a6:84:42:52:dd:02:d9:2d:91:d8:15:61:8b:88: 40:cd:45:c3:e7:10:df:55:3b:9b:2d:81:3b:51:ff:ed:0b:97: cc:f9:71:22:58:8e:6c:a7:1e:4c:07:5b:c0:7a:58:93:40:19: 29:fb:56:c9:4b:42:5f:98:7a:89:b1:ab:14:b8:01:d1:70:6c: 9b:59:1c:e3:c9:99:db:11:e6:3d:53:06:84:75:71:b1:db:94: 6c:eb:41:a4:17:5b:17:61:04:fe:fb:1e:0e:a1:50:6a:6b:59: 3b:c0:ac:e1:12:b4:93:ea:41:38:c2:ff:ea:0b:d7:4b:6b:d7: 9b:06:cd:53:35:04:19:b2:6e:1e:ce:b9:a5:95:8f:8b:aa:f3: 36:13:42:49:a8:0a:ba:90:a9:e7:6e:c3:54:29:21:f9:cb:32: c5:40:a7:c4:5d:35:eb:41:d3:10:ce:25:28:dd:5d:d4:6d:3f: c2:91:df:a1:78:07:63:1f:7c:50:bd:ca:47:6a:ff:6d:fc:29: 4a:0e:e9:bf:50:20:9b:ce:a4:ec:bb:cc:c8:c9:0c:5c:0f:9f: 71:bf:6d:c4:8e:6d:55:1e:d2:d9:68:ae:27:bd:e4:cf:3c:e2: a7:89:94:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpFVXmrC/rONoVFl1lBC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji NGNiNzYwHhcNMjUxMjIxMTYwMDQ3WhcNMjUxMjIyMTYwMDQ3WjAzMTEwLwYDVQQD EyhmYzhiNDRiYTU3MmQzYTFhY2Q2MTE1NWZjZGVmYTA4Njc3MWY3OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzpXPuT+rpLkbNjB9j5geBKJTuSA 0j9YdQ0bxow4XbMlNcnaZCJlREDMhtH8w5WEbxLSvJJ7fPlMcPFhUf6jkKbZQ063 WJVfO7r9DTqeDWmvn649i+xjb0Txt1aO28XjpQuUIiDQf9McN5wdRc1Wem7J1TZ2 E/0xxAqVAdyY2klepPbpppx3ab0b2x2xANSNxrpHJAVtjWVARTu6GCCu/g0rGQYk S4ygZpPR4DdEm2XG7jPvC2d7HCrDUgyE+tTjDTrC18vPO7brlX4LPRq20ZOdSWSs GMmWfKpvmXd7HvMdlIn9SZzWvrHLirzbRiF98hPeFnllde45r1r1hlXKMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyLRLpXLToazWEVX83voIZ3H3mLMB8GA1UdIwQY MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQeg6Zkd 7QSGyCx7D5ARJshUVFSaxqaEQlLdAtktkdgVYYuIQM1Fw+cQ31U7my2BO1H/7QuX zPlxIliObKceTAdbwHpYk0AZKftWyUtCX5h6ibGrFLgB0XBsm1kc48mZ2xHmPVMG hHVxsduUbOtBpBdbF2EE/vseDqFQamtZO8Cs4RK0k+pBOML/6gvXS2vXmwbNUzUE GbJuHs65pZWPi6rzNhNCSagKupCp527DVCkh+csyxUCnxF0160HTEM4lKN1d1G0/ wpHfoXgHYx98UL3KR2r/bfwpSg7pv1Agm86k7LvMyMkMXA+fcb9txI5tVR7S2Wiu J73kzzzip4mUHg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:50:14 2025 by rpki-client