This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json) Hash identifier: dIeZcOrnRgzdPPK4eYvniXA7qNxirdkPQuz2VkyDFM4= Subject key identifier: 16:CD:A5:0A:31:DE:AC:AB:C6:13:BD:E6:8F:39:81:C7:6D:BB:42:BF Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019B42B71A84BB97FC21EB909DAB077AEADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:00:54 +0000 Manifest this update: Sun 21 Dec 2025 21:00:54 +0000 Manifest next update: Mon 22 Dec 2025 21:00:54 +0000 Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: x1wr6oEGW1L5h6Olm6gagPpHL80Y20JQpOoTs/CWQRQ=) 2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:1a:84:bb:97:fc:21:eb:90:9d:ab:07:7a:ea:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Dec 21 21:00:54 2025 GMT Not After : Dec 22 21:00:54 2025 GMT Subject: CN=16cda50a31deacabc613bde68f3981c76dbb42bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:59:7a:41:ac:b2:99:ef:51:d7:23:19:64: fc:e4:43:f8:8d:67:64:31:22:92:49:ff:51:5a:c5: 97:53:7d:4b:ff:c8:09:ca:e6:29:d8:04:92:7b:5b: 98:89:9b:99:72:c1:e7:59:5a:54:46:08:4f:11:5b: 89:9b:88:eb:9c:83:dd:9a:ac:59:4e:49:35:de:35: 89:ff:b0:21:8c:bb:21:3d:c6:66:07:24:8e:57:9c: c9:d2:04:4a:46:0e:96:74:6b:b0:b1:4b:87:11:75: 36:70:75:a7:f8:61:ae:d3:b8:8c:0d:0c:c2:a5:71: 2c:39:49:dc:b5:72:cf:fa:74:88:96:b6:6b:08:c1: 4b:8c:92:b0:5b:20:9e:c8:2a:9d:a9:66:4b:4c:20: 0c:90:b5:d8:37:16:f6:52:ab:2d:da:0d:ad:b3:72: fb:ef:b4:28:aa:f0:df:1a:3e:eb:18:32:ee:13:e0: 2b:6e:f7:f2:a9:8a:09:8e:8b:98:c5:14:93:27:57: 27:e6:8c:a6:5b:74:8d:03:75:31:e1:46:53:c7:21: 89:e6:d1:4f:e1:1e:12:2c:21:f1:49:fa:36:09:a1: 2b:04:bf:d4:c8:2f:91:3a:26:39:18:3a:66:d5:fd: 0e:5e:01:50:7d:96:ed:cd:ff:80:a0:31:53:4c:0a: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:A5:0A:31:DE:AC:AB:C6:13:BD:E6:8F:39:81:C7:6D:BB:42:BF X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ba:58:5e:79:22:5a:3a:0c:4e:97:25:9b:5f:2d:3f:4f:90: 73:c3:24:7c:74:34:29:6d:fb:f2:55:d3:4f:c2:53:fa:15:cc: 10:6b:bb:ec:9d:14:d9:cb:11:80:2e:6c:33:34:89:37:a6:5b: 20:a9:69:36:41:25:6d:66:ae:ba:b1:27:74:74:b7:58:b4:c7: 5a:1a:5b:93:91:c2:e9:22:9c:7c:79:85:ea:25:9e:d7:aa:ba: 8d:45:be:25:3d:43:de:aa:47:24:ba:55:3c:39:94:6f:3d:02: 4d:ce:5f:bf:cd:01:2a:21:64:a3:23:2d:3f:bc:28:88:b3:06: d3:42:05:42:43:4d:14:99:27:eb:8c:cc:6a:74:23:0d:bd:c7: 93:9c:7e:d3:41:d6:69:fe:ff:52:da:5b:a7:e7:6c:0a:53:42: 5e:37:a9:46:72:0d:d3:c7:82:f0:cf:f3:b8:60:2e:48:d8:fc: 11:a5:d8:18:f2:07:3a:ae:18:67:cb:8c:3e:b7:05:31:c9:59: cf:ef:e4:76:5b:e4:36:a3:1b:5d:99:5b:ac:60:10:95:91:1d: 41:df:4c:ef:2d:74:f2:06:d6:6b:fc:27:84:a2:2a:24:2e:ab: 60:c3:f8:cf:77:1a:37:fc:78:2a:8a:bc:21:f5:74:64:40:3d: 88:04:23:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxqEu5f8IeuQnasHeuraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjUxMjIxMjEwMDU0WhcNMjUxMjIyMjEwMDU0WjAzMTEwLwYDVQQD EygxNmNkYTUwYTMxZGVhY2FiYzYxM2JkZTY4ZjM5ODFjNzZkYmI0MmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y9ZekGsspnvUdcjGWT85EP4jWdk MSKSSf9RWsWXU31L/8gJyuYp2ASSe1uYiZuZcsHnWVpURghPEVuJm4jrnIPdmqxZ Tkk13jWJ/7AhjLshPcZmBySOV5zJ0gRKRg6WdGuwsUuHEXU2cHWn+GGu07iMDQzC pXEsOUnctXLP+nSIlrZrCMFLjJKwWyCeyCqdqWZLTCAMkLXYNxb2Uqst2g2ts3L7 77QoqvDfGj7rGDLuE+ArbvfyqYoJjouYxRSTJ1cn5oymW3SNA3Ux4UZTxyGJ5tFP 4R4SLCHxSfo2CaErBL/UyC+ROiY5GDpm1f0OXgFQfZbtzf+AoDFTTArUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbNpQox3qyrxhO95o85gcdtu0K/MB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbpYXnki WjoMTpclm18tP0+Qc8MkfHQ0KW378lXTT8JT+hXMEGu77J0U2csRgC5sMzSJN6Zb IKlpNkElbWauurEndHS3WLTHWhpbk5HC6SKcfHmF6iWe16q6jUW+JT1D3qpHJLpV PDmUbz0CTc5fv80BKiFkoyMtP7woiLMG00IFQkNNFJkn64zManQjDb3Hk5x+00HW af7/Utpbp+dsClNCXjepRnIN08eC8M/zuGAuSNj8EaXYGPIHOq4YZ8uMPrcFMclZ z+/kdlvkNqMbXZlbrGAQlZEdQd9M7y108gbWa/wnhKIqJC6rYMP4z3caN/x4Koq8 IfV0ZEA9iAQjQA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:52 2025 by rpki-client