This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json) Hash identifier: 1YBR3NYMc5MCPDiC/OvbVfk8O9I8FQgYEBZbH+IHTg0= Subject key identifier: EE:AD:88:5E:65:28:CF:0B:74:FB:9B:32:9D:08:76:AA:AF:BD:0A:DF Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019B21AB7AAA4EF039F4909E088DC25F974A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 11:00:44 +0000 Manifest this update: Mon 15 Dec 2025 11:00:44 +0000 Manifest next update: Tue 16 Dec 2025 11:00:44 +0000 Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: n8NZ2JpS15fGK5v+WaL1boCvPB/3H+V2bVO96AKBMl0=) 2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=) 3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:7a:aa:4e:f0:39:f4:90:9e:08:8d:c2:5f:97:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Dec 15 11:00:44 2025 GMT Not After : Dec 16 11:00:44 2025 GMT Subject: CN=eead885e6528cf0b74fb9b329d0876aaafbd0adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:a4:03:e8:a7:af:67:14:7f:74:76:71:4b: 87:43:fd:b1:8d:31:2b:3d:49:12:9b:fb:bd:3f:f7: a2:73:4d:57:98:87:07:c6:06:75:d3:5d:34:12:eb: 79:e3:10:14:95:c3:20:11:ea:9c:78:f5:70:ad:c7: af:f5:59:f2:64:51:bf:7e:a2:fe:40:c0:6f:76:a3: 84:8e:d8:cf:60:28:b0:1c:2f:58:ca:96:29:29:5e: 1e:de:39:a7:55:cd:9e:b1:6a:6b:35:aa:68:86:ac: 8e:50:65:31:df:3d:76:8a:25:29:90:1a:50:8c:8d: a0:14:05:61:3a:52:98:dc:72:f0:02:68:ad:6d:10: e0:72:9f:41:fa:33:0b:d5:a8:fb:84:49:5e:9c:49: e1:33:7a:2f:5f:bd:7c:e9:0a:45:5c:84:59:ac:76: 49:ab:f8:91:f8:3c:41:43:5f:93:2d:b3:34:f1:49: a6:2a:5f:fa:dd:4f:09:ee:d0:95:97:a2:ba:99:a5: 08:94:b6:28:e3:4c:b5:ec:e3:64:32:44:86:d8:42: b5:3e:d8:b4:80:07:ab:0a:56:d6:29:37:6e:ba:ca: b3:02:f2:a1:bc:80:20:83:a0:dc:19:cc:83:2d:ea: d0:92:a0:60:5b:08:0b:fe:dd:e7:ec:33:ea:65:7e: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AD:88:5E:65:28:CF:0B:74:FB:9B:32:9D:08:76:AA:AF:BD:0A:DF X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:30:3d:45:84:1a:ff:5c:aa:ad:e2:c6:e8:0d:c9:ff:a3:ae: 22:36:b8:b9:4f:45:1d:2e:cf:11:66:60:a3:db:88:d4:ac:f1: e2:9f:51:fe:56:f0:88:05:87:e2:e8:ff:f2:8c:40:a4:2d:78: 51:37:e2:4c:6d:a9:81:b9:ba:ee:5a:13:07:3d:32:cb:f8:ed: ee:b7:3a:c5:42:8f:f0:a6:ba:b3:c0:b3:1b:bc:13:ea:30:64: ce:c2:8e:4a:3f:43:fd:46:54:6c:f3:bc:86:07:4f:63:3b:db: f8:40:de:6d:79:09:90:75:eb:b0:8c:e6:f4:80:67:1c:5a:e5: 20:8a:4c:64:d4:59:18:24:34:8d:c0:4f:39:9d:c9:6a:0e:4a: cd:f4:7d:73:39:27:0d:bc:ad:18:d5:6a:47:e6:a5:86:ab:ae: ea:5c:aa:5a:f4:2d:7c:46:ea:ae:5c:da:6c:cc:c6:34:c8:1d: b3:30:74:e9:5a:3c:b9:cf:1a:22:80:35:dc:ea:df:35:0e:1f: a6:8e:bd:cc:ff:13:59:62:3e:7b:a0:72:09:70:da:a6:67:22: fb:5f:b2:07:19:c6:bd:ce:ab:6c:79:86:a7:d5:1d:6a:ff:f2: 0a:4f:5b:c9:c8:b9:7a:96:a5:18:cc:49:f5:72:3a:b5:e5:06: 1b:d3:63:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq3qqTvA59JCeCI3CX5dKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjUxMjE1MTEwMDQ0WhcNMjUxMjE2MTEwMDQ0WjAzMTEwLwYDVQQD EyhlZWFkODg1ZTY1MjhjZjBiNzRmYjliMzI5ZDA4NzZhYWFmYmQwYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7OkA+inr2cUf3R2cUuHQ/2xjTEr PUkSm/u9P/eic01XmIcHxgZ10100Eut54xAUlcMgEeqcePVwrcev9VnyZFG/fqL+ QMBvdqOEjtjPYCiwHC9YypYpKV4e3jmnVc2esWprNapohqyOUGUx3z12iiUpkBpQ jI2gFAVhOlKY3HLwAmitbRDgcp9B+jML1aj7hElenEnhM3ovX7186QpFXIRZrHZJ q/iR+DxBQ1+TLbM08UmmKl/63U8J7tCVl6K6maUIlLYo40y17ONkMkSG2EK1Pti0 gAerClbWKTduusqzAvKhvIAgg6DcGcyDLerQkqBgWwgL/t3n7DPqZX76VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6tiF5lKM8LdPubMp0IdqqvvQrfMB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjA9RYQa /1yqreLG6A3J/6OuIja4uU9FHS7PEWZgo9uI1Kzx4p9R/lbwiAWH4uj/8oxApC14 UTfiTG2pgbm67loTBz0yy/jt7rc6xUKP8Ka6s8CzG7wT6jBkzsKOSj9D/UZUbPO8 hgdPYzvb+EDebXkJkHXrsIzm9IBnHFrlIIpMZNRZGCQ0jcBPOZ3Jag5KzfR9czkn DbytGNVqR+alhquu6lyqWvQtfEbqrlzabMzGNMgdszB06Vo8uc8aIoA13OrfNQ4f po69zP8TWWI+e6ByCXDapmci+1+yBxnGvc6rbHmGp9Udav/yCk9byci5epalGMxJ 9XI6teUGG9NjMw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:57 2025 by rpki-client