This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json) Hash identifier: Zd7jE5/VylJHtpWMnGx98HcrrqZ/MOS5XBnzdIdK7nc= Subject key identifier: D8:22:B6:43:88:B4:84:59:A3:D6:B8:66:B0:E3:D8:C3:54:70:B7:9A Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Certificate serial: 019B34C4CBC5689E5EC05B779BB0CD46BE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft Manifest number: 13BC Signing time: Fri 19 Dec 2025 04:01:10 +0000 Manifest this update: Fri 19 Dec 2025 04:01:10 +0000 Manifest next update: Sat 20 Dec 2025 04:01:10 +0000 Files and hashes: 1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=) 2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: XK8bkTEkpn8LC+qJ8ciM2w97uSgAYQEJuQ8p59hOkHE=) 3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=) 4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:cb:c5:68:9e:5e:c0:5b:77:9b:b0:cd:46:be:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Validity Not Before: Dec 19 04:01:10 2025 GMT Not After : Dec 20 04:01:10 2025 GMT Subject: CN=d822b64388b48459a3d6b866b0e3d8c35470b79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:55:65:bc:05:41:2e:7e:8d:d1:53:3e:ee: a2:53:7b:30:59:cc:89:aa:66:e3:15:23:11:6b:94: b2:86:1a:65:c4:71:98:28:b5:cd:cf:7d:70:23:43: 73:5a:d9:bc:ec:0d:13:e6:ad:b3:bd:3a:2e:38:d6: 73:7d:84:33:a8:f8:27:c2:29:b5:58:a1:45:4f:7b: 63:41:f1:a7:5e:ab:bc:5c:84:27:a9:80:c6:70:16: a8:ec:6c:09:f7:40:bf:93:07:57:5d:14:30:fd:0a: 29:61:d8:e6:f5:03:c9:0e:04:bf:f4:53:00:88:08: 8d:49:49:9d:b8:87:ad:a5:a0:fc:ad:8e:35:fc:01: 35:21:33:2d:46:08:07:2f:1c:d6:18:47:51:0c:f7: 69:7c:c1:60:d7:ae:84:09:72:4b:b8:b8:39:70:ed: 69:e9:1d:1f:91:e0:dc:c6:e3:2a:c4:e3:d8:95:05: 1b:f3:16:02:ea:03:2c:92:06:a6:a7:a3:c3:2f:b3: 6d:18:aa:57:43:b8:ee:b2:eb:e3:47:c7:43:b3:8e: 50:0e:a9:75:ae:2b:d1:19:f8:c0:7e:81:93:55:72: ba:d9:dd:9d:7c:d7:d4:29:94:56:4f:ce:04:ec:79: a7:30:9a:38:cd:c3:52:cc:84:14:23:66:30:ba:8d: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:22:B6:43:88:B4:84:59:A3:D6:B8:66:B0:E3:D8:C3:54:70:B7:9A X509v3 Authority Key Identifier: keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1d:6c:f9:f7:68:d6:ee:12:79:6e:46:83:a6:7c:ba:4f:97: 4d:43:45:ae:ab:d5:c1:11:04:39:39:0e:bc:c7:a5:af:b0:39: 3f:3b:77:4e:2f:97:13:b0:e3:da:fb:3b:3c:77:e0:14:67:33: 5c:ca:4a:83:2b:70:6b:c0:83:54:d8:d0:cc:9d:30:7b:e4:b3: c2:92:c8:aa:ec:29:a9:fc:40:2a:69:f4:d5:ef:e2:4d:ad:39: 59:e6:c4:a9:95:4c:47:a6:ca:89:59:b4:e0:34:03:ef:e2:4a: 51:c3:3f:21:8c:a1:e7:de:ce:eb:64:89:ae:9b:1c:13:80:4f: d5:4b:7f:5d:1f:ce:b1:29:47:0c:a3:53:a0:07:23:4b:18:1b: f8:15:20:08:a5:22:14:92:97:42:46:49:90:88:c9:4e:f3:3e: 7b:bd:46:70:e1:a1:75:cf:47:06:7c:b8:20:76:e2:fd:07:03: 5e:4d:04:cf:32:bc:d8:19:f2:53:a9:cb:7e:63:fb:e3:5f:a0: 92:ba:b8:80:d0:45:e5:06:51:58:ed:ef:a4:f4:7c:30:51:96: cc:aa:f7:a1:5d:d2:ae:cc:15:26:6a:04:56:54:17:b2:f9:95: 0e:34:60:b4:d4:a5:6c:64:83:c8:ac:f6:f1:45:17:00:8b:7d: 84:73:be:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMvFaJ5ewFt3m7DNRr4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm MDNjNGEwHhcNMjUxMjE5MDQwMTEwWhcNMjUxMjIwMDQwMTEwWjAzMTEwLwYDVQQD EyhkODIyYjY0Mzg4YjQ4NDU5YTNkNmI4NjZiMGUzZDhjMzU0NzBiNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFVZbwFQS5+jdFTPu6iU3swWcyJ qmbjFSMRa5SyhhplxHGYKLXNz31wI0NzWtm87A0T5q2zvTouONZzfYQzqPgnwim1 WKFFT3tjQfGnXqu8XIQnqYDGcBao7GwJ90C/kwdXXRQw/QopYdjm9QPJDgS/9FMA iAiNSUmduIetpaD8rY41/AE1ITMtRggHLxzWGEdRDPdpfMFg166ECXJLuLg5cO1p 6R0fkeDcxuMqxOPYlQUb8xYC6gMskgamp6PDL7NtGKpXQ7jusuvjR8dDs45QDql1 rivRGfjAfoGTVXK62d2dfNfUKZRWT84E7HmnMJo4zcNSzIQUI2Ywuo2TGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgitkOItIRZo9a4ZrDj2MNUcLeaMB8GA1UdIwQY MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR1s+fdo 1u4SeW5Gg6Z8uk+XTUNFrqvVwREEOTkOvMelr7A5Pzt3Ti+XE7Dj2vs7PHfgFGcz XMpKgytwa8CDVNjQzJ0we+SzwpLIquwpqfxAKmn01e/iTa05WebEqZVMR6bKiVm0 4DQD7+JKUcM/IYyh597O62SJrpscE4BP1Ut/XR/OsSlHDKNToAcjSxgb+BUgCKUi FJKXQkZJkIjJTvM+e71GcOGhdc9HBny4IHbi/QcDXk0EzzK82BnyU6nLfmP741+g krq4gNBF5QZRWO3vpPR8MFGWzKr3oV3SrswVJmoEVlQXsvmVDjRgtNSlbGSDyKz2 8UUXAIt9hHO+gQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:28 2025 by rpki-client