This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json) Hash identifier: lyPs8sGO+CYl1r49db+631dKkhW4Km6quOUyP/WdCMs= Subject key identifier: DB:B9:8B:E4:27:87:4B:B7:B9:57:9A:0D:7A:2D:0B:F0:1D:09:FD:78 Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019B3CEBF024FBAE23C7EB65E0D98AE046D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: CoLunb3A0IZTtnRnezzy7VMEV3v7eRsGb+PyIk9eQbA=) 2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f0:24:fb:ae:23:c7:eb:65:e0:d9:8a:e0:46:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=dbb98be427874bb7b9579a0d7a2d0bf01d09fd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:54:9f:3c:01:9c:18:04:15:b1:99:0d:24: ce:c1:1e:5e:e1:b5:f7:0b:e1:c0:36:fb:a9:36:c5: 6e:93:d4:51:fe:3b:a6:0a:61:96:ff:a9:fb:4a:50: 6c:43:cf:8f:62:34:60:84:a0:0d:2a:bd:4a:81:5a: 60:4a:16:37:23:f0:67:05:77:c4:8a:8e:00:c1:fb: 47:90:01:6e:1c:6d:8e:1a:06:73:17:cb:d8:b5:0f: 5d:47:c0:45:18:0d:1f:5d:4e:c5:2d:b6:d6:0c:8c: 59:d5:27:4b:19:73:a4:05:51:aa:63:d3:6f:8a:02: c0:86:4a:fd:8a:e3:32:dc:29:28:8e:d9:0e:c7:3f: 6c:da:b7:5e:e0:2f:c2:3e:6b:e7:7f:a8:e2:3b:e9: 69:72:ac:35:97:5f:ce:3e:d3:e6:9c:1e:fb:a5:09: bb:30:21:f4:0c:02:f9:2a:88:65:90:7b:38:93:07: f2:36:7b:b9:7c:b2:58:2b:f6:db:1b:f9:2e:df:81: be:ad:18:35:d3:80:9d:5a:5e:de:da:31:82:92:f8: 45:66:81:84:e7:d9:dc:bd:a4:9a:86:95:52:0c:f0: 8f:cc:00:f7:6c:fe:78:fc:df:87:e6:39:e6:74:22: ac:aa:b6:51:30:82:74:b6:b4:2c:42:61:2d:28:4e: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:8B:E4:27:87:4B:B7:B9:57:9A:0D:7A:2D:0B:F0:1D:09:FD:78 X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:59:dc:07:af:46:8c:fd:c0:f5:a0:da:4e:af:e6:22:66: ff:c0:31:03:a3:03:f3:30:a8:ae:1c:c0:27:94:90:18:b6:e4: 6b:b4:6b:a7:d9:b6:5a:f0:d9:08:71:36:60:de:f0:74:14:94: 34:4e:4b:62:79:b9:3a:5f:1d:e7:1a:d4:45:d6:a2:a3:64:c9: 4a:be:df:1b:d8:9e:39:f2:c8:59:05:ed:03:d9:da:4e:01:21: 76:ce:bf:56:f2:44:d0:31:99:e8:9b:a3:d7:d5:38:24:41:9f: cf:d9:a6:73:2e:25:a5:e7:f7:5f:71:44:53:5d:30:c8:27:2b: 95:fd:e0:2e:7c:0f:64:08:9a:66:a5:6f:a5:55:6a:a3:52:0a: 86:34:75:3a:a5:b5:a0:7d:80:ce:f6:a1:da:55:76:db:13:3f: 09:55:01:d6:90:be:7e:ef:19:d4:95:d1:fe:26:f8:ab:88:2f: 46:33:9d:bb:d4:d0:23:24:a2:b9:00:72:91:36:e0:ae:05:db: 35:88:6b:f3:c5:19:de:10:1d:05:c6:6d:0f:cd:00:d2:71:98: fa:b4:ac:ea:06:24:8b:6d:55:c3:0c:7d:fa:73:6d:e7:ec:4a: af:db:28:f1:3d:29:d4:00:5d:b7:a2:77:35:af:6f:0b:59:1a: 52:1a:de:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/Ak+64jx+tl4NmK4EbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD EyhkYmI5OGJlNDI3ODc0YmI3Yjk1NzlhMGQ3YTJkMGJmMDFkMDlmZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnlUnzwBnBgEFbGZDSTOwR5e4bX3 C+HANvupNsVuk9RR/jumCmGW/6n7SlBsQ8+PYjRghKANKr1KgVpgShY3I/BnBXfE io4AwftHkAFuHG2OGgZzF8vYtQ9dR8BFGA0fXU7FLbbWDIxZ1SdLGXOkBVGqY9Nv igLAhkr9iuMy3CkojtkOxz9s2rde4C/CPmvnf6jiO+lpcqw1l1/OPtPmnB77pQm7 MCH0DAL5KohlkHs4kwfyNnu5fLJYK/bbG/ku34G+rRg104CdWl7e2jGCkvhFZoGE 59ncvaSahpVSDPCPzAD3bP54/N+H5jnmdCKsqrZRMIJ0trQsQmEtKE5R2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu5i+Qnh0u3uVeaDXotC/AdCf14MB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkABZ3Aev Roz9wPWg2k6v5iJm/8AxA6MD8zCorhzAJ5SQGLbka7Rrp9m2WvDZCHE2YN7wdBSU NE5LYnm5Ol8d5xrURdaio2TJSr7fG9ieOfLIWQXtA9naTgEhds6/VvJE0DGZ6Juj 19U4JEGfz9mmcy4lpef3X3FEU10wyCcrlf3gLnwPZAiaZqVvpVVqo1IKhjR1OqW1 oH2Azvah2lV22xM/CVUB1pC+fu8Z1JXR/ib4q4gvRjOdu9TQIySiuQBykTbgrgXb NYhr88UZ3hAdBcZtD80A0nGY+rSs6gYki21Vwwx9+nNt5+xKr9so8T0p1ABdt6J3 Na9vC1kaUhreqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:41 2025 by rpki-client