This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json) Hash identifier: VUnIlWWgYJdmxHq1Ier3KY9hdhd0tTER+WnsjmyDxbY= Subject key identifier: B2:5E:DA:01:BB:EE:52:1E:9E:CC:FD:5D:7E:06:38:09:62:3D:99:9B Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7 Certificate serial: 019B2852D49EA43CECC720E9BF5871A0A31D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 18:01:15 +0000 Manifest this update: Tue 16 Dec 2025 18:01:15 +0000 Manifest next update: Wed 17 Dec 2025 18:01:15 +0000 Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: hOTcW3f9ZmUktTRzTzn1js0qz3jnbgz6EQPfhroUOIw=) 2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:d4:9e:a4:3c:ec:c7:20:e9:bf:58:71:a0:a3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7 Validity Not Before: Dec 16 18:01:15 2025 GMT Not After : Dec 17 18:01:15 2025 GMT Subject: CN=b25eda01bbee521e9eccfd5d7e063809623d999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:c4:da:3f:2e:a2:83:1d:e5:1b:e1:86:91: 95:af:f1:fa:fe:42:e5:8b:fb:c5:da:ef:88:15:1f: 54:ca:20:cd:30:7b:49:83:4e:e3:65:2a:1f:07:fb: 04:9d:7f:69:3e:ac:b6:a4:24:99:0e:90:31:c0:25: 1d:ae:6b:9c:ba:d0:45:3e:43:1c:55:b3:62:48:bf: b4:eb:c5:6b:23:72:55:f3:e5:1d:a8:42:db:0e:49: 28:60:e2:03:ba:9e:62:a7:09:b6:c8:d5:72:9e:4c: a8:24:48:f1:70:c4:6e:d0:7d:a4:17:3a:f4:70:4c: 2b:b3:8a:5b:34:49:44:02:8c:2f:33:0d:ad:71:71: 63:fd:5d:10:f1:d7:39:a2:70:5c:89:67:03:dd:74: 92:f1:58:c0:b5:02:85:53:4c:e4:46:4e:4e:16:5f: bf:46:e2:23:9c:7c:07:31:2e:4b:a4:28:d6:a4:8a: 03:a0:95:2c:57:dd:bc:e3:96:1f:db:80:6c:56:27: bf:ed:35:6a:2e:b3:f8:1f:f2:38:50:80:3e:6c:0b: ad:78:bc:d3:48:cf:e2:4a:58:ae:22:66:7a:ec:08: ee:78:0b:99:98:7a:25:33:84:44:2f:9b:4a:6a:fa: ec:c6:22:e5:1a:6f:a7:d4:ca:9b:2d:89:9b:21:92: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5E:DA:01:BB:EE:52:1E:9E:CC:FD:5D:7E:06:38:09:62:3D:99:9B X509v3 Authority Key Identifier: keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e6:7e:4c:b3:80:f9:09:84:28:c7:4b:13:46:c3:85:d9:ec: 99:e4:ff:69:e5:b2:d0:f4:db:ed:d7:58:56:7e:48:6b:10:4f: 02:2f:81:f4:3d:1d:83:4a:ce:22:3e:8d:55:91:64:b9:84:fb: 58:ed:7e:b7:55:4c:c0:48:06:13:61:15:2c:58:31:c6:cc:62: 6b:24:9f:c0:46:ee:48:6a:5f:85:ae:e1:48:54:f3:c5:81:33: e0:bd:e3:34:97:6a:09:90:18:29:27:a7:77:f9:c7:aa:dd:9c: ad:db:e9:b6:0d:5b:39:a4:8f:4c:6f:1b:d7:1e:76:6e:16:23: 9d:d8:7b:9e:87:04:ee:c3:c8:14:da:ce:5b:ac:15:0d:51:89: 1d:55:77:6f:3d:f8:2a:ea:08:a9:37:a8:2a:46:45:ec:e3:89: 74:cc:61:5a:58:d7:16:11:00:12:36:2b:8e:db:d5:a7:ea:63: d6:0f:54:ab:4c:d1:16:b7:0e:97:c8:c3:15:31:b7:f2:ef:69: ce:2d:7d:e6:c3:3b:b0:91:3b:bf:e5:e1:4f:62:c4:37:29:2b: dc:3b:e5:93:73:e7:5c:2c:7d:37:81:35:af:67:ef:fa:c7:83: b6:97:ba:e5:12:02:ef:34:7e:b5:aa:a2:a6:3f:1a:aa:d0:79: b8:b8:65:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUtSepDzsxyDpv1hxoKMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0 NzRkYzcwHhcNMjUxMjE2MTgwMTE1WhcNMjUxMjE3MTgwMTE1WjAzMTEwLwYDVQQD EyhiMjVlZGEwMWJiZWU1MjFlOWVjY2ZkNWQ3ZTA2MzgwOTYyM2Q5OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWTE2j8uooMd5RvhhpGVr/H6/kLl i/vF2u+IFR9UyiDNMHtJg07jZSofB/sEnX9pPqy2pCSZDpAxwCUdrmucutBFPkMc VbNiSL+068VrI3JV8+UdqELbDkkoYOIDup5ipwm2yNVynkyoJEjxcMRu0H2kFzr0 cEwrs4pbNElEAowvMw2tcXFj/V0Q8dc5onBciWcD3XSS8VjAtQKFU0zkRk5OFl+/ RuIjnHwHMS5LpCjWpIoDoJUsV92845Yf24BsVie/7TVqLrP4H/I4UIA+bAuteLzT SM/iSliuImZ67AjueAuZmHolM4REL5tKavrsxiLlGm+n1MqbLYmbIZLKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJe2gG77lIensz9XX4GOAliPZmbMB8GA1UdIwQY MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2 LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+Z+TLOA +QmEKMdLE0bDhdnsmeT/aeWy0PTb7ddYVn5IaxBPAi+B9D0dg0rOIj6NVZFkuYT7 WO1+t1VMwEgGE2EVLFgxxsxiaySfwEbuSGpfha7hSFTzxYEz4L3jNJdqCZAYKSen d/nHqt2crdvptg1bOaSPTG8b1x52bhYjndh7nocE7sPIFNrOW6wVDVGJHVV3bz34 KuoIqTeoKkZF7OOJdMxhWljXFhEAEjYrjtvVp+pj1g9Uq0zRFrcOl8jDFTG38u9p zi195sM7sJE7v+XhT2LENykr3Dvlk3PnXCx9N4E1r2fv+seDtpe65RIC7zR+taqi pj8aqtB5uLhl1A== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:28 2025 by rpki-client