This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json) Hash identifier: l6c2mqctuOlY7tVFb1J3ogte3fPKafAm68ukRlS110s= Subject key identifier: BD:66:AC:65:10:E7:12:0F:89:24:9B:74:D8:5A:C7:12:D1:21:A2:BE Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019B4091CF6B1930859CEF324E7D1F985018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 11:00:56 +0000 Manifest this update: Sun 21 Dec 2025 11:00:56 +0000 Manifest next update: Mon 22 Dec 2025 11:00:56 +0000 Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: sHQxfylUeUTwrMiGbIT12vYi+VIjCjKfOULtJpxVUx4=) 2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=) 3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:cf:6b:19:30:85:9c:ef:32:4e:7d:1f:98:50:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Dec 21 11:00:56 2025 GMT Not After : Dec 22 11:00:56 2025 GMT Subject: CN=bd66ac6510e7120f89249b74d85ac712d121a2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:40:cd:a0:7c:fa:fa:fd:b3:8c:ff:f2:5e: a1:bd:4c:f5:a6:1a:86:48:1a:67:a7:7a:18:99:18: 73:c3:d2:35:e7:97:ce:c9:ea:ef:31:98:d6:93:12: a2:9e:42:bd:0f:e8:c4:f3:07:5a:4c:cd:75:3f:1f: 64:a2:db:2a:22:5b:fe:b8:58:5e:13:c7:37:cd:fa: e1:7d:e8:cd:04:50:3b:ea:13:4b:70:da:6f:47:67: 0b:51:24:74:16:0f:08:a5:cf:47:ad:9f:c0:27:00: 29:99:6b:47:fe:eb:f7:52:d9:06:81:97:24:81:2d: d2:33:d8:49:5a:e4:22:ce:45:73:a7:e3:3a:d3:5c: 3c:d3:85:f3:70:4a:94:6c:8c:dd:6d:93:e4:ac:54: 76:70:09:21:74:3e:be:6e:47:07:3e:21:f4:32:e7: d1:1e:d5:8f:79:00:a0:8a:61:46:21:b8:d0:67:a8: 4d:5a:23:f5:7a:f1:6d:c0:95:db:1e:29:65:75:3d: 73:b8:cf:23:4a:33:97:30:14:c4:40:34:23:f8:fa: 61:5c:e5:d9:5b:34:cd:33:95:fe:bb:e3:be:71:2a: 98:f2:dc:84:9c:7f:b1:85:f8:3a:15:43:0d:ac:5e: 57:52:e2:fe:c2:2d:da:d2:9f:77:f4:00:f7:b6:09: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:66:AC:65:10:E7:12:0F:89:24:9B:74:D8:5A:C7:12:D1:21:A2:BE X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:cd:13:69:a4:c6:e8:fb:cc:d8:36:22:f0:79:57:d7:67: e0:13:b5:b8:5c:19:50:5a:fc:d1:a0:ff:fd:1d:7c:f7:f2:4e: 8b:11:a9:45:65:1c:2b:56:9a:45:3a:20:6c:d2:3c:8e:ac:2c: 77:80:e5:01:f0:c4:5c:93:47:94:f7:77:29:de:b7:da:d5:5c: f0:c5:a5:3b:7d:8c:f4:e3:aa:dd:52:59:08:41:8b:47:9e:4e: a2:01:41:91:ba:5f:7b:7b:83:bc:6d:8e:35:25:2a:1c:53:dc: 28:27:7d:cf:dd:b1:cf:65:44:8a:5b:3d:21:ed:ac:1b:bc:03: 5f:fa:ca:3a:9b:96:51:13:99:59:27:16:54:12:8a:a7:46:57: b8:dd:33:a6:e9:29:12:20:97:ae:f7:2a:b5:5c:c5:06:b9:50: bf:b8:66:c4:0b:e9:87:45:9f:92:d0:fc:89:55:ee:c8:f4:51: 8b:50:c3:fc:45:b1:be:7f:3c:ee:27:aa:ef:73:24:cc:25:9b: ef:db:88:72:49:3f:84:4c:91:56:a0:bc:e3:d1:a4:60:20:81: 21:28:ec:7d:e0:33:16:98:e9:9c:34:dc:fc:ff:ec:42:65:c6: bc:ab:ce:b5:1e:f0:69:57:8f:f2:51:f5:e6:41:fb:66:30:6a: 1c:de:a6:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkc9rGTCFnO8yTn0fmFAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjUxMjIxMTEwMDU2WhcNMjUxMjIyMTEwMDU2WjAzMTEwLwYDVQQD EyhiZDY2YWM2NTEwZTcxMjBmODkyNDliNzRkODVhYzcxMmQxMjFhMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVAzaB8+vr9s4z/8l6hvUz1phqG SBpnp3oYmRhzw9I155fOyervMZjWkxKinkK9D+jE8wdaTM11Px9kotsqIlv+uFhe E8c3zfrhfejNBFA76hNLcNpvR2cLUSR0Fg8Ipc9HrZ/AJwApmWtH/uv3UtkGgZck gS3SM9hJWuQizkVzp+M601w804XzcEqUbIzdbZPkrFR2cAkhdD6+bkcHPiH0MufR HtWPeQCgimFGIbjQZ6hNWiP1evFtwJXbHilldT1zuM8jSjOXMBTEQDQj+PphXOXZ WzTNM5X+u+O+cSqY8tyEnH+xhfg6FUMNrF5XUuL+wi3a0p939AD3tgnu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1mrGUQ5xIPiSSbdNhaxxLRIaK+MB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTrNE2mk xuj7zNg2IvB5V9dn4BO1uFwZUFr80aD//R189/JOixGpRWUcK1aaRTogbNI8jqws d4DlAfDEXJNHlPd3Kd632tVc8MWlO32M9OOq3VJZCEGLR55OogFBkbpfe3uDvG2O NSUqHFPcKCd9z92xz2VEils9Ie2sG7wDX/rKOpuWUROZWScWVBKKp0ZXuN0zpukp EiCXrvcqtVzFBrlQv7hmxAvph0WfktD8iVXuyPRRi1DD/EWxvn887ieq73MkzCWb 79uIckk/hEyRVqC849GkYCCBISjsfeAzFpjpnDTc/P/sQmXGvKvOtR7waVeP8lH1 5kH7ZjBqHN6maA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:14 2025 by rpki-client