This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json) Hash identifier: 5qBECI9luduEoOhAq/EmwLhVtlv42+2xlPUQcMViChA= Subject key identifier: 2F:7C:67:8B:F0:CD:09:ED:1B:C2:35:ED:24:A8:C9:47:04:7A:08:7E Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019B446E9BF75F669AE8A5E4BA3D3B1B512B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 05:00:58 +0000 Manifest this update: Mon 22 Dec 2025 05:00:58 +0000 Manifest next update: Tue 23 Dec 2025 05:00:58 +0000 Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: uqBSTAE1DvR7lUJ3FHH/aMV9HUFv7gflD1qWRr0FE2k=) 2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=) 3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:9b:f7:5f:66:9a:e8:a5:e4:ba:3d:3b:1b:51:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Dec 22 05:00:58 2025 GMT Not After : Dec 23 05:00:58 2025 GMT Subject: CN=2f7c678bf0cd09ed1bc235ed24a8c947047a087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:ab:a5:5a:b6:0a:ad:18:c2:68:c4:7c:66: 20:90:67:ae:0c:07:01:92:1a:f1:63:5f:6f:c4:92: f9:91:c7:c2:45:86:31:0e:59:19:ae:81:1c:35:1c: f4:94:80:b8:42:32:e6:ea:a2:fb:56:64:45:36:1a: e7:91:b8:ac:98:3f:14:64:8c:e5:ea:d3:0a:02:a2: 3d:11:e8:8b:40:11:d4:6d:99:a6:a1:03:56:6e:5b: 96:45:e9:7e:95:30:66:34:08:a3:3d:57:2f:9e:eb: 7d:56:e8:d7:7a:aa:41:fd:ad:6e:75:24:ac:ab:39: e6:97:73:c0:ec:53:6c:17:41:aa:8d:99:a6:3c:f7: ec:83:e1:a2:0e:f4:b2:10:66:76:37:b5:54:d7:d4: 1d:ee:c6:3d:86:dd:11:06:18:18:ac:12:ff:e1:95: c7:12:ea:da:2f:c2:82:61:52:2a:f6:f1:49:cd:64: 39:a1:08:1d:c1:c2:ad:b5:d5:ce:99:91:1c:a3:a5: 2f:bb:5a:9b:fc:a8:d0:74:3a:ee:3f:18:83:bc:10: a5:04:96:4a:b1:0a:94:f7:70:4d:05:28:f0:b1:a0: 1a:bc:b7:e9:d3:90:11:a8:8d:fc:6c:c3:1f:95:c5: 68:db:47:64:08:fc:f6:2c:c2:d4:c9:ef:90:2e:6e: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:67:8B:F0:CD:09:ED:1B:C2:35:ED:24:A8:C9:47:04:7A:08:7E X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f2:70:33:15:a6:08:dc:05:49:36:ab:7a:ee:3d:17:a9:23: 99:fc:c1:1a:5f:6e:bc:37:08:7b:ce:c5:9e:d1:7b:98:5c:ee: f4:b4:dc:00:36:3a:66:87:55:64:8b:42:9b:00:68:a5:1d:f6: 57:7c:6f:a7:97:6f:e9:52:cf:5e:10:a0:79:8e:49:37:ad:a4: 32:a0:78:a7:7f:92:db:30:61:96:df:f8:98:37:36:c1:d0:6f: 6d:8e:90:7c:cf:e0:9b:0c:42:69:c8:15:05:38:fa:91:93:b2: 65:d8:37:c6:a2:93:65:17:b3:69:a0:52:77:34:c9:52:7b:01: 41:7e:d0:4b:29:95:8d:5d:9e:62:9d:f9:d5:d6:6a:52:7d:41: ac:7a:db:28:9c:9d:4e:32:87:bc:22:b4:a0:4a:9d:f5:c1:5c: 29:88:68:00:b4:01:ec:0b:31:0d:f7:d5:b4:72:2b:a5:3d:1f: 87:0e:ef:0a:cf:da:96:9a:cc:0e:35:01:88:1a:5a:87:df:a5: 80:f8:ad:51:c8:c2:dd:4f:b8:69:4f:8e:06:57:74:79:34:a3: 2c:18:1e:c3:fe:8d:1c:c8:fc:f9:bb:a8:ff:7b:bb:24:e6:5f: a6:d7:98:9f:de:24:b3:3c:ad:a0:66:a6:82:e8:75:c5:ea:44: b4:1c:e4:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbpv3X2aa6KXkuj07G1ErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjUxMjIyMDUwMDU4WhcNMjUxMjIzMDUwMDU4WjAzMTEwLwYDVQQD EygyZjdjNjc4YmYwY2QwOWVkMWJjMjM1ZWQyNGE4Yzk0NzA0N2EwODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B+rpVq2Cq0YwmjEfGYgkGeuDAcB khrxY19vxJL5kcfCRYYxDlkZroEcNRz0lIC4QjLm6qL7VmRFNhrnkbismD8UZIzl 6tMKAqI9EeiLQBHUbZmmoQNWbluWRel+lTBmNAijPVcvnut9VujXeqpB/a1udSSs qznml3PA7FNsF0GqjZmmPPfsg+GiDvSyEGZ2N7VU19Qd7sY9ht0RBhgYrBL/4ZXH EuraL8KCYVIq9vFJzWQ5oQgdwcKttdXOmZEco6Uvu1qb/KjQdDruPxiDvBClBJZK sQqU93BNBSjwsaAavLfp05ARqI38bMMflcVo20dkCPz2LMLUye+QLm77QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC98Z4vwzQntG8I17SSoyUcEegh+MB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvJwMxWm CNwFSTareu49F6kjmfzBGl9uvDcIe87FntF7mFzu9LTcADY6ZodVZItCmwBopR32 V3xvp5dv6VLPXhCgeY5JN62kMqB4p3+S2zBhlt/4mDc2wdBvbY6QfM/gmwxCacgV BTj6kZOyZdg3xqKTZRezaaBSdzTJUnsBQX7QSymVjV2eYp351dZqUn1BrHrbKJyd TjKHvCK0oEqd9cFcKYhoALQB7AsxDffVtHIrpT0fhw7vCs/alprMDjUBiBpah9+l gPitUcjC3U+4aU+OBld0eTSjLBgew/6NHMj8+buo/3u7JOZfpteYn94kszytoGam guh1xepEtBzkfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:29:24 2025 by rpki-client