This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json) Hash identifier: EjcKian0/U0AbntGp0qtuMeYcKZvUAvSL4jVhc3s7Ik= Subject key identifier: A8:26:78:8A:E3:7A:14:33:FE:1E:C6:C3:DF:15:29:C0:7D:D2:ED:F5 Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e Certificate serial: 019AF12E85FDF7CB4F4040446AFCD9079679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft Manifest number: 03BC Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=) 2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: LT31ZW0xMpVLCT22/KyL8nyV1HzvNGFfQM+42X17qjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:85:fd:f7:cb:4f:40:40:44:6a:fc:d9:07:96:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=a826788ae37a1433fe1ec6c3df1529c07dd2edf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:fa:5e:33:07:42:cc:63:7b:31:17:f9:5a: f4:e2:ff:52:bd:62:9b:12:87:9b:8e:65:ef:73:94: bf:eb:60:0f:6e:44:55:d1:e8:59:b3:4b:b3:ae:57: 07:38:bb:a5:cd:23:2d:06:0c:fc:ab:fd:be:9d:6d: 11:75:b8:46:f7:77:3c:8b:f6:a3:ba:8e:d2:50:69: dc:31:91:5f:e5:ba:80:78:74:a4:e5:f0:e8:74:e9: f8:7d:36:33:1b:6e:dc:6b:24:a3:87:9b:22:06:da: cf:e8:75:c0:2a:c9:78:6a:48:ea:fd:85:3b:a3:99: 1e:49:38:ab:7f:2d:23:fd:a7:84:7c:65:89:12:b8: 7a:72:2c:95:27:18:23:a7:f8:55:11:99:27:e8:21: cf:07:4d:89:6d:99:23:20:c6:72:1b:5b:78:bd:f8: 5d:1c:29:b2:c8:ba:fc:dc:01:2b:2d:cb:3e:1e:f4: ef:2e:a6:66:d4:49:23:f9:bc:13:8f:a2:e3:9e:8c: 55:cc:41:21:bd:b7:78:33:ee:5b:e1:be:2b:cf:41: 49:fe:f8:25:b9:a0:82:75:2b:e5:de:8e:ed:4b:b9: 2b:b1:ca:85:82:07:42:2e:cc:ef:df:cd:fe:2a:f7: 44:32:c2:92:fc:02:07:19:42:2f:15:ad:e8:f3:4f: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:26:78:8A:E3:7A:14:33:FE:1E:C6:C3:DF:15:29:C0:7D:D2:ED:F5 X509v3 Authority Key Identifier: keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:44:75:a8:da:06:4f:d1:b6:23:5f:c1:ac:17:80:fb:c0:3d: 50:ca:c1:57:3e:4a:73:a7:05:c7:c8:9b:ae:20:f6:fa:bb:fb: 63:1e:61:42:94:61:98:35:cd:6c:e6:27:ad:78:f8:b7:2f:cb: 93:5e:d4:43:b5:6b:66:19:42:66:7f:a8:ed:f7:18:a7:f4:a1: 0a:2a:33:c7:f3:79:7b:cd:90:24:bb:bf:0e:ab:fe:99:47:db: 44:dd:57:9b:25:a3:61:c4:9a:65:6c:12:0f:49:f9:4b:69:74: 33:e1:ca:2a:5c:b0:fb:42:b8:2d:3c:16:89:5e:5e:99:c3:98: 08:58:33:be:15:c0:d7:6e:6a:d4:be:91:03:4a:ff:4e:16:26: 0f:0a:cb:35:e8:02:7b:6a:6a:22:fa:94:26:4f:92:af:bb:8c: 06:d0:8e:60:2f:ab:fb:b7:21:d4:cd:be:f2:8b:fd:8b:16:5d: 81:de:11:d2:f6:92:9a:11:27:67:92:b7:95:58:46:0a:72:62: 11:cd:38:90:69:9c:75:e3:8c:bb:8c:8d:39:ae:40:c7:58:3b: 59:e9:76:82:b5:01:c0:10:7d:b7:6f:de:97:7e:51:33:f7:10: f4:21:08:df:b4:11:b3:58:62:27:19:3a:de:66:69:3e:52:02: 6a:51:5e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoX998tPQEBEavzZB5Z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3 YWMxMmUwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD EyhhODI2Nzg4YWUzN2ExNDMzZmUxZWM2YzNkZjE1MjljMDdkZDJlZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0T6XjMHQsxjezEX+Vr04v9SvWKb EoebjmXvc5S/62APbkRV0ehZs0uzrlcHOLulzSMtBgz8q/2+nW0RdbhG93c8i/aj uo7SUGncMZFf5bqAeHSk5fDodOn4fTYzG27caySjh5siBtrP6HXAKsl4akjq/YU7 o5keSTirfy0j/aeEfGWJErh6ciyVJxgjp/hVEZkn6CHPB02JbZkjIMZyG1t4vfhd HCmyyLr83AErLcs+HvTvLqZm1Ekj+bwTj6LjnoxVzEEhvbd4M+5b4b4rz0FJ/vgl uaCCdSvl3o7tS7krscqFggdCLszv383+KvdEMsKS/AIHGUIvFa3o809dRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgmeIrjehQz/h7Gw98VKcB90u31MB8GA1UdIwQY MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5 LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0R1qNoG T9G2I1/BrBeA+8A9UMrBVz5Kc6cFx8ibriD2+rv7Yx5hQpRhmDXNbOYnrXj4ty/L k17UQ7VrZhlCZn+o7fcYp/ShCiozx/N5e82QJLu/Dqv+mUfbRN1XmyWjYcSaZWwS D0n5S2l0M+HKKlyw+0K4LTwWiV5emcOYCFgzvhXA125q1L6RA0r/ThYmDwrLNegC e2pqIvqUJk+Sr7uMBtCOYC+r+7ch1M2+8ov9ixZdgd4R0vaSmhEnZ5K3lVhGCnJi Ec04kGmcdeOMu4yNOa5Ax1g7Wel2grUBwBB9t2/el35RM/cQ9CEI37QRs1hiJxk6 3mZpPlICalFe5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:07 2025 by rpki-client