This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: HiZU4uYubKPr0BSfKu6azzQj6b12AYv93TFPx1jEqMQ= Subject key identifier: 9F:4C:A0:CB:C1:58:EE:D1:9C:70:BA:F2:0A:E8:94:35:D4:B4:BA:DB Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019AF0F5DDBA09E8D9589AA25EA3EBCDCAA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: yOO2Sve8ie3buk61HG/j9Ly0Xxlt7EGb5HNAOMB3aJA=) 9: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) 10: v8hBMDKY65zo2V6449UJSPRVSUE.roa (hash: 7bLL/W+lnh1+jDhX4cXB4UWGoYDQrNjyksVTGR4y1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dd:ba:09:e8:d9:58:9a:a2:5e:a3:eb:cd:ca:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=9f4ca0cbc158eed19c70baf20ae89435d4b4badb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:d0:8f:4b:eb:b1:d6:55:81:00:9f:24:bd: 4f:0a:1e:a3:40:8a:c3:18:07:d6:3e:e6:c9:3b:c7: 5e:30:75:57:be:82:ff:8c:f3:9f:b7:d5:c1:67:29: 56:0f:af:17:3f:f5:89:3f:d1:db:da:3f:64:e7:78: b6:70:1f:57:1e:b4:e3:e7:f0:01:d5:c1:a7:cc:41: 92:49:fc:ff:61:71:31:07:1e:3b:e9:99:ef:01:e7: 08:c2:0a:77:05:63:23:33:f7:55:da:25:37:46:df: 67:a8:07:9c:bf:07:e9:66:89:a0:21:ea:b8:d7:d9: 1b:7b:ae:5c:c5:26:e5:2f:65:79:19:6b:44:8b:db: ce:e6:77:f1:06:9b:77:06:11:67:c1:13:2a:81:89: d9:a7:b3:f3:9e:93:52:48:7f:ce:19:c8:e1:d0:5a: 93:21:90:bc:a2:84:33:b8:fe:a7:4a:d7:3b:11:2c: 3c:3c:9a:cd:80:2d:21:e3:bf:e6:31:b2:3a:a7:27: ad:6e:0a:36:49:76:09:7b:1c:0a:fc:ea:af:34:c5: 78:06:11:2b:6f:d5:10:5e:ca:40:bc:f4:fa:e2:82: b6:fb:e8:54:39:c5:32:82:5c:35:90:b4:0a:e1:a1: 26:20:d9:3c:f2:02:9b:4e:88:ea:b1:cf:7c:b0:68: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:A0:CB:C1:58:EE:D1:9C:70:BA:F2:0A:E8:94:35:D4:B4:BA:DB X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e5:fc:69:39:d3:4f:16:3d:a0:7a:12:24:4d:8f:08:04:62: d8:92:b3:db:e6:46:3c:fb:b4:64:06:38:ef:6a:c9:b4:e9:e0: 43:71:42:78:92:11:13:1d:6e:dc:7c:92:27:59:9c:2c:1f:8e: 9a:f7:a4:69:da:52:bb:49:4d:2b:d9:4f:01:1c:3c:9e:9f:a5: 08:8e:7d:57:b0:0d:ed:bb:65:3c:91:ab:8e:d3:2c:55:1d:dc: 6e:e3:e5:0c:70:e0:4f:5d:eb:e7:07:1d:3e:97:74:c5:d9:6c: b1:df:3f:a6:ba:8e:03:50:07:e4:b1:94:6f:df:ea:d3:2e:e1: 3d:54:17:b4:58:eb:f8:e7:5f:29:5a:03:d1:94:98:81:82:bd: bd:20:6b:bb:20:0b:52:84:8a:32:43:48:09:ad:10:b0:61:2a: e1:d4:e8:47:08:9c:7b:3e:9a:12:7d:5b:28:7e:ac:43:bf:3e: 6d:21:8f:92:b3:49:e3:dd:d6:d9:13:bb:41:bf:12:62:29:4f: 7e:f6:9c:f1:77:e6:ea:60:02:19:db:d9:a6:af:f9:1e:da:82: 3e:85:7c:23:4d:87:e2:18:93:b3:cd:8d:e4:ed:91:cb:f7:0e: 05:d8:81:74:4c:86:3f:f9:f1:9f:ad:a0:60:fa:a2:98:ef:95: 92:0a:4a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d26CejZWJqiXqPrzcqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD Eyg5ZjRjYTBjYmMxNThlZWQxOWM3MGJhZjIwYWU4OTQzNWQ0YjRiYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmDQj0vrsdZVgQCfJL1PCh6jQIrD GAfWPubJO8deMHVXvoL/jPOft9XBZylWD68XP/WJP9Hb2j9k53i2cB9XHrTj5/AB 1cGnzEGSSfz/YXExBx476ZnvAecIwgp3BWMjM/dV2iU3Rt9nqAecvwfpZomgIeq4 19kbe65cxSblL2V5GWtEi9vO5nfxBpt3BhFnwRMqgYnZp7PznpNSSH/OGcjh0FqT IZC8ooQzuP6nStc7ESw8PJrNgC0h47/mMbI6pyetbgo2SXYJexwK/OqvNMV4BhEr b9UQXspAvPT64oK2++hUOcUyglw1kLQK4aEmINk88gKbTojqsc98sGh4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9MoMvBWO7RnHC68grolDXUtLrbMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+X8aTnT TxY9oHoSJE2PCARi2JKz2+ZGPPu0ZAY472rJtOngQ3FCeJIREx1u3HySJ1mcLB+O mvekadpSu0lNK9lPARw8np+lCI59V7AN7btlPJGrjtMsVR3cbuPlDHDgT13r5wcd Ppd0xdlssd8/prqOA1AH5LGUb9/q0y7hPVQXtFjr+OdfKVoD0ZSYgYK9vSBruyAL UoSKMkNICa0QsGEq4dToRwicez6aEn1bKH6sQ78+bSGPkrNJ493W2RO7Qb8SYilP fvac8Xfm6mACGdvZpq/5HtqCPoV8I02H4hiTs82N5O2Ry/cOBdiBdEyGP/nxn62g YPqimO+VkgpKUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:45 2025 by rpki-client