This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: mvK2hKup3aHUybMUdcgjLx582PS5l8DGyWh73fM7OgA= Subject key identifier: 1C:05:15:3D:41:12:6A:BD:4B:0A:B5:94:93:A0:AE:8A:09:F8:F2:D0 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019AF23FA0718C6674CC7EC103808E08A8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0A6C Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: RAtN8CxfpNmnHl8gL+bkZjioJSxNj0vN2RkS0NbsdGI=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:71:8c:66:74:cc:7e:c1:03:80:8e:08:a8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=1c05153d41126abd4b0ab59493a0ae8a09f8f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:45:41:f2:a5:8d:d5:7a:b5:4f:15:c8:94: 25:b0:be:4e:f8:f7:5b:1a:8c:bb:ad:eb:ec:21:7b: ce:68:6d:ca:ed:3d:b6:1d:40:bf:75:f6:6a:a4:31: 8c:08:31:97:79:49:f9:be:04:28:a2:31:ab:c8:8d: 40:e5:80:fa:63:83:96:ad:62:55:36:c9:d3:11:2d: 94:41:c7:08:ba:0c:b6:54:ec:94:b1:d2:d5:8c:6f: ff:6e:14:45:dd:5d:a0:24:00:81:eb:03:25:2d:3b: bf:c1:82:0a:9b:89:f0:dd:b1:55:18:6a:51:c5:ea: a5:72:ee:68:df:3b:01:20:ba:43:ed:fe:07:9d:5d: 8e:c8:cc:09:98:93:3d:cc:83:c9:60:ee:fa:f5:f7: 44:09:51:f3:46:20:7c:df:e0:d9:0f:5e:39:bf:f8: 39:17:09:43:7b:11:0b:6b:c1:65:cd:20:56:97:5b: 37:a2:82:06:50:c9:70:af:85:09:35:05:b8:40:1b: 02:2b:24:bf:83:7a:ab:76:04:26:5f:61:d7:ec:83: 8a:4d:c8:74:a0:51:8f:f6:64:72:3b:ce:0d:ec:47: 75:58:ae:36:92:5f:95:c1:bd:6f:ab:60:2f:29:f7: 35:aa:56:a3:27:46:ed:f3:53:27:d1:9d:ca:7b:09: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:05:15:3D:41:12:6A:BD:4B:0A:B5:94:93:A0:AE:8A:09:F8:F2:D0 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fe:ae:1d:6a:d6:8a:b5:ae:10:23:58:3b:9f:c9:b7:db:93: 63:32:63:0a:9d:b9:ba:07:8d:80:b4:e2:47:9f:db:35:c0:89: 77:08:24:a2:dd:05:54:04:47:b2:61:9f:07:c8:8c:50:23:ce: 03:ae:c0:7a:ee:e1:aa:d6:e9:0f:fb:e7:fb:ec:56:c5:08:75: aa:29:c5:50:e6:eb:a0:98:43:d5:81:d0:0b:4c:3c:af:1b:bd: 52:50:d7:ff:68:71:c8:9c:86:75:5a:d5:4b:89:cc:b7:98:7d: 06:ea:88:ce:ab:96:af:a5:66:4a:77:79:7f:21:33:c2:2e:46: 3e:f8:de:92:12:1a:4a:6a:2a:89:ce:9f:ab:02:c3:71:d0:a8: 6b:bd:7b:82:9a:4e:83:93:4e:94:d5:bd:26:b3:1a:de:27:c4: a6:af:35:a7:0e:38:c6:a9:6d:e2:fc:9b:c0:23:29:88:d8:f3: be:e3:7f:c6:1f:d3:5c:2e:56:8d:8a:2c:f1:68:3b:a8:0e:65: a8:c3:82:bd:ab:1e:53:23:51:fc:94:62:7f:02:01:79:cf:38: 27:fe:40:89:31:30:15:74:35:39:24:fe:84:28:ef:d0:dd:4e: 8c:0a:0e:28:42:49:9b:f3:e8:11:04:e6:c7:37:d1:a9:b9:82: c3:a4:39:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6BxjGZ0zH7BA4COCKiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EygxYzA1MTUzZDQxMTI2YWJkNGIwYWI1OTQ5M2EwYWU4YTA5ZjhmMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mBFQfKljdV6tU8VyJQlsL5O+Pdb Goy7revsIXvOaG3K7T22HUC/dfZqpDGMCDGXeUn5vgQoojGryI1A5YD6Y4OWrWJV NsnTES2UQccIugy2VOyUsdLVjG//bhRF3V2gJACB6wMlLTu/wYIKm4nw3bFVGGpR xeqlcu5o3zsBILpD7f4HnV2OyMwJmJM9zIPJYO769fdECVHzRiB83+DZD145v/g5 FwlDexELa8FlzSBWl1s3ooIGUMlwr4UJNQW4QBsCKyS/g3qrdgQmX2HX7IOKTch0 oFGP9mRyO84N7Ed1WK42kl+Vwb1vq2AvKfc1qlajJ0bt81Mn0Z3KewnIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwFFT1BEmq9Swq1lJOgrooJ+PLQMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgP6uHWrW irWuECNYO5/Jt9uTYzJjCp25ugeNgLTiR5/bNcCJdwgkot0FVARHsmGfB8iMUCPO A67Aeu7hqtbpD/vn++xWxQh1qinFUObroJhD1YHQC0w8rxu9UlDX/2hxyJyGdVrV S4nMt5h9BuqIzquWr6VmSnd5fyEzwi5GPvjekhIaSmoqic6fqwLDcdCoa717gppO g5NOlNW9JrMa3ifEpq81pw44xqlt4vybwCMpiNjzvuN/xh/TXC5WjYos8Wg7qA5l qMOCvaseUyNR/JRifwIBec84J/5AiTEwFXQ1OST+hCjv0N1OjAoOKEJJm/PoEQTm xzfRqbmCw6Q53g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:47 2025 by rpki-client