This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: bjXVC/Jek+2pk6e7KQivAeRg5FZg0roReEtHENa1tcA= Subject key identifier: 40:21:43:78:C3:64:85:36:66:1D:EC:07:CD:3D:74:86:CF:E6:86:C2 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019AF12DA8E99F584332B15E2B6B91E32B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 0F62 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=) 2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=) 3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=) 4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=) 5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: 8wEcdGYq1FcNx/9Y75s19VmLZyidaoRJEcOCGr50nas=) 6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=) 7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a8:e9:9f:58:43:32:b1:5e:2b:6b:91:e3:2b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=40214378c3648536661dec07cd3d7486cfe686c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:c4:f8:a9:ce:0a:40:5f:17:5e:3b:be:a7: a2:fd:9f:5a:da:2b:1d:f1:69:cb:ac:f1:c6:63:00: f6:3b:3b:22:79:9c:f9:8d:9e:b2:3c:14:f8:55:d8: 53:0d:3f:d7:9a:cf:dd:5c:cf:57:32:eb:4c:09:dd: 3a:64:5c:40:78:71:91:68:ed:65:01:21:a1:2f:ef: 83:64:e5:2c:88:36:39:14:96:94:a0:4e:4e:89:51: 2f:3f:d8:be:9b:d8:94:39:6e:24:5b:1c:08:6c:68: a2:2e:dc:94:f9:95:48:39:f9:a0:22:ef:d1:3a:49: b0:b5:1f:1a:64:82:f8:ad:51:95:38:e7:b8:43:96: ff:7d:e0:48:d9:bb:de:14:d0:13:8b:8b:ac:a6:83: ba:8b:1e:fe:b2:5c:a5:85:4f:15:7b:0b:fa:46:5d: 25:52:39:32:2a:03:2d:47:a6:3f:72:63:e1:bd:4e: ac:fc:41:5f:3e:27:ac:8f:be:03:aa:a9:10:62:3a: f4:4d:ea:c9:d8:f3:c4:0b:e5:77:ae:fe:d9:51:4c: 20:18:65:bc:27:5c:0f:51:97:2e:61:f9:68:91:14: a9:28:af:c0:5d:89:30:95:83:cd:76:64:60:e5:9a: 29:e9:ea:46:2c:84:d7:37:bb:11:2a:c0:3c:3f:1b: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:43:78:C3:64:85:36:66:1D:EC:07:CD:3D:74:86:CF:E6:86:C2 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:53:e6:05:6f:74:45:1d:d7:52:e8:05:a9:db:4c:f0:64: a6:24:13:04:2a:bc:29:29:ad:08:0f:89:bb:83:e0:1e:bc:82: 4b:88:c6:d9:9b:67:e1:a5:b4:0d:a5:d9:e5:b6:c7:94:78:0a: 36:b9:3a:bf:88:ef:51:34:a4:35:a6:c1:f8:16:de:e5:79:c2: 54:a3:90:2e:93:73:40:82:a6:18:62:17:b5:52:b2:9d:ee:c2: 26:61:72:c7:82:0c:4c:a8:5b:f1:ed:03:18:b1:aa:de:51:60: 10:4d:e6:4f:0f:f7:f7:64:fd:7c:2d:47:de:c1:b8:a7:24:1c: 20:f2:e7:f8:dd:3d:91:76:dc:90:5d:3c:f3:24:09:37:b4:77: 27:31:90:2e:da:36:2e:0d:27:de:64:e4:3f:a0:bf:04:44:0b: 7d:06:2b:86:84:d3:2a:79:9d:9a:e0:7d:4b:77:c6:c5:64:4b: 5d:c6:c9:44:35:e8:0b:a5:3d:89:93:ce:d9:0b:1a:a0:3b:7a: 72:93:26:8f:84:6b:12:57:11:8a:a9:b1:0e:39:5f:6e:b3:21: 3f:f3:40:b7:a7:39:39:e1:6e:3f:57:20:61:1e:83:cd:ff:ae: 47:12:06:0f:e5:b0:08:e4:b2:74:74:2c:2c:fa:b6:02:3e:56: 1b:da:60:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLajpn1hDMrFeK2uR4ytBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD Eyg0MDIxNDM3OGMzNjQ4NTM2NjYxZGVjMDdjZDNkNzQ4NmNmZTY4NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLE+KnOCkBfF147vqei/Z9a2isd 8WnLrPHGYwD2OzsieZz5jZ6yPBT4VdhTDT/Xms/dXM9XMutMCd06ZFxAeHGRaO1l ASGhL++DZOUsiDY5FJaUoE5OiVEvP9i+m9iUOW4kWxwIbGiiLtyU+ZVIOfmgIu/R OkmwtR8aZIL4rVGVOOe4Q5b/feBI2bveFNATi4uspoO6ix7+slylhU8Vewv6Rl0l UjkyKgMtR6Y/cmPhvU6s/EFfPiesj74DqqkQYjr0TerJ2PPEC+V3rv7ZUUwgGGW8 J1wPUZcuYflokRSpKK/AXYkwlYPNdmRg5Zop6epGLITXN7sRKsA8PxsNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAhQ3jDZIU2Zh3sB809dIbP5obCMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIZT5gVv dEUd11LoBanbTPBkpiQTBCq8KSmtCA+Ju4PgHryCS4jG2Ztn4aW0DaXZ5bbHlHgK Nrk6v4jvUTSkNabB+Bbe5XnCVKOQLpNzQIKmGGIXtVKyne7CJmFyx4IMTKhb8e0D GLGq3lFgEE3mTw/392T9fC1H3sG4pyQcIPLn+N09kXbckF088yQJN7R3JzGQLto2 Lg0n3mTkP6C/BEQLfQYrhoTTKnmdmuB9S3fGxWRLXcbJRDXoC6U9iZPO2QsaoDt6 cpMmj4RrElcRiqmxDjlfbrMhP/NAt6c5OeFuP1cgYR6Dzf+uRxIGD+WwCOSydHQs LPq2Aj5WG9pgVA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:29 2025 by rpki-client