This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json) Hash identifier: E8ulXlwbMFq0rRWezdNkvl1XjpMljXNMPTEo1KJVHYY= Subject key identifier: 3F:FE:2A:88:C5:BB:60:AD:0C:3D:23:6C:E6:BF:E1:D6:C1:D9:A2:49 Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9 Certificate serial: 019AF20936E5A668993876DA52D6FA0923F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft Manifest number: 0CBB Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: PHqUmlqpsDtheeHdM47PFJJiP7e/JGi3ddzZqr3pOSo=) 2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:36:e5:a6:68:99:38:76:da:52:d6:fa:09:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=3ffe2a88c5bb60ad0c3d236ce6bfe1d6c1d9a249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:52:b9:c6:d8:21:25:0b:9d:c5:29:44:99: a9:c9:56:4c:b7:24:2b:14:ed:85:48:93:6a:6f:58: 2d:0d:22:71:85:b3:2d:ba:d0:f1:7a:ec:f8:42:a4: 1a:b3:8c:a0:c6:6a:bd:c9:06:46:fa:40:31:be:21: 78:81:a7:7d:de:9a:5d:47:06:a6:43:1a:f9:85:b8: a6:36:6d:93:4c:2e:10:60:1d:6d:f5:34:a4:fa:2d: de:0b:7e:91:66:2e:09:25:83:67:e0:89:91:3d:85: 6d:f9:d6:c4:19:22:5d:62:79:a8:d0:94:5d:bf:51: 46:91:94:1d:44:61:34:99:52:d9:f8:ef:03:12:53: a3:91:6e:53:be:40:01:09:c2:20:b1:c5:0c:22:19: f7:de:09:01:3b:44:06:23:8c:9f:9d:6f:cf:37:17: 88:1f:6c:48:bc:ab:70:b7:2a:90:85:fa:61:fb:c0: f8:da:bf:82:1f:95:06:7d:88:dc:da:34:61:55:52: ed:74:b3:d2:25:0a:e8:3a:9c:c9:3f:43:ea:37:77: e3:d7:eb:e7:0f:cc:f5:fb:ed:90:bc:5b:ac:05:72: eb:72:80:2d:b1:47:78:f9:c5:c4:8f:7c:8e:b1:68: 88:8c:63:9c:cb:92:40:9c:f8:9b:0c:de:12:9d:a9: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:2A:88:C5:BB:60:AD:0C:3D:23:6C:E6:BF:E1:D6:C1:D9:A2:49 X509v3 Authority Key Identifier: keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:88:d8:29:e0:51:d6:29:c4:5b:9a:16:14:6e:25:5c:6b:7c: 26:5f:f9:0f:83:ce:ae:8d:9f:df:d8:00:8a:d5:9f:9b:e8:7f: b8:8e:78:29:00:48:e9:b7:9d:26:73:1a:48:0c:e1:77:da:49: 43:b8:56:7d:cb:cd:22:51:88:16:71:db:7b:c2:5a:2c:ef:11: c9:91:7e:2c:11:1a:b1:69:ed:8f:df:50:6c:50:ea:11:da:9e: d0:3e:7e:08:20:4e:22:2c:7f:6d:fc:2e:4d:22:0c:12:53:89: 94:e2:40:5e:93:12:d2:59:ce:c2:fa:39:c4:29:23:47:c9:1c: 16:45:f8:cc:ff:b5:b7:9a:1f:c0:dd:bb:8e:af:98:03:3b:f7: b5:05:c4:8c:a8:3f:74:2e:60:af:f4:cc:94:27:91:0c:80:93: 56:9e:57:3d:62:2b:08:41:2f:99:6d:22:0a:98:8b:70:1e:ef: c0:e2:47:b4:e9:bc:d8:4a:9d:0e:ca:ed:84:34:3f:f1:bb:60: 15:70:b2:f6:4a:5d:2b:e4:ab:ba:07:64:78:f1:d3:4e:cf:6d: 0d:6d:21:c7:8f:8d:58:3f:56:fd:4c:d6:cd:46:8e:95:8b:9a: c5:f4:4f:8d:81:ed:0f:73:71:2e:6f:dd:4e:4e:b1:69:2c:c9: 84:46:9f:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTblpmiZOHbaUtb6CSP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1 OGRiZjkwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygzZmZlMmE4OGM1YmI2MGFkMGMzZDIzNmNlNmJmZTFkNmMxZDlhMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OFSucbYISULncUpRJmpyVZMtyQr FO2FSJNqb1gtDSJxhbMtutDxeuz4QqQas4ygxmq9yQZG+kAxviF4gad93ppdRwam Qxr5hbimNm2TTC4QYB1t9TSk+i3eC36RZi4JJYNn4ImRPYVt+dbEGSJdYnmo0JRd v1FGkZQdRGE0mVLZ+O8DElOjkW5TvkABCcIgscUMIhn33gkBO0QGI4yfnW/PNxeI H2xIvKtwtyqQhfph+8D42r+CH5UGfYjc2jRhVVLtdLPSJQroOpzJP0PqN3fj1+vn D8z1++2QvFusBXLrcoAtsUd4+cXEj3yOsWiIjGOcy5JAnPibDN4Snalm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/+KojFu2CtDD0jbOa/4dbB2aJJMB8GA1UdIwQY MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt YjI1YTY3YjJlYjRhLzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4jYKeBR 1inEW5oWFG4lXGt8Jl/5D4POro2f39gAitWfm+h/uI54KQBI6bedJnMaSAzhd9pJ Q7hWfcvNIlGIFnHbe8JaLO8RyZF+LBEasWntj99QbFDqEdqe0D5+CCBOIix/bfwu TSIMElOJlOJAXpMS0lnOwvo5xCkjR8kcFkX4zP+1t5ofwN27jq+YAzv3tQXEjKg/ dC5gr/TMlCeRDICTVp5XPWIrCEEvmW0iCpiLcB7vwOJHtOm82EqdDsrthDQ/8btg FXCy9kpdK+SrugdkePHTTs9tDW0hx4+NWD9W/UzWzUaOlYuaxfRPjYHtD3NxLm/d Tk6xaSzJhEaffw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:40 2025 by rpki-client