This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json) Hash identifier: sW2Nj6z725NZTqz12DlmCeT4f3zSUNxgEFRJR6M0ojU= Subject key identifier: 94:AD:1B:D8:A1:BB:E1:B8:14:45:61:F4:45:4B:7B:35:54:95:40:F5 Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Certificate serial: 019AF276C7DF4989458056DD92F54705A860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft Manifest number: 01B7 Signing time: Sat 06 Dec 2025 07:01:01 +0000 Manifest this update: Sat 06 Dec 2025 07:01:01 +0000 Manifest next update: Sun 07 Dec 2025 07:01:01 +0000 Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: AtSkpHU7pSw/GkTldRu/wo9wk45Bvh0XEqYnnKh+CFw=) 2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c7:df:49:89:45:80:56:dd:92:f5:47:05:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Validity Not Before: Dec 6 07:01:01 2025 GMT Not After : Dec 7 07:01:01 2025 GMT Subject: CN=94ad1bd8a1bbe1b8144561f4454b7b35549540f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:b3:ad:4c:fe:d6:1b:93:06:73:08:db:00: 1b:7a:a5:52:6f:4a:bb:90:b2:62:d2:2a:45:51:52: 5a:7e:13:b1:26:2e:e1:de:5f:7c:6e:6a:0f:3c:99: 9b:2c:8a:e7:05:f6:b1:b4:97:e9:01:ae:87:5b:7b: 1c:e5:f9:ad:c1:a9:7f:92:2c:36:3c:3e:ee:df:4a: 6a:b0:c3:ad:61:68:67:88:79:6d:42:3a:1d:44:5f: 1f:56:88:36:a2:23:a5:34:39:65:16:33:b6:2c:1a: 37:bd:92:67:95:91:5c:64:57:bb:90:4a:fb:00:3b: d4:5f:c8:16:57:ea:11:6f:ea:40:aa:3d:17:ad:3c: 38:b2:7c:03:d5:77:7e:50:82:2d:f7:3f:60:26:f2: 1d:23:0c:dd:be:c7:6f:8b:c3:ff:6a:24:b7:41:c3: 54:e6:51:4a:45:b2:93:e3:da:a4:09:98:1e:57:be: c6:0d:cd:51:d0:56:9d:a5:03:2b:a0:b7:af:4b:6e: 71:ed:3f:73:03:c3:7d:57:9c:53:06:91:d9:cd:f5: d9:cf:f2:da:c9:e7:09:d5:9f:15:c8:71:34:38:c2: 42:9d:3d:13:46:2e:86:fe:e9:52:59:04:08:26:6d: fe:b8:81:75:fa:b8:b5:5e:bc:a9:27:5d:3c:0d:c4: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AD:1B:D8:A1:BB:E1:B8:14:45:61:F4:45:4B:7B:35:54:95:40:F5 X509v3 Authority Key Identifier: keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2a:c4:fe:14:1b:19:61:b3:60:b5:59:8e:53:83:15:32:87: 31:a0:5a:68:4f:3c:dc:c6:85:f7:30:f2:77:06:05:aa:98:1b: 71:d1:3e:c0:ff:9d:84:a3:f4:09:57:68:79:0a:b6:25:29:24: 1f:9c:4f:2f:ae:29:94:73:06:aa:2d:4f:f3:57:f5:40:53:61: a1:d4:f0:db:a6:6a:38:93:82:2d:94:1c:3c:d2:7e:2c:ac:66: 64:4e:6a:3f:f1:3b:fe:bf:9f:9c:00:22:a2:b8:e0:8f:ad:99: 8a:e3:97:ac:8a:78:48:6a:28:c9:08:c4:72:1e:5d:48:92:87: 19:eb:28:e5:57:b8:b5:4d:fe:0e:81:75:61:88:6f:f0:85:8c: 76:10:f3:70:d8:44:07:4c:37:03:0c:bf:9b:01:cd:23:6b:f9: f1:d3:2c:81:39:e7:9e:ae:63:cf:3d:43:d5:3c:a8:45:4d:e8: 2c:60:cf:d4:7b:49:e4:ff:1e:7e:fa:ec:a7:8e:a9:2a:0f:2a: a3:77:9a:fe:1d:a1:db:be:ae:a9:0a:33:cd:1c:76:63:0c:33: 80:51:9c:1e:76:9e:94:b4:3c:6d:e7:f7:93:db:f7:71:fe:46: 16:28:e2:18:48:df:2c:73:f1:50:06:a5:23:a8:d2:9a:5b:40: e7:12:50:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsffSYlFgFbdkvVHBahgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk OWVjY2IwHhcNMjUxMjA2MDcwMTAxWhcNMjUxMjA3MDcwMTAxWjAzMTEwLwYDVQQD Eyg5NGFkMWJkOGExYmJlMWI4MTQ0NTYxZjQ0NTRiN2IzNTU0OTU0MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhazrUz+1huTBnMI2wAbeqVSb0q7 kLJi0ipFUVJafhOxJi7h3l98bmoPPJmbLIrnBfaxtJfpAa6HW3sc5fmtwal/kiw2 PD7u30pqsMOtYWhniHltQjodRF8fVog2oiOlNDllFjO2LBo3vZJnlZFcZFe7kEr7 ADvUX8gWV+oRb+pAqj0XrTw4snwD1Xd+UIIt9z9gJvIdIwzdvsdvi8P/aiS3QcNU 5lFKRbKT49qkCZgeV77GDc1R0FadpQMroLevS25x7T9zA8N9V5xTBpHZzfXZz/La yecJ1Z8VyHE0OMJCnT0TRi6G/ulSWQQIJm3+uIF1+ri1XrypJ108DcR/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJStG9ihu+G4FEVh9EVLezVUlUD1MB8GA1UdIwQY MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCrE/hQb GWGzYLVZjlODFTKHMaBaaE883MaF9zDydwYFqpgbcdE+wP+dhKP0CVdoeQq2JSkk H5xPL64plHMGqi1P81f1QFNhodTw26ZqOJOCLZQcPNJ+LKxmZE5qP/E7/r+fnAAi orjgj62ZiuOXrIp4SGooyQjEch5dSJKHGeso5Ve4tU3+DoF1YYhv8IWMdhDzcNhE B0w3Awy/mwHNI2v58dMsgTnnnq5jzz1D1TyoRU3oLGDP1HtJ5P8efvrsp46pKg8q o3ea/h2h276uqQozzRx2YwwzgFGcHnaelLQ8bef3k9v3cf5GFijiGEjfLHPxUAal I6jSmltA5xJQyA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:27 2025 by rpki-client