This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json) Hash identifier: yi1FA7nmsx+PtjzxIidn892YvDSN/GeYt5Pr5bSyVEQ= Subject key identifier: 7B:08:7D:B9:A9:64:F2:FF:B5:5B:9E:1C:29:B8:72:B6:CB:4C:82:5D Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Certificate serial: 019AF42E835F07F66B7C2541EB8A30A67A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft Manifest number: 0BF0 Signing time: Sat 06 Dec 2025 15:01:20 +0000 Manifest this update: Sat 06 Dec 2025 15:01:20 +0000 Manifest next update: Sun 07 Dec 2025 15:01:20 +0000 Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: d+sGQX4eDAYClIeV/2QNFPmmbRlSlaGRpDpLNj7gDH8=) 2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:83:5f:07:f6:6b:7c:25:41:eb:8a:30:a6:7a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Validity Not Before: Dec 6 15:01:20 2025 GMT Not After : Dec 7 15:01:20 2025 GMT Subject: CN=7b087db9a964f2ffb55b9e1c29b872b6cb4c825d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:be:79:33:88:75:77:51:db:5c:ce:53:db: 18:d3:17:31:3c:54:cb:ce:9b:2b:38:d8:76:1d:54: b1:e0:16:71:db:0f:3c:44:f4:6f:0a:78:2d:90:da: fc:d3:9d:ec:96:5f:12:d0:57:44:f7:a7:2c:67:23: bd:5b:99:b0:21:9f:97:a6:1e:51:3e:b3:3b:b9:64: ff:33:87:56:64:5d:cc:f7:c7:ca:ba:33:a4:57:e1: 86:d3:ef:32:32:f9:4c:76:f8:87:0d:f3:a6:bf:16: 36:4e:e5:4d:5b:c7:2a:6a:76:05:15:dc:9e:9c:88: 6e:fb:62:8b:63:9f:1d:d5:7c:e2:00:16:6d:ba:2c: 50:e6:82:41:28:8a:59:ba:b9:8a:75:a6:d0:8e:47: a3:4c:cd:a0:c6:4d:5d:52:44:8c:20:9f:f8:85:d6: e7:c1:b7:a8:8e:e5:9f:92:22:3d:d8:82:1a:cd:c0: ee:4d:f2:41:bb:a2:ab:e1:38:b8:a9:b8:8f:7d:dc: 94:de:6c:4f:bb:bb:c4:91:55:b0:e8:fb:c6:39:21: 36:41:2c:48:61:24:45:0c:63:86:80:25:3f:75:a2: c3:69:a4:38:1f:5b:0b:fb:4a:f0:38:5b:49:bf:18: e1:8a:94:99:50:6d:d0:1b:b5:d9:4b:66:0c:60:ee: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:08:7D:B9:A9:64:F2:FF:B5:5B:9E:1C:29:B8:72:B6:CB:4C:82:5D X509v3 Authority Key Identifier: keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e7:b5:74:d8:3f:3c:63:87:8e:d9:df:2d:8c:a0:da:4b:2d: ae:6a:ae:eb:26:bf:0b:5a:f1:03:f5:1c:00:6a:52:04:5c:04: e2:b3:2e:f0:f5:e3:4f:eb:70:89:b9:e6:e3:55:5f:a8:d4:f4: da:91:b5:75:29:99:ed:59:e9:4b:e5:c3:85:9a:f2:86:44:e7: 2a:d1:74:35:67:91:a4:0a:97:d2:6a:9c:29:b8:db:a0:38:5a: 3f:53:2e:40:a8:73:67:1e:71:a5:fc:a4:c1:03:c7:b9:38:16: 7f:af:b7:c5:54:e1:b9:2a:13:60:bf:19:16:43:da:be:5a:25: d3:d2:1d:e7:1e:e0:c1:39:37:6b:31:f0:f7:39:a2:52:7a:3f: 3d:b9:e0:ee:1b:11:4f:8e:e5:9e:50:b2:7a:a5:a5:91:1b:fe: b6:2e:80:fc:b9:26:ab:93:54:79:c3:3e:fc:5b:d1:c1:a4:dc: 48:52:88:f1:50:fa:64:11:4b:28:51:b6:a7:46:2c:ba:93:f2: 18:47:86:76:cb:92:b1:0b:99:bc:69:63:65:27:dc:d9:ec:8f: 66:2d:83:80:9a:24:8d:44:1c:e2:0f:9b:d5:d7:35:1c:1c:de: 56:bf:8e:59:f0:42:62:bb:ef:c2:3c:95:ca:29:e8:f2:2e:19: 83:3c:d4:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoNfB/ZrfCVB64owpnopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk ZGI0OTYwHhcNMjUxMjA2MTUwMTIwWhcNMjUxMjA3MTUwMTIwWjAzMTEwLwYDVQQD Eyg3YjA4N2RiOWE5NjRmMmZmYjU1YjllMWMyOWI4NzJiNmNiNGM4MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouC+eTOIdXdR21zOU9sY0xcxPFTL zpsrONh2HVSx4BZx2w88RPRvCngtkNr8053sll8S0FdE96csZyO9W5mwIZ+Xph5R PrM7uWT/M4dWZF3M98fKujOkV+GG0+8yMvlMdviHDfOmvxY2TuVNW8cqanYFFdye nIhu+2KLY58d1XziABZtuixQ5oJBKIpZurmKdabQjkejTM2gxk1dUkSMIJ/4hdbn wbeojuWfkiI92IIazcDuTfJBu6Kr4Ti4qbiPfdyU3mxPu7vEkVWw6PvGOSE2QSxI YSRFDGOGgCU/daLDaaQ4H1sL+0rwOFtJvxjhipSZUG3QG7XZS2YMYO7f4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsIfbmpZPL/tVueHCm4crbLTIJdMB8GA1UdIwQY MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4 LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYue1dNg/ PGOHjtnfLYyg2kstrmqu6ya/C1rxA/UcAGpSBFwE4rMu8PXjT+twibnm41VfqNT0 2pG1dSmZ7VnpS+XDhZryhkTnKtF0NWeRpAqX0mqcKbjboDhaP1MuQKhzZx5xpfyk wQPHuTgWf6+3xVThuSoTYL8ZFkPavlol09Id5x7gwTk3azHw9zmiUno/Pbng7hsR T47lnlCyeqWlkRv+ti6A/Lkmq5NUecM+/FvRwaTcSFKI8VD6ZBFLKFG2p0YsupPy GEeGdsuSsQuZvGljZSfc2eyPZi2DgJokjUQc4g+b1dc1HBzeVr+OWfBCYrvvwjyV yino8i4ZgzzUYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:56 2025 by rpki-client