This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json) Hash identifier: vNlhvyiyqRkTtoB1Vj+s9znq1XllRDVd0FIrM8TNFpY= Subject key identifier: 2A:2A:41:AD:2F:46:10:63:72:53:71:D1:8A:7E:A0:A7:95:8A:2B:B9 Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Certificate serial: 019B2EF95611E99DDD49E1AF0610B48AB7E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft Manifest number: 15E0 Signing time: Thu 18 Dec 2025 01:00:50 +0000 Manifest this update: Thu 18 Dec 2025 01:00:50 +0000 Manifest next update: Fri 19 Dec 2025 01:00:50 +0000 Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=) 2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: EhlzJ+I10tv4orXoeQoYWKMXf5sVClzcqSB7GVzCHqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:56:11:e9:9d:dd:49:e1:af:06:10:b4:8a:b7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Validity Not Before: Dec 18 01:00:50 2025 GMT Not After : Dec 19 01:00:50 2025 GMT Subject: CN=2a2a41ad2f461063725371d18a7ea0a7958a2bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:e3:26:2e:e8:1f:93:da:a1:f1:b7:50:78: a4:81:eb:89:99:6e:4d:ec:86:a3:17:8c:c1:23:4b: d5:db:fc:d5:b6:fc:c1:09:70:6f:1a:24:49:2f:5e: 36:8b:ee:93:af:d0:3a:f2:76:1d:31:89:2e:40:a2: 21:c4:0a:c8:34:83:43:28:14:ae:33:15:69:de:a7: a3:f5:3b:de:ba:dc:60:02:7a:0a:67:4c:9c:ee:43: 71:17:a4:d5:e8:cc:83:99:35:86:bb:96:80:57:1d: 72:06:fc:83:59:f1:84:ff:0d:17:d2:3a:04:b8:05: 3f:b6:70:ae:94:dc:fe:17:8f:a6:05:1a:17:e3:8d: 36:b6:c2:8d:9e:2b:20:98:83:4e:08:64:80:b2:dc: 69:50:d0:f0:b0:30:4a:9f:8b:18:0f:d5:d0:26:20: 29:26:45:68:01:81:fa:c8:18:da:94:ea:fd:71:e7: 13:e0:59:6c:28:f7:bd:25:c7:76:6c:9c:b7:b2:0f: 7a:4a:ba:a6:ca:35:32:c8:6f:3b:2b:45:ca:bd:9c: 11:e6:f9:de:eb:2d:ab:5a:70:62:1b:6e:66:0c:33: 37:45:99:1b:7d:3b:60:07:ae:a2:82:4d:fa:0c:a9: 3f:a6:e0:a4:1e:c3:d1:cf:7c:ba:6f:ed:2c:f0:3e: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:41:AD:2F:46:10:63:72:53:71:D1:8A:7E:A0:A7:95:8A:2B:B9 X509v3 Authority Key Identifier: keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c1:7c:90:85:d8:96:c7:c2:21:f0:52:3f:04:2f:f2:3c:63: f0:14:88:ab:bd:7c:30:f0:c6:4d:3a:e3:86:56:a2:c0:71:7d: 94:bb:21:66:0b:70:78:08:e6:b7:fa:9e:81:20:e1:b2:a9:d2: 7e:9a:be:9b:79:ba:20:23:01:36:6d:89:cc:a8:36:7f:47:70: 6a:3e:8f:6f:b1:b9:bd:5c:e7:23:bc:c7:a9:26:f4:e3:a7:68: 6c:0a:9e:19:5f:29:05:ad:69:12:5e:1d:6f:03:49:60:03:2a: 98:6a:4c:77:41:b8:42:8b:10:7c:89:74:ee:a4:17:40:67:f0: 94:ff:14:df:cd:cb:07:78:7e:30:92:ed:c2:9f:a7:08:cf:4c: 9d:e5:90:f9:3c:0a:91:ed:82:e5:bc:7d:00:74:e2:21:cb:45: 8b:a9:f5:ae:06:da:73:65:6e:b5:1a:3f:48:1c:49:5c:77:7f: 90:e4:48:36:7b:0a:15:ab:b4:de:d9:23:b3:66:8b:e2:b1:16: b6:f4:c7:3d:4e:45:08:95:e5:aa:79:d3:0b:4c:ed:ba:23:c0: 22:33:bb:c0:48:97:fd:b9:d3:e9:e9:59:5d:d7:20:0c:bd:17: b2:1f:b0:03:c1:86:93:84:64:ec:1e:65:6c:65:dc:d1:b8:ba: 5b:08:30:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+VYR6Z3dSeGvBhC0irfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl MTMzYjQwHhcNMjUxMjE4MDEwMDUwWhcNMjUxMjE5MDEwMDUwWjAzMTEwLwYDVQQD EygyYTJhNDFhZDJmNDYxMDYzNzI1MzcxZDE4YTdlYTBhNzk1OGEyYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oPjJi7oH5PaofG3UHikgeuJmW5N 7IajF4zBI0vV2/zVtvzBCXBvGiRJL142i+6Tr9A68nYdMYkuQKIhxArININDKBSu MxVp3qej9TveutxgAnoKZ0yc7kNxF6TV6MyDmTWGu5aAVx1yBvyDWfGE/w0X0joE uAU/tnCulNz+F4+mBRoX4402tsKNnisgmINOCGSAstxpUNDwsDBKn4sYD9XQJiAp JkVoAYH6yBjalOr9cecT4FlsKPe9Jcd2bJy3sg96SrqmyjUyyG87K0XKvZwR5vne 6y2rWnBiG25mDDM3RZkbfTtgB66igk36DKk/puCkHsPRz3y6b+0s8D4+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoqQa0vRhBjclNx0Yp+oKeViiu5MB8GA1UdIwQY MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMF8kIXY lsfCIfBSPwQv8jxj8BSIq718MPDGTTrjhlaiwHF9lLshZgtweAjmt/qegSDhsqnS fpq+m3m6ICMBNm2JzKg2f0dwaj6Pb7G5vVznI7zHqSb046dobAqeGV8pBa1pEl4d bwNJYAMqmGpMd0G4QosQfIl07qQXQGfwlP8U383LB3h+MJLtwp+nCM9MneWQ+TwK ke2C5bx9AHTiIctFi6n1rgbac2VutRo/SBxJXHd/kORINnsKFau03tkjs2aL4rEW tvTHPU5FCJXlqnnTC0ztuiPAIjO7wEiX/bnT6elZXdcgDL0Xsh+wA8GGk4Rk7B5l bGXc0bi6WwgwkA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:12 2025 by rpki-client