This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json) Hash identifier: CntBYEW2v3ausNe5b3iVCv6/qbhAgX7yDHZWFy/bRP0= Subject key identifier: F9:6C:F9:D4:60:22:2F:88:68:4C:4A:35:B6:AE:54:56:BF:42:1C:82 Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc Certificate serial: 019AF19B19431EF8E8493D6B07C16F90F67E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft Manifest number: 065D Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: rZOoKnNb3XpwPzdz+VWRTW7Zi4W8Q8WQ4QzymSw1mMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:43:1e:f8:e8:49:3d:6b:07:c1:6f:90:f6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=f96cf9d460222f88684c4a35b6ae5456bf421c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:bb:09:8b:e0:b9:1f:bf:26:be:fe:fc:e2: 57:ca:f9:95:6e:4d:71:44:15:fe:71:3d:a7:1d:29: 4d:2a:86:59:b7:80:c7:3b:c7:f5:ee:e9:6a:c7:4f: 4d:a9:60:4f:bf:0c:1e:8a:07:90:41:31:8e:32:18: b1:4e:ea:7c:fe:ea:ab:d2:fc:8a:5d:2a:77:6b:23: 2b:25:0d:5f:2a:5e:61:4d:9b:41:5f:69:f6:7f:14: ab:24:be:6f:f8:c1:29:19:df:65:d3:25:ee:b3:8f: c4:75:16:e1:dd:2b:d0:02:02:21:e0:b3:d6:31:63: 3c:f6:0b:a1:4a:ed:88:3b:af:8d:be:26:80:23:65: 75:30:e5:95:c7:df:03:c2:63:8a:a5:6d:3f:20:7c: ef:f0:1c:03:aa:3c:b7:87:4e:3d:0a:28:9a:a8:5e: d9:19:eb:b5:fd:84:95:6a:63:f4:78:3a:8e:ac:77: c9:52:49:85:0a:52:bf:f3:1e:a6:9d:04:6f:0e:8a: 4f:1f:2c:4f:2b:2b:d5:dd:43:00:4f:66:55:07:70: 3a:3b:ba:ae:df:fb:c7:f8:be:e8:a7:87:71:fa:73: ec:a9:c3:80:bb:ad:69:fd:e3:9f:bb:0f:32:fd:75: 3a:fb:4e:b2:54:d2:fe:b7:4f:cc:82:45:c9:db:24: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:F9:D4:60:22:2F:88:68:4C:4A:35:B6:AE:54:56:BF:42:1C:82 X509v3 Authority Key Identifier: keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:82:be:56:bf:b9:7e:e2:17:85:90:16:ad:39:c8:ef:d3:a4: ef:6a:ad:3d:e3:c8:92:50:c4:31:f7:d3:0b:7a:73:4f:e6:82: 85:e6:87:b1:e0:9c:aa:00:c3:bc:d7:72:df:b0:9b:e6:0d:b8: 6c:44:0c:5e:83:84:cf:03:a4:cd:c8:cc:a4:88:6e:7d:1c:39: 30:51:ab:36:3e:32:9c:fb:95:a1:69:5f:81:a2:e1:47:9d:62: 27:25:d2:6a:4b:92:80:dc:be:79:6a:50:f5:ba:48:4d:16:73: 43:45:b5:02:8d:e1:f6:d6:c8:08:4b:0c:e4:6b:af:ad:a3:40: b4:1d:a1:b4:db:23:60:74:f9:e7:38:00:81:92:ba:e5:0b:69: 93:e0:fd:47:8e:51:47:94:e7:f1:16:66:ef:0b:08:ec:01:eb: c0:e4:4e:b5:b9:c1:83:14:e7:2e:86:95:09:fd:56:e7:30:33: fe:b6:1e:67:0f:4c:40:9b:36:41:bc:ad:6e:a7:12:17:85:3e: 63:aa:ac:c1:d7:a8:5c:f8:01:f2:72:bf:75:fe:9a:bc:64:63: 7d:80:9f:c5:31:d4:95:33:3d:b7:8b:e7:92:c5:87:45:aa:ac: 8c:75:26:09:72:82:4e:0f:59:54:8e:17:95:4b:d7:af:61:59: 8e:54:0e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxlDHvjoST1rB8FvkPZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDk5ZTkwOGU3ZDg4NzllMjRkMWVkZTA5ZDgxMmNmNDZh ZGUyY2MwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhmOTZjZjlkNDYwMjIyZjg4Njg0YzRhMzViNmFlNTQ1NmJmNDIxYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QG7CYvguR+/Jr7+/OJXyvmVbk1x RBX+cT2nHSlNKoZZt4DHO8f17ulqx09NqWBPvwweigeQQTGOMhixTup8/uqr0vyK XSp3ayMrJQ1fKl5hTZtBX2n2fxSrJL5v+MEpGd9l0yXus4/EdRbh3SvQAgIh4LPW MWM89guhSu2IO6+NviaAI2V1MOWVx98DwmOKpW0/IHzv8BwDqjy3h049CiiaqF7Z Geu1/YSVamP0eDqOrHfJUkmFClK/8x6mnQRvDopPHyxPKyvV3UMAT2ZVB3A6O7qu 3/vH+L7op4dx+nPsqcOAu61p/eOfuw8y/XU6+06yVNL+t0/MgkXJ2yRm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPls+dRgIi+IaExKNbauVFa/QhyCMB8GA1UdIwQY MBaAFG0JnpCOfYh54k0e3gnYEs9GreLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYt N2NjZTM0ZmU2YjVkLzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYtN2NjZTM0ZmU2YjVk LzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0IK+Vr+5 fuIXhZAWrTnI79Ok72qtPePIklDEMffTC3pzT+aCheaHseCcqgDDvNdy37Cb5g24 bEQMXoOEzwOkzcjMpIhufRw5MFGrNj4ynPuVoWlfgaLhR51iJyXSakuSgNy+eWpQ 9bpITRZzQ0W1Ao3h9tbICEsM5GuvraNAtB2htNsjYHT55zgAgZK65Qtpk+D9R45R R5Tn8RZm7wsI7AHrwOROtbnBgxTnLoaVCf1W5zAz/rYeZw9MQJs2QbytbqcSF4U+ Y6qswdeoXPgB8nK/df6avGRjfYCfxTHUlTM9t4vnksWHRaqsjHUmCXKCTg9ZVI4X lUvXr2FZjlQOeA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:46 2025 by rpki-client