This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json) Hash identifier: /9wsBegcY69dSeCkzwN2CT7OWx21kPFYefsJ7xd6wfY= Subject key identifier: 00:4F:42:35:04:50:65:1C:53:64:38:2E:F6:C0:0D:D6:A0:0E:63:12 Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93 Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493 Certificate serial: 019B495E7133FE19098F690D5728B3FBA624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft Manifest number: 1667 Signing time: Tue 23 Dec 2025 04:01:24 +0000 Manifest this update: Tue 23 Dec 2025 04:01:24 +0000 Manifest next update: Wed 24 Dec 2025 04:01:24 +0000 Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: dvQPsNdWWeJ9MaMGBYtTcYVGzjRXeHUm2Dsrpv4nHUA=) 2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:71:33:fe:19:09:8f:69:0d:57:28:b3:fb:a6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493 Validity Not Before: Dec 23 04:01:24 2025 GMT Not After : Dec 24 04:01:24 2025 GMT Subject: CN=004f42350450651c5364382ef6c00dd6a00e6312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:30:cf:68:c8:f7:a7:90:b6:9d:ca:c7:7a: 3e:05:bc:56:82:cc:fb:c5:7a:65:b3:6b:36:15:64: c1:81:ec:ce:ce:e5:89:ba:15:d2:c4:88:17:fb:29: 0b:a3:1a:8e:be:f0:9c:a0:ce:76:32:99:48:88:a4: 8c:11:5b:4e:1d:98:bd:57:21:ea:ad:66:ff:98:ab: ea:f7:02:92:6b:a6:80:8b:89:fb:d2:26:d2:97:28: 77:0f:53:6d:f2:63:64:af:35:5b:fe:e9:ab:82:e7: d3:0f:a0:2d:b4:a7:c0:ac:bb:59:5c:e5:55:b5:d9: 18:37:c9:16:d7:e4:e9:db:34:ff:e6:9c:9b:32:62: 92:92:7a:6d:9f:ab:e5:86:e7:2a:65:8b:25:b3:f0: 5b:28:ec:51:31:83:36:b1:87:11:f4:36:8f:0e:c1: 8b:23:00:af:6d:2e:ba:d3:da:96:a1:58:ed:a3:4c: 85:db:6b:ee:be:81:0a:1e:35:37:8a:5c:df:68:f2: 2f:7c:99:51:28:cd:46:e1:a8:90:8b:96:4f:8f:39: cb:fb:3a:0b:55:7e:2e:bc:e3:c2:93:71:f3:68:57: bb:5a:da:0b:9e:2d:b7:4b:ee:11:3e:da:9e:84:11: 50:ef:af:10:e6:42:eb:3e:0d:8f:7e:ab:22:69:97: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4F:42:35:04:50:65:1C:53:64:38:2E:F6:C0:0D:D6:A0:0E:63:12 X509v3 Authority Key Identifier: keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:e8:cb:38:2a:78:79:62:d7:02:01:b6:69:5c:f6:d4:04: e5:25:2c:72:4e:73:b0:7c:f8:13:d7:b9:ef:b9:be:bf:cd:14: 80:09:f4:15:ad:97:88:39:3c:37:80:fc:e7:49:ef:b2:0e:ca: 19:1a:1a:b6:69:3f:63:e9:aa:8c:73:35:3b:b7:a3:ba:e6:e3: 1a:ee:74:15:c4:15:e9:e2:40:74:11:12:6a:f6:36:f9:09:ee: 05:ea:df:6c:5e:f2:0d:0a:c1:4b:f7:6a:fb:8d:0c:01:95:9d: 0c:27:77:6d:2c:ed:27:bc:7a:93:c5:58:a5:10:c9:fd:55:cd: 7e:94:c9:8f:26:94:f5:14:03:d4:70:dc:19:05:46:56:3a:de: 28:1d:86:b7:82:4a:3c:7c:65:5e:14:2f:b1:ca:38:ff:ab:fb: ba:61:f9:3f:9a:bb:04:9a:60:8d:64:0c:85:47:6c:76:af:b5: 11:65:78:ce:a9:7b:5b:9f:28:22:48:87:c8:d9:95:e1:8e:92: b1:45:3c:46:e6:ae:17:ca:ee:e8:d7:bf:47:df:04:4b:de:d5: a2:10:dc:20:e0:7f:82:19:e2:f1:1f:e1:1b:1d:98:19:63:8d: b2:9e:b7:1c:67:fa:7d:9d:ec:84:85:d5:14:ff:32:91:84:df: e1:48:b1:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXnEz/hkJj2kNVyiz+6YkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYTNiNTAyOGNlMzY0ZjUxMDJjMWFlYzI3NzM2YjdjMzNi YzA0OTMwHhcNMjUxMjIzMDQwMTI0WhcNMjUxMjI0MDQwMTI0WjAzMTEwLwYDVQQD EygwMDRmNDIzNTA0NTA2NTFjNTM2NDM4MmVmNmMwMGRkNmEwMGU2MzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Gowz2jI96eQtp3Kx3o+BbxWgsz7 xXpls2s2FWTBgezOzuWJuhXSxIgX+ykLoxqOvvCcoM52MplIiKSMEVtOHZi9VyHq rWb/mKvq9wKSa6aAi4n70ibSlyh3D1Nt8mNkrzVb/umrgufTD6AttKfArLtZXOVV tdkYN8kW1+Tp2zT/5pybMmKSknptn6vlhucqZYsls/BbKOxRMYM2sYcR9DaPDsGL IwCvbS6609qWoVjto0yF22vuvoEKHjU3ilzfaPIvfJlRKM1G4aiQi5ZPjznL+zoL VX4uvOPCk3HzaFe7WtoLni23S+4RPtqehBFQ768Q5kLrPg2PfqsiaZedvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABPQjUEUGUcU2Q4LvbADdagDmMSMB8GA1UdIwQY MBaAFG6jtQKM42T1ECwa7Cdza3wzvASTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAt NjEyYTc2MjAwN2VjLzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAtNjEyYTc2MjAwN2Vj LzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWnoyzgq eHli1wIBtmlc9tQE5SUsck5zsHz4E9e577m+v80UgAn0Fa2XiDk8N4D850nvsg7K GRoatmk/Y+mqjHM1O7ejuubjGu50FcQV6eJAdBESavY2+QnuBerfbF7yDQrBS/dq +40MAZWdDCd3bSztJ7x6k8VYpRDJ/VXNfpTJjyaU9RQD1HDcGQVGVjreKB2Gt4JK PHxlXhQvsco4/6v7umH5P5q7BJpgjWQMhUdsdq+1EWV4zql7W58oIkiHyNmV4Y6S sUU8RuauF8ru6Ne/R98ES97VohDcIOB/ghni8R/hGx2YGWONsp63HGf6fZ3shIXV FP8ykYTf4UixlA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:50:52 2025 by rpki-client