This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: QM7aNMrSGwa75j8+NMuwRtMzhAevD0t1cDrk1FkFAr4= Subject key identifier: 6F:0D:E3:5E:FC:00:FE:D6:9F:EC:38:5C:0D:79:9B:42:6C:70:3B:C0 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B3E355DD7C16851D6C2B276D50768F463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 14B0 Signing time: Sun 21 Dec 2025 00:00:43 +0000 Manifest this update: Sun 21 Dec 2025 00:00:43 +0000 Manifest next update: Mon 22 Dec 2025 00:00:43 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: dgUd7lJQuPnlVfbiuMysujz+iEnEI9bOcxz3HuDDqD4=) 9: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) 10: v8hBMDKY65zo2V6449UJSPRVSUE.roa (hash: 7bLL/W+lnh1+jDhX4cXB4UWGoYDQrNjyksVTGR4y1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:5d:d7:c1:68:51:d6:c2:b2:76:d5:07:68:f4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Dec 21 00:00:43 2025 GMT Not After : Dec 22 00:00:43 2025 GMT Subject: CN=6f0de35efc00fed69fec385c0d799b426c703bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:ff:1b:85:b4:81:2f:cf:38:02:50:ed:85: 5c:70:72:05:36:9f:10:2c:e0:e7:f5:89:4b:3c:73: b5:1c:e0:d4:8b:d6:2d:cd:b5:61:e9:ea:b9:de:90: 56:e3:05:96:87:c4:3e:cc:03:70:50:91:e5:be:8d: 62:a9:b3:90:7e:f2:0f:87:d3:66:52:f9:b0:7d:b5: 30:22:b4:21:d3:11:d1:dd:c0:18:b6:31:c1:60:22: 24:fc:3f:49:83:88:c7:32:10:27:7e:56:36:be:b4: 3e:ac:75:37:96:11:1f:d9:ab:c5:18:6a:bc:b5:e0: 3f:8c:2b:04:ec:7b:16:fb:88:3c:30:62:69:fd:1b: 3f:1a:51:1e:a7:b7:a6:91:55:f8:92:01:0e:6a:e5: f2:9f:49:b7:0c:04:2d:86:19:35:75:b8:e1:c0:bf: 27:04:5a:f7:00:56:a2:74:5a:c5:d5:a9:14:92:07: 28:83:f1:94:7b:1f:c8:bf:fd:4b:49:bf:92:24:b9: b7:6e:3c:b7:50:f4:f1:10:75:f8:e5:1b:b8:98:c8: 24:d8:1b:13:e9:60:2d:5f:d0:a0:99:73:66:03:f7: 20:97:02:c7:72:78:70:0c:ed:25:1a:8d:2a:0a:c0: e6:82:d5:56:37:fa:0a:b8:56:cd:01:4b:8b:1f:d5: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0D:E3:5E:FC:00:FE:D6:9F:EC:38:5C:0D:79:9B:42:6C:70:3B:C0 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:20:52:30:63:89:a8:83:7f:27:25:32:9c:40:6e:a6:bd: 84:63:66:57:00:7a:60:c7:12:f8:ad:f6:07:ad:66:b4:99:15: 1e:ae:83:9c:f4:19:fd:db:4d:a7:5a:19:67:85:5e:a6:bc:a4: 08:dd:b7:3a:4e:9b:52:d0:49:13:9f:b9:f4:70:21:c5:7b:5a: 87:23:3d:1f:c0:7e:52:06:9a:38:63:17:2f:23:12:fb:4b:71: d2:61:92:fa:b4:e1:fb:32:a5:48:18:17:8a:e5:e9:58:d2:14: 53:db:a0:8c:2b:b4:66:29:f9:9d:ba:51:e2:68:93:c3:fa:19: b4:b6:ad:67:4c:14:37:ce:b2:cf:26:e3:04:a4:03:74:3f:ac: 09:d6:d7:5b:f5:9c:a8:71:c6:42:54:d6:08:c0:8f:0f:3b:49: 21:ca:08:e1:fa:5b:c7:c7:08:81:7a:55:9d:e8:28:78:5f:2c: 57:af:83:4e:ae:26:53:15:f9:91:89:d8:94:b2:6d:52:29:70: 1b:55:48:12:84:45:15:e3:d5:8f:4b:e6:0c:cf:b3:91:09:d6: 0c:57:96:87:0b:02:3b:0d:c7:25:3e:48:df:82:f6:50:a2:01: 86:e4:c5:31:56:b0:bf:45:b1:e4:23:ad:de:96:33:11:c4:1f: b1:e4:ea:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NV3XwWhR1sKydtUHaPRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUxMjIxMDAwMDQzWhcNMjUxMjIyMDAwMDQzWjAzMTEwLwYDVQQD Eyg2ZjBkZTM1ZWZjMDBmZWQ2OWZlYzM4NWMwZDc5OWI0MjZjNzAzYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAX/G4W0gS/POAJQ7YVccHIFNp8Q LODn9YlLPHO1HODUi9YtzbVh6eq53pBW4wWWh8Q+zANwUJHlvo1iqbOQfvIPh9Nm UvmwfbUwIrQh0xHR3cAYtjHBYCIk/D9Jg4jHMhAnflY2vrQ+rHU3lhEf2avFGGq8 teA/jCsE7HsW+4g8MGJp/Rs/GlEep7emkVX4kgEOauXyn0m3DAQthhk1dbjhwL8n BFr3AFaidFrF1akUkgcog/GUex/Iv/1LSb+SJLm3bjy3UPTxEHX45Ru4mMgk2BsT 6WAtX9CgmXNmA/cglwLHcnhwDO0lGo0qCsDmgtVWN/oKuFbNAUuLH9VZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8N4178AP7Wn+w4XA15m0JscDvAMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDkgUjBj iaiDfyclMpxAbqa9hGNmVwB6YMcS+K32B61mtJkVHq6DnPQZ/dtNp1oZZ4Vepryk CN23Ok6bUtBJE5+59HAhxXtahyM9H8B+UgaaOGMXLyMS+0tx0mGS+rTh+zKlSBgX iuXpWNIUU9ugjCu0Zin5nbpR4miTw/oZtLatZ0wUN86yzybjBKQDdD+sCdbXW/Wc qHHGQlTWCMCPDztJIcoI4fpbx8cIgXpVnegoeF8sV6+DTq4mUxX5kYnYlLJtUilw G1VIEoRFFePVj0vmDM+zkQnWDFeWhwsCOw3HJT5I34L2UKIBhuTFMVawv0Wx5COt 3pYzEcQfseTqtw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:59 2025 by rpki-client