This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json) Hash identifier: DUKoywiFjpyGK16Bs/liBvdzBAyep+YJxTd2AdcR0Bg= Subject key identifier: 9F:01:B9:62:64:D6:A9:B6:14:83:61:ED:FC:4B:6E:06:4E:AF:EC:9B Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b Certificate serial: 019B32320FBEF3A9A4ACB1D27CCA780BB8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft Manifest number: 03A7 Signing time: Thu 18 Dec 2025 16:01:40 +0000 Manifest this update: Thu 18 Dec 2025 16:01:40 +0000 Manifest next update: Fri 19 Dec 2025 16:01:40 +0000 Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: N+9Z48LHy0qDjuyNHH2uI4wfxHkMAHf/Hyy7brfG/Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:32:0f:be:f3:a9:a4:ac:b1:d2:7c:ca:78:0b:b8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b Validity Not Before: Dec 18 16:01:40 2025 GMT Not After : Dec 19 16:01:40 2025 GMT Subject: CN=9f01b96264d6a9b6148361edfc4b6e064eafec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:df:cd:87:ab:5a:a4:1c:59:5a:8a:8e:aa: b3:e9:f9:ae:d8:95:06:e1:0b:a1:a2:f9:83:e5:14: 93:74:7b:9c:3f:3a:55:76:17:45:f3:1b:d3:08:c0: 54:ca:0c:75:4c:63:7d:93:3d:4d:ca:f2:a9:a8:6a: bd:e9:66:5c:65:34:50:4f:a4:b5:a4:18:ce:ca:ed: 48:6b:e5:c0:43:15:fb:d1:fe:8b:b6:a4:7d:72:02: 95:82:f1:91:a5:8f:c0:7b:4f:d1:06:f5:43:0f:fb: 5d:d6:ed:f4:8a:f6:81:8d:c2:31:76:ab:30:8b:04: 8d:bd:c9:e6:02:57:0a:fe:05:0e:ce:c4:7f:c1:c6: e3:fa:f0:08:db:ac:5e:ad:7c:bb:3d:75:d0:c6:6a: 5f:01:7a:9f:bd:59:97:6a:5a:fa:f5:b2:d3:35:e7: 4f:03:5a:da:9b:8a:63:4b:5e:0c:fa:06:9a:f1:0f: 0f:0a:49:75:0a:50:40:3d:44:e2:c5:c6:dc:cb:eb: 78:61:17:5d:37:f7:14:2c:74:d9:d8:56:13:3b:1c: 3c:be:c0:f1:b5:e1:d2:6d:f0:71:fc:f8:73:8f:58: eb:1d:02:d4:29:c1:18:b2:19:77:26:c1:b5:24:77: 14:b3:ea:4a:72:a1:7c:75:16:c3:d4:70:ea:cc:34: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:B9:62:64:D6:A9:B6:14:83:61:ED:FC:4B:6E:06:4E:AF:EC:9B X509v3 Authority Key Identifier: keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:82:bd:2a:94:13:f6:cf:b7:35:74:36:17:47:bd:4d:e0:8f: f1:bd:d9:58:f6:de:3c:c1:9a:89:bd:e5:54:45:cc:94:d4:8a: 50:f0:45:b9:93:0a:27:b9:4c:be:d4:82:5d:d5:7b:54:2d:2a: 8d:ac:90:f4:38:05:55:00:6e:92:ba:79:d9:49:29:dd:1b:cc: e2:55:08:b9:d6:07:61:a6:87:8c:98:c9:75:03:32:2a:87:28: b3:b7:1f:74:52:af:96:aa:54:19:c9:8b:ab:33:64:ce:38:58: 51:0a:6a:09:35:bf:07:d3:cd:f2:92:39:f7:c5:0e:93:9e:23: 8d:bc:7f:0f:43:49:6e:93:a2:0b:05:6e:eb:5e:d8:a0:41:ec: 7d:7e:52:8e:62:26:93:01:f5:ff:25:b3:41:07:10:2a:05:4b: 2c:e6:19:79:9b:10:2b:da:f8:92:c9:3d:2c:3c:32:7b:95:09: b2:3b:08:c6:52:dd:bd:ac:02:81:04:6c:80:bb:22:f7:d0:ff: 12:6a:b8:2c:0b:4a:c9:8f:c3:20:47:fe:60:30:f0:2f:8e:bd: 24:ef:a4:0a:3f:55:5d:c6:16:fd:ce:ae:7d:77:4b:20:be:db: 6d:55:db:bb:a4:6d:96:c6:44:d8:80:98:f7:e5:7c:d4:1a:a4: 5a:ef:34:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMg++86mkrLHSfMp4C7jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj Y2Q0MWIwHhcNMjUxMjE4MTYwMTQwWhcNMjUxMjE5MTYwMTQwWjAzMTEwLwYDVQQD Eyg5ZjAxYjk2MjY0ZDZhOWI2MTQ4MzYxZWRmYzRiNmUwNjRlYWZlYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul/fzYerWqQcWVqKjqqz6fmu2JUG 4QuhovmD5RSTdHucPzpVdhdF8xvTCMBUygx1TGN9kz1NyvKpqGq96WZcZTRQT6S1 pBjOyu1Ia+XAQxX70f6LtqR9cgKVgvGRpY/Ae0/RBvVDD/td1u30ivaBjcIxdqsw iwSNvcnmAlcK/gUOzsR/wcbj+vAI26xerXy7PXXQxmpfAXqfvVmXalr69bLTNedP A1ram4pjS14M+gaa8Q8PCkl1ClBAPUTixcbcy+t4YRddN/cULHTZ2FYTOxw8vsDx teHSbfBx/Phzj1jrHQLUKcEYshl3JsG1JHcUs+pKcqF8dRbD1HDqzDSuhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8BuWJk1qm2FINh7fxLbgZOr+ybMB8GA1UdIwQY MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYK9KpQT 9s+3NXQ2F0e9TeCP8b3ZWPbePMGaib3lVEXMlNSKUPBFuZMKJ7lMvtSCXdV7VC0q jayQ9DgFVQBukrp52Ukp3RvM4lUIudYHYaaHjJjJdQMyKocos7cfdFKvlqpUGcmL qzNkzjhYUQpqCTW/B9PN8pI598UOk54jjbx/D0NJbpOiCwVu617YoEHsfX5SjmIm kwH1/yWzQQcQKgVLLOYZeZsQK9r4ksk9LDwye5UJsjsIxlLdvawCgQRsgLsi99D/ Emq4LAtKyY/DIEf+YDDwL469JO+kCj9VXcYW/c6ufXdLIL7bbVXbu6RtlsZE2ICY 9+V81BqkWu80lA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:00:11 2025 by rpki-client