This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: h4HukttkTTSUZDm7xDDDl2Jrbtv+mbU7dqGrQABqjs8= Subject key identifier: 02:4B:D9:FE:18:2B:28:9D:33:0D:0D:E7:79:11:B6:9E:73:01:B9:50 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B37C5BEB2E5E2FA96798C8F50C4231AC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0A90 Signing time: Fri 19 Dec 2025 18:01:04 +0000 Manifest this update: Fri 19 Dec 2025 18:01:04 +0000 Manifest next update: Sat 20 Dec 2025 18:01:04 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: Y4IsnAMwQW3Yzx2ruvxo5GiUR02ruW+WeRLMQVzmM1g=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:be:b2:e5:e2:fa:96:79:8c:8f:50:c4:23:1a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Dec 19 18:01:04 2025 GMT Not After : Dec 20 18:01:04 2025 GMT Subject: CN=024bd9fe182b289d330d0de77911b69e7301b950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:50:8e:f8:f3:c9:2a:6a:15:49:a9:59:b0:ee: 65:1e:20:db:ab:02:d1:44:e3:94:45:1d:17:1c:e1: cc:1d:4b:e1:2c:44:6c:f8:e3:8d:dc:70:3e:55:0a: 2c:b6:2a:f6:8a:e3:89:88:6a:d3:41:01:21:fa:ff: 68:05:9c:a2:40:7e:ad:0a:f4:7b:aa:57:e7:53:86: 37:16:33:a3:de:07:89:99:f3:48:1f:ed:b3:61:3e: 09:ce:21:7e:da:6e:3d:af:58:ee:cc:33:89:e1:bf: 2e:6f:b1:f0:15:6e:75:8e:3a:b9:53:9d:f5:f4:46: 2e:93:f0:d8:60:53:71:f6:b8:68:2e:bd:ec:b5:16: 4c:e9:a5:57:45:51:90:cb:1e:37:42:68:ff:51:07: e6:47:49:62:07:b5:79:5e:7d:78:1a:a5:85:98:60: 36:fe:06:5d:8a:d1:47:79:9c:83:40:8b:37:1d:f3: a4:ff:9b:ab:f5:2f:f6:05:a4:81:9f:d8:aa:bb:bc: 83:af:8b:98:2d:89:f8:ec:a3:a3:2a:1b:9c:06:c1: 6f:f5:34:84:0f:a0:34:83:47:d1:bc:c6:df:b5:6c: ec:12:ee:61:20:79:db:08:b9:4c:d8:3c:ed:cc:66: 67:59:b9:ec:75:3a:d5:2c:57:fa:4e:2c:ef:e7:82: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:D9:FE:18:2B:28:9D:33:0D:0D:E7:79:11:B6:9E:73:01:B9:50 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ba:ff:08:cf:a5:62:ee:a4:89:1c:cc:c8:1d:b5:44:28:10: 9f:0e:2f:a9:33:56:d7:1f:01:53:0c:1d:d8:52:a9:ef:a5:3a: 31:d6:3e:2d:0e:09:47:1d:cf:66:af:4b:cc:94:eb:a5:b9:2c: d3:4d:9e:fa:4f:1c:48:31:2b:f9:88:2c:e3:77:fd:18:89:21: b9:c7:87:25:b2:14:ca:21:07:2a:f8:2f:de:2b:62:8b:28:df: 91:0a:0f:87:54:0c:e5:a1:1a:40:44:7a:53:28:b7:20:29:74: 3f:b7:59:36:04:ad:db:b8:2e:c9:96:12:d8:e7:a4:6d:5b:b2: a8:e0:dd:cd:2b:e4:a5:99:dc:0d:ed:54:e4:ec:c3:2c:83:ba: 14:23:52:56:1f:1e:b0:9b:d8:f8:36:37:e0:6d:2d:cf:6f:2a: ef:ce:9f:41:47:1d:34:c2:1e:f0:59:c0:e0:14:69:3d:42:05: f0:08:59:62:c6:f6:ce:f9:e5:50:31:0e:6f:b1:f2:5a:3b:5c: 9c:83:ab:81:90:62:5f:a0:7c:29:88:e6:a4:10:38:23:91:19: 5e:da:49:bf:4f:56:26:20:a4:58:f7:a1:9f:1d:e7:bc:fa:3b: 75:be:17:49:d5:c8:33:f8:0d:1f:dc:82:5a:19:91:2d:e4:96: b4:d0:09:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xb6y5eL6lnmMj1DEIxrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMjE5MTgwMTA0WhcNMjUxMjIwMTgwMTA0WjAzMTEwLwYDVQQD EygwMjRiZDlmZTE4MmIyODlkMzMwZDBkZTc3OTExYjY5ZTczMDFiOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FCO+PPJKmoVSalZsO5lHiDbqwLR ROOURR0XHOHMHUvhLERs+OON3HA+VQostir2iuOJiGrTQQEh+v9oBZyiQH6tCvR7 qlfnU4Y3FjOj3geJmfNIH+2zYT4JziF+2m49r1juzDOJ4b8ub7HwFW51jjq5U531 9EYuk/DYYFNx9rhoLr3stRZM6aVXRVGQyx43Qmj/UQfmR0liB7V5Xn14GqWFmGA2 /gZditFHeZyDQIs3HfOk/5ur9S/2BaSBn9iqu7yDr4uYLYn47KOjKhucBsFv9TSE D6A0g0fRvMbftWzsEu5hIHnbCLlM2DztzGZnWbnsdTrVLFf6Tizv54JaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJL2f4YKyidMw0N53kRtp5zAblQMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLr/CM+l Yu6kiRzMyB21RCgQnw4vqTNW1x8BUwwd2FKp76U6MdY+LQ4JRx3PZq9LzJTrpbks 002e+k8cSDEr+Ygs43f9GIkhuceHJbIUyiEHKvgv3itiiyjfkQoPh1QM5aEaQER6 Uyi3ICl0P7dZNgSt27guyZYS2OekbVuyqODdzSvkpZncDe1U5OzDLIO6FCNSVh8e sJvY+DY34G0tz28q786fQUcdNMIe8FnA4BRpPUIF8AhZYsb2zvnlUDEOb7HyWjtc nIOrgZBiX6B8KYjmpBA4I5EZXtpJv09WJiCkWPehnx3nvPo7db4XSdXIM/gNH9yC WhmRLeSWtNAJGw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:41:24 2025 by rpki-client