This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json) Hash identifier: GfiUt1jj+wymX4g+zc9eR3r27LDl/ES8SgIQWoNdIdA= Subject key identifier: 5D:B2:4E:BE:1C:C1:A4:67:86:B5:CB:6E:EE:3F:9C:6A:B5:49:7E:3E Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a Certificate serial: 019B5419132EF662CF7417B3ED0CD31499DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft Manifest number: 0B59 Signing time: Thu 25 Dec 2025 06:01:27 +0000 Manifest this update: Thu 25 Dec 2025 06:01:27 +0000 Manifest next update: Fri 26 Dec 2025 06:01:27 +0000 Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: TLhROkDTo1krSrqrWujGTIKwJMI0nfsbHsNrkT0T6uA=) 2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:13:2e:f6:62:cf:74:17:b3:ed:0c:d3:14:99:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a Validity Not Before: Dec 25 06:01:27 2025 GMT Not After : Dec 26 06:01:27 2025 GMT Subject: CN=5db24ebe1cc1a46786b5cb6eee3f9c6ab5497e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:d0:e2:3b:d2:b6:7d:b0:6e:f6:f7:ea:d0: 27:f3:fd:58:1a:4e:8b:57:0c:32:a0:fd:85:76:5e: f5:6f:a4:20:2c:78:97:dd:73:2b:4b:56:ba:61:c5: 06:d1:5c:4e:c5:01:5f:5b:1e:9e:17:5d:4d:8d:8f: 15:20:a0:10:e7:06:2b:30:0e:7a:3c:5f:82:dd:7e: 62:81:73:5b:3b:52:f8:40:68:d7:83:a3:01:71:52: 43:3b:99:dd:95:d9:16:4e:ad:35:82:69:15:2f:79: 73:2e:16:55:45:9b:d3:e9:a0:68:b5:22:9a:6e:a2: b8:ea:7a:44:ef:ac:a6:f9:a6:87:41:62:f6:1b:4b: 14:a1:25:ae:24:8a:b2:39:df:0c:9d:1c:fd:59:91: 4c:a1:b5:b7:ea:b1:79:3d:6d:63:e6:cc:9b:fc:9d: 85:41:aa:86:5d:fc:78:ef:24:d2:4f:5b:c5:0c:12: 74:c1:fe:10:2b:a3:b8:36:32:7d:de:2a:b6:a5:d2: c3:0d:fd:b2:45:9a:96:f2:58:51:21:14:b6:23:ab: 0d:f1:01:c4:a7:f4:d0:09:50:8f:15:41:9c:f0:9a: f3:63:9b:8b:70:9c:b4:20:9e:ed:c0:60:1c:bc:29: a8:34:cb:ff:c5:fc:de:83:20:69:a9:0d:10:82:7c: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:4E:BE:1C:C1:A4:67:86:B5:CB:6E:EE:3F:9C:6A:B5:49:7E:3E X509v3 Authority Key Identifier: keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:7e:6a:eb:59:91:56:7a:ee:27:ae:1a:04:18:7f:0c:26: a4:a3:c4:0b:50:bc:0d:9f:36:93:d1:7d:3b:ba:c6:e6:c2:b6: 93:47:21:f8:fe:53:f5:f4:ca:a4:b4:b8:fb:36:f8:30:c6:00: 27:14:b6:fc:59:dd:68:5a:6a:45:97:fe:94:a0:eb:67:58:a3: eb:da:91:e0:65:de:90:6f:4a:8c:f5:ba:15:3c:ec:3f:36:37: c1:e2:e5:3c:83:92:1a:ae:66:08:17:c7:8e:28:03:f7:d8:42: 3c:60:1f:b5:dd:06:c6:2f:d8:31:e9:5c:8a:c0:e9:da:bb:36: 8a:57:a7:d3:e3:55:bf:72:b6:b4:14:31:6c:f0:af:a6:41:0f: 3e:f3:c5:c8:bf:df:65:ea:c0:ef:d3:05:ea:3e:9a:9c:7f:b0: 8e:d3:f6:a5:cf:eb:2f:c4:78:75:f6:12:00:d8:ca:1c:ff:71: 91:4b:91:c0:f9:63:b6:fb:36:19:96:dd:ba:9f:34:bf:0f:dd: ab:46:16:84:b6:e8:62:5f:a8:d4:78:83:d1:63:67:d9:f9:64: e7:5d:15:3c:51:b3:36:0f:27:5f:08:b5:fc:40:81:3e:20:1b: df:f9:f4:d9:59:9d:a8:27:91:86:1e:95:1c:86:8b:46:25:90: c6:c7:74:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGRMu9mLPdBez7QzTFJnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz MDg3N2EwHhcNMjUxMjI1MDYwMTI3WhcNMjUxMjI2MDYwMTI3WjAzMTEwLwYDVQQD Eyg1ZGIyNGViZTFjYzFhNDY3ODZiNWNiNmVlZTNmOWM2YWI1NDk3ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHnQ4jvStn2wbvb36tAn8/1YGk6L VwwyoP2Fdl71b6QgLHiX3XMrS1a6YcUG0VxOxQFfWx6eF11NjY8VIKAQ5wYrMA56 PF+C3X5igXNbO1L4QGjXg6MBcVJDO5ndldkWTq01gmkVL3lzLhZVRZvT6aBotSKa bqK46npE76ym+aaHQWL2G0sUoSWuJIqyOd8MnRz9WZFMobW36rF5PW1j5syb/J2F QaqGXfx47yTST1vFDBJ0wf4QK6O4NjJ93iq2pdLDDf2yRZqW8lhRIRS2I6sN8QHE p/TQCVCPFUGc8JrzY5uLcJy0IJ7twGAcvCmoNMv/xfzegyBpqQ0QgnzNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2yTr4cwaRnhrXLbu4/nGq1SX4+MB8GA1UdIwQY MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreN+autZ kVZ67ieuGgQYfwwmpKPEC1C8DZ82k9F9O7rG5sK2k0ch+P5T9fTKpLS4+zb4MMYA JxS2/FndaFpqRZf+lKDrZ1ij69qR4GXekG9KjPW6FTzsPzY3weLlPIOSGq5mCBfH jigD99hCPGAftd0Gxi/YMelcisDp2rs2ilen0+NVv3K2tBQxbPCvpkEPPvPFyL/f ZerA79MF6j6anH+wjtP2pc/rL8R4dfYSANjKHP9xkUuRwPljtvs2GZbdup80vw/d q0YWhLboYl+o1HiD0WNn2flk510VPFGzNg8nXwi1/ECBPiAb3/n02VmdqCeRhh6V HIaLRiWQxsd0aw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:27 2025 by rpki-client