This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json) Hash identifier: Fc3Of4gugyW7yE42c3QaPhsCT1gudVP4Bioal2MwvbE= Subject key identifier: A0:DD:9E:0D:12:12:40:C5:F8:F4:D5:CE:C2:F9:7F:19:79:38:CB:24 Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a Certificate serial: 019B390F70B8E744239F3134C90FEB4F4094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft Manifest number: 0B4B Signing time: Sat 20 Dec 2025 00:01:11 +0000 Manifest this update: Sat 20 Dec 2025 00:01:11 +0000 Manifest next update: Sun 21 Dec 2025 00:01:11 +0000 Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: k1znnT7fIPWhiJlZbNNFZPxGUJNJBRrZ//yMOZz89ZU=) 2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:70:b8:e7:44:23:9f:31:34:c9:0f:eb:4f:40:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a Validity Not Before: Dec 20 00:01:11 2025 GMT Not After : Dec 21 00:01:11 2025 GMT Subject: CN=a0dd9e0d121240c5f8f4d5cec2f97f197938cb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:91:e7:45:02:99:04:59:36:b0:55:6d:15: 7f:cb:51:12:f0:22:c0:a9:28:71:88:1b:bc:1f:55: 3d:8d:38:a4:09:a9:a0:10:aa:42:c7:26:72:28:16: 73:06:2d:88:6e:de:01:bd:74:4f:1c:1a:d6:51:a9: cf:0c:40:6c:99:3f:3b:a8:45:1e:d3:38:ec:fc:17: 52:fd:d4:93:a0:d0:a2:29:06:ab:42:00:5f:ab:d7: a0:a7:2e:00:b3:c0:57:f3:8b:de:1b:1a:b1:01:e1: 8e:01:c3:4f:81:a8:f3:71:44:42:e3:1f:fe:56:8c: c5:1b:14:27:c8:3d:d1:ce:d3:93:77:c8:3f:98:a4: 2f:43:6d:59:0e:84:cc:8c:8d:ab:b3:82:63:df:8b: 43:53:96:9b:5e:e7:c1:26:b8:92:2e:63:1e:11:cf: e2:ba:c7:86:71:38:a1:56:be:91:23:ee:ce:5f:54: 41:df:2b:82:eb:cb:fd:a0:38:4b:c7:0a:e3:5f:83: fa:f8:f5:b3:9f:9d:52:e4:a4:ed:bc:10:46:b4:2c: 73:3c:1b:c8:b2:e7:63:ef:59:3c:9f:92:46:6f:62: 2e:4a:c9:df:44:7f:2e:9f:93:99:ec:9f:17:88:5e: 23:79:eb:a3:87:3d:64:57:83:03:36:50:e8:c2:d3: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:9E:0D:12:12:40:C5:F8:F4:D5:CE:C2:F9:7F:19:79:38:CB:24 X509v3 Authority Key Identifier: keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:97:d2:95:34:a3:ff:43:fd:f2:65:84:20:ec:07:6d:98:ee: b0:68:fb:9e:11:2a:7a:f1:86:79:56:12:77:ea:c7:cd:fd:4b: c1:e8:c5:63:7e:11:f2:34:3a:70:d7:e9:7c:f2:a6:ee:e5:26: 41:8f:09:f1:84:28:f3:b8:c0:7f:64:7d:4a:5d:04:7c:f5:b6: af:87:47:46:2b:7f:78:5a:f5:19:28:b9:03:d5:88:60:cb:b2: 83:8a:08:25:98:6c:29:62:04:df:c4:85:35:47:b8:f6:d4:ce: c5:22:a6:4a:50:67:b3:c6:28:14:2d:63:ee:d0:36:b9:4e:fc: 04:d8:74:5a:7c:06:8c:80:69:3a:09:0b:9d:1c:5a:c1:2f:c9: e7:a4:a9:99:08:a8:30:4b:dd:7b:7b:b9:dd:34:af:71:c4:c2: 87:41:05:6d:2f:b2:96:81:05:83:39:62:69:9b:ec:7c:88:2d: ab:36:12:e3:b4:89:d5:4d:cc:4b:95:fa:a1:69:c2:bd:f7:ce: 7e:b0:f8:c0:cb:ee:0a:51:d3:ce:b3:cc:98:27:0d:77:0a:37: c5:e4:95:17:f8:e2:61:8b:89:6f:d9:c2:27:1f:84:ea:ae:c1: ce:bc:05:2f:0c:82:7e:a6:58:48:bc:f8:0c:b7:95:88:25:a2: b1:a3:3c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D3C450QjnzE0yQ/rT0CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz MDg3N2EwHhcNMjUxMjIwMDAwMTExWhcNMjUxMjIxMDAwMTExWjAzMTEwLwYDVQQD EyhhMGRkOWUwZDEyMTI0MGM1ZjhmNGQ1Y2VjMmY5N2YxOTc5MzhjYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+6R50UCmQRZNrBVbRV/y1ES8CLA qShxiBu8H1U9jTikCamgEKpCxyZyKBZzBi2Ibt4BvXRPHBrWUanPDEBsmT87qEUe 0zjs/BdS/dSToNCiKQarQgBfq9egpy4As8BX84veGxqxAeGOAcNPgajzcURC4x/+ VozFGxQnyD3RztOTd8g/mKQvQ21ZDoTMjI2rs4Jj34tDU5abXufBJriSLmMeEc/i useGcTihVr6RI+7OX1RB3yuC68v9oDhLxwrjX4P6+PWzn51S5KTtvBBGtCxzPBvI sudj71k8n5JGb2IuSsnfRH8un5OZ7J8XiF4jeeujhz1kV4MDNlDowtN6TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDdng0SEkDF+PTVzsL5fxl5OMskMB8GA1UdIwQY MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZfSlTSj /0P98mWEIOwHbZjusGj7nhEqevGGeVYSd+rHzf1LwejFY34R8jQ6cNfpfPKm7uUm QY8J8YQo87jAf2R9Sl0EfPW2r4dHRit/eFr1GSi5A9WIYMuyg4oIJZhsKWIE38SF NUe49tTOxSKmSlBns8YoFC1j7tA2uU78BNh0WnwGjIBpOgkLnRxawS/J56SpmQio MEvde3u53TSvccTCh0EFbS+yloEFgzliaZvsfIgtqzYS47SJ1U3MS5X6oWnCvffO frD4wMvuClHTzrPMmCcNdwo3xeSVF/jiYYuJb9nCJx+E6q7BzrwFLwyCfqZYSLz4 DLeViCWisaM8Fg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:45 2025 by rpki-client