This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: oWa+QRAgXxTIeM2v2HMWPY4ru8cIMLsRuvShXpR7JZc= Subject key identifier: D4:10:8D:A3:7A:0D:8A:5A:66:B1:04:2F:8B:07:A9:2F:38:3D:E4:50 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B397D667A15F3660B4CBB408F98C555E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 0F88 Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: D2nJf0N8YrBqWlH7uNCRM6_-uvs.roa (hash: XzyVLDvtsFWRF8LIf/NtjL2syR+wFA2cNft4AxoOFPg=) 2: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=) 3: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=) 4: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=) 5: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: v0AdYw5Zlnk2sNN/f+j9OLIUKLUjCCiGTHw0RXipwS8=) 7: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=) 8: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:66:7a:15:f3:66:0b:4c:bb:40:8f:98:c5:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=d4108da37a0d8a5a66b1042f8b07a92f383de450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:73:8e:20:e1:bc:b7:f4:f6:13:0a:a0:11: c5:da:7f:4d:99:15:9d:ee:cf:ad:e5:dc:d2:bb:65: f1:e5:29:7d:40:e2:af:d7:71:4c:af:01:c8:c1:10: 2d:f0:6a:96:35:45:d0:b1:c1:0a:47:95:d2:c4:b3: 2c:18:4b:7c:c3:03:f7:6a:17:fc:7d:8a:91:58:4a: 6d:82:53:83:24:2f:d5:43:98:7d:7b:4b:d4:25:3a: 1e:fc:76:cb:c2:1d:18:4a:fa:d8:66:16:5b:0d:d3: af:88:9b:82:98:ca:55:9b:0f:c7:14:65:24:7d:4e: 86:b4:80:be:2a:3f:7b:4f:d0:c9:d6:63:5c:60:e3: ad:f9:37:a5:e0:86:6b:97:05:4d:10:bc:6a:15:fc: 00:99:5c:8d:8e:12:e2:a2:61:20:e3:36:df:19:a9: b1:10:ef:b8:ff:6b:de:bd:f4:6f:7b:fb:fc:69:70: ce:cb:74:5b:1b:c2:61:9a:b9:52:d9:97:a2:fb:18: 50:57:ed:37:07:37:93:26:c8:35:51:79:d3:44:17: 6f:49:db:05:23:b9:a4:16:0d:17:2b:fa:b9:e4:a4: ec:66:41:b1:28:bf:08:cf:da:b2:fc:70:93:0a:2f: c5:9c:8e:94:ea:58:60:24:7c:95:90:64:18:1e:7e: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:8D:A3:7A:0D:8A:5A:66:B1:04:2F:8B:07:A9:2F:38:3D:E4:50 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:86:d7:17:2d:7f:35:d2:6a:3d:0a:7a:97:77:ac:97:68:3e: fb:19:6e:be:ea:8e:56:ba:2f:62:81:ef:83:a2:49:48:bd:ed: 1d:ec:94:45:d6:45:de:80:bc:6d:62:44:eb:fc:7a:69:1f:cd: ef:84:ff:55:9a:b3:a0:e1:0b:25:f9:f5:bf:1c:22:35:5e:74: c6:db:cc:c3:db:a5:3a:23:93:76:5b:71:bf:3b:6e:50:bb:e3: c3:f1:de:0f:61:89:e8:91:96:31:f4:86:92:c0:95:4d:22:0d: fc:9f:82:46:7f:41:97:dd:3b:aa:97:45:2c:94:00:50:d4:b2: 6f:ff:4c:7b:9d:7a:ce:c4:77:49:90:b2:f1:f5:e0:ca:87:a4: e0:12:f4:88:80:82:95:0c:ec:85:e2:70:c3:6b:f2:34:6f:e5: cf:75:77:f3:50:67:c2:b1:de:34:68:95:7a:a2:dd:aa:d6:1f: 61:b5:62:63:7c:e7:0b:ba:ec:38:f7:c6:98:41:1f:51:09:a6: f6:a3:91:86:73:b6:71:ad:33:b2:07:8e:11:94:32:33:e0:f0: ed:ad:c5:42:24:89:1b:e2:e1:b2:d5:3d:c0:f7:d3:7b:3b:74: 6e:ef:4a:cf:52:36:d9:f7:6f:5c:c5:2d:1d:53:fa:1b:4d:1f: 28:59:0c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWZ6FfNmC0y7QI+YxVXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD EyhkNDEwOGRhMzdhMGQ4YTVhNjZiMTA0MmY4YjA3YTkyZjM4M2RlNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W5zjiDhvLf09hMKoBHF2n9NmRWd 7s+t5dzSu2Xx5Sl9QOKv13FMrwHIwRAt8GqWNUXQscEKR5XSxLMsGEt8wwP3ahf8 fYqRWEptglODJC/VQ5h9e0vUJToe/HbLwh0YSvrYZhZbDdOviJuCmMpVmw/HFGUk fU6GtIC+Kj97T9DJ1mNcYOOt+Tel4IZrlwVNELxqFfwAmVyNjhLiomEg4zbfGamx EO+4/2vevfRve/v8aXDOy3RbG8JhmrlS2Zei+xhQV+03BzeTJsg1UXnTRBdvSdsF I7mkFg0XK/q55KTsZkGxKL8Iz9qy/HCTCi/FnI6U6lhgJHyVkGQYHn7uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQQjaN6DYpaZrEEL4sHqS84PeRQMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGobXFy1/ NdJqPQp6l3esl2g++xluvuqOVrovYoHvg6JJSL3tHeyURdZF3oC8bWJE6/x6aR/N 74T/VZqzoOELJfn1vxwiNV50xtvMw9ulOiOTdltxvztuULvjw/HeD2GJ6JGWMfSG ksCVTSIN/J+CRn9Bl907qpdFLJQAUNSyb/9Me516zsR3SZCy8fXgyoek4BL0iICC lQzsheJww2vyNG/lz3V381BnwrHeNGiVeqLdqtYfYbViY3znC7rsOPfGmEEfUQmm 9qORhnO2ca0zsgeOEZQyM+Dw7a3FQiSJG+LhstU9wPfTezt0bu9Kz1I22fdvXMUt HVP6G00fKFkMmg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:16:53 2025 by rpki-client