This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json) Hash identifier: SxV4xkzJlOFp0iZANi1FY5YX1TX31mEOFjdug9Y67dA= Subject key identifier: 18:9F:76:6A:11:DF:4A:18:CF:4C:E2:A5:B9:C7:7F:A3:74:55:43:3B Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Certificate serial: 019B3DC79950C72DEE091F9631BF4B9BC461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft Manifest number: 01DE Signing time: Sat 20 Dec 2025 22:00:49 +0000 Manifest this update: Sat 20 Dec 2025 22:00:49 +0000 Manifest next update: Sun 21 Dec 2025 22:00:49 +0000 Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: cLvITCTIRM+N2Bq8ZOm7/32FPdSuheuazW16Jc8/M8Y=) 2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:99:50:c7:2d:ee:09:1f:96:31:bf:4b:9b:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Validity Not Before: Dec 20 22:00:49 2025 GMT Not After : Dec 21 22:00:49 2025 GMT Subject: CN=189f766a11df4a18cf4ce2a5b9c77fa37455433b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:07:25:a0:09:e7:58:f2:11:74:bf:1c:3c: 29:37:5d:22:ae:17:37:c0:0d:0f:46:93:4e:04:04: 08:e8:73:d3:1b:43:b4:3e:90:73:b8:17:67:01:96: 7a:9a:c3:95:c2:12:02:12:5e:df:62:41:2a:88:b3: 1c:a4:bf:54:cc:f6:c4:c6:95:82:00:48:f2:72:c7: 50:8a:65:85:fb:82:6e:33:18:d0:41:f0:02:2b:ad: 10:04:04:49:04:32:0a:a8:e4:d1:bd:bb:66:94:bd: 55:f3:2e:66:a6:af:16:60:26:bd:7b:06:00:ef:b8: 3b:89:52:27:84:6e:7d:ca:84:3f:82:69:52:9b:9a: fe:cc:e0:ee:86:dd:3c:7f:10:25:f0:94:37:8f:a2: 35:69:57:82:80:13:b3:ac:27:5d:60:1e:ee:c4:00: 4d:a6:e2:02:2b:e7:67:c5:8c:74:94:80:38:cd:9b: d6:35:e7:2f:3b:9a:04:1e:7f:9f:d1:30:8f:51:b1: ef:92:f5:ef:99:90:9a:87:f4:fb:4e:5b:ca:99:16: 00:90:7b:33:93:4a:c0:4f:a9:4e:f5:6f:49:18:d4: ec:35:26:2a:c1:4d:39:7b:9d:b5:7d:26:14:80:c9: e0:72:83:a3:5f:da:cb:b9:a5:fb:9e:b9:e6:fd:8e: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9F:76:6A:11:DF:4A:18:CF:4C:E2:A5:B9:C7:7F:A3:74:55:43:3B X509v3 Authority Key Identifier: keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:03:bd:e3:fb:8b:fe:57:a4:5f:6c:2d:2f:1b:11:42:df:b0: a0:cb:ac:6c:fc:5a:ae:c4:6f:ac:c2:e3:e8:5b:87:35:56:ac: 51:5d:99:ad:20:b5:af:53:4f:74:d8:de:b2:3b:e9:cb:ba:06: e1:28:7c:c5:81:02:73:5f:83:cd:dd:56:9e:97:fa:ef:74:d1: e8:46:a5:45:2d:f7:7e:b6:49:bb:7c:3e:33:28:f8:b1:a6:52: 2e:a7:6f:6d:72:e0:fc:5f:e6:db:61:84:47:d3:91:07:e7:02: dd:6d:d5:f8:66:27:87:9d:c0:48:f8:ee:83:0a:b8:e4:a5:ab: f8:85:be:67:97:f8:f0:06:63:8f:7b:2a:b6:9b:e6:3c:07:bf: b5:c8:19:ed:dc:a2:28:ad:fc:62:77:e4:47:ed:2c:61:87:76: 68:80:5f:52:88:df:08:54:5e:c7:26:f3:83:1a:84:74:ed:06: f4:2e:f8:55:ea:73:34:69:03:0f:09:65:92:d1:01:f6:b7:b0: 84:11:dc:9d:b6:02:f5:65:d9:5f:54:f5:13:e9:26:cf:74:6d: b8:db:78:7c:af:e0:32:9b:ba:2a:9b:f7:31:78:7d:d8:8d:77: bc:e9:20:36:45:bf:19:86:2e:79:59:74:10:4d:b6:20:ec:b6: 38:8a:24:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5lQxy3uCR+WMb9Lm8RhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk OWVjY2IwHhcNMjUxMjIwMjIwMDQ5WhcNMjUxMjIxMjIwMDQ5WjAzMTEwLwYDVQQD EygxODlmNzY2YTExZGY0YTE4Y2Y0Y2UyYTViOWM3N2ZhMzc0NTU0MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSQHJaAJ51jyEXS/HDwpN10irhc3 wA0PRpNOBAQI6HPTG0O0PpBzuBdnAZZ6msOVwhICEl7fYkEqiLMcpL9UzPbExpWC AEjycsdQimWF+4JuMxjQQfACK60QBARJBDIKqOTRvbtmlL1V8y5mpq8WYCa9ewYA 77g7iVInhG59yoQ/gmlSm5r+zODuht08fxAl8JQ3j6I1aVeCgBOzrCddYB7uxABN puICK+dnxYx0lIA4zZvWNecvO5oEHn+f0TCPUbHvkvXvmZCah/T7TlvKmRYAkHsz k0rAT6lO9W9JGNTsNSYqwU05e521fSYUgMngcoOjX9rLuaX7nrnm/Y4H7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBifdmoR30oYz0zipbnHf6N0VUM7MB8GA1UdIwQY MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQO94/uL /lekX2wtLxsRQt+woMusbPxarsRvrMLj6FuHNVasUV2ZrSC1r1NPdNjesjvpy7oG 4Sh8xYECc1+Dzd1Wnpf673TR6EalRS33frZJu3w+Myj4saZSLqdvbXLg/F/m22GE R9ORB+cC3W3V+GYnh53ASPjugwq45KWr+IW+Z5f48AZjj3sqtpvmPAe/tcgZ7dyi KK38YnfkR+0sYYd2aIBfUojfCFRexybzgxqEdO0G9C74VepzNGkDDwllktEB9rew hBHcnbYC9WXZX1T1E+kmz3RtuNt4fK/gMpu6Kpv3MXh92I13vOkgNkW/GYYueVl0 EE22IOy2OIokow== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:05 2025 by rpki-client