This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json) Hash identifier: 06tubkJLvYtiEOIt70V0HqI2+dMGgVlxphVkB2kzVtY= Subject key identifier: 0F:49:4F:89:90:D0:D1:E0:EB:53:79:E7:96:A7:81:D2:E3:B5:96:6D Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Certificate serial: 019B3A8FA83D8B1AD5D2D55AC0C549359C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft Manifest number: 15E6 Signing time: Sat 20 Dec 2025 07:00:51 +0000 Manifest this update: Sat 20 Dec 2025 07:00:51 +0000 Manifest next update: Sun 21 Dec 2025 07:00:51 +0000 Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=) 2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: 7KucdCuTzVs2OYi4j+87pou4c9luUr+3wnvJnsv9xXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:a8:3d:8b:1a:d5:d2:d5:5a:c0:c5:49:35:9c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Validity Not Before: Dec 20 07:00:51 2025 GMT Not After : Dec 21 07:00:51 2025 GMT Subject: CN=0f494f8990d0d1e0eb5379e796a781d2e3b5966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:e1:76:b1:1e:01:e3:4e:1e:f4:5b:3e:97: a0:21:be:53:90:55:f1:a1:8f:e3:45:44:a8:b0:da: ec:d6:3b:f6:65:ab:bd:e4:00:76:d8:25:6a:ea:ff: dc:6d:9b:b9:d3:96:2f:aa:9b:e3:46:ac:24:a1:bb: 1d:49:83:c4:66:2c:96:38:87:c6:e7:b7:18:ca:00: 33:92:9b:88:fb:a6:e3:fd:10:8d:6c:41:db:d0:9a: 20:6c:44:35:24:80:6c:ed:c3:ec:d2:23:b9:7a:dc: aa:d3:44:af:4c:36:af:30:aa:c7:9f:a8:ae:a0:41: 63:eb:75:8c:fc:1f:5e:29:d8:76:99:42:6f:0b:23: 77:ed:8f:42:fd:10:f1:6c:1c:d7:d4:ca:a6:3b:0f: 75:6d:ad:58:5c:f5:19:0b:cf:9b:12:d7:8e:80:c6: 53:56:f4:f0:72:b2:80:f4:7f:32:a6:1e:a9:a1:1c: 54:75:72:82:1a:6d:ea:d6:e8:44:19:65:43:1d:86: 58:34:98:90:b9:79:0f:14:89:ca:e5:61:6e:10:71: 5a:20:71:21:22:0e:d1:cf:c8:19:c4:f4:ed:ef:6a: f3:1e:f4:e0:8f:f0:c0:25:26:b8:d3:43:2c:71:3b: a7:c5:d6:e6:21:8f:5b:37:cd:96:8e:53:96:bc:14: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:4F:89:90:D0:D1:E0:EB:53:79:E7:96:A7:81:D2:E3:B5:96:6D X509v3 Authority Key Identifier: keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:12:19:b5:9c:fa:1b:10:1b:7e:ac:8e:82:15:3e:b3:13:fd: 70:2c:37:e9:df:12:90:59:d4:1c:68:cf:52:c6:aa:41:c7:e2: 33:60:ae:72:2d:a4:39:c4:10:22:2b:a2:b9:f5:c8:66:ef:69: 00:a1:75:8a:fd:c2:f6:b5:03:5a:3a:1f:b4:ac:fe:ba:e2:c1: 7e:f0:e1:04:5f:ed:f0:97:0e:b2:f9:3b:9d:8b:55:90:d6:0a: 19:51:de:b6:5f:5f:83:9d:86:76:fe:cd:8a:f5:7b:3c:00:6e: 92:b0:13:a4:cb:9e:ae:31:a5:16:d7:41:fa:c7:7b:ae:5e:88: 47:21:90:c6:3e:5a:5a:b2:a3:6c:1b:74:e2:19:3c:b9:d1:3f: d2:04:2e:80:2f:2d:d2:88:84:5e:bc:b5:75:4c:97:e6:5c:0b: 11:45:69:79:e3:39:3f:c9:7c:35:5f:6b:b6:95:fd:a3:6d:33: 10:22:b7:77:50:0f:cb:66:42:67:49:02:38:76:2e:6e:70:98: a4:63:78:50:73:73:8f:28:81:cd:92:6d:60:08:86:69:d0:3c: 22:5f:57:24:1d:b8:1b:27:c2:bb:3e:d0:36:93:3e:cb:bc:d2: 17:43:bd:41:2f:ba:39:7c:76:79:cb:61:d3:64:5d:8a:23:f6: 15:70:66:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j6g9ixrV0tVawMVJNZyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl MTMzYjQwHhcNMjUxMjIwMDcwMDUxWhcNMjUxMjIxMDcwMDUxWjAzMTEwLwYDVQQD EygwZjQ5NGY4OTkwZDBkMWUwZWI1Mzc5ZTc5NmE3ODFkMmUzYjU5NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdPhdrEeAeNOHvRbPpegIb5TkFXx oY/jRUSosNrs1jv2Zau95AB22CVq6v/cbZu505YvqpvjRqwkobsdSYPEZiyWOIfG 57cYygAzkpuI+6bj/RCNbEHb0JogbEQ1JIBs7cPs0iO5etyq00SvTDavMKrHn6iu oEFj63WM/B9eKdh2mUJvCyN37Y9C/RDxbBzX1MqmOw91ba1YXPUZC8+bEteOgMZT VvTwcrKA9H8yph6poRxUdXKCGm3q1uhEGWVDHYZYNJiQuXkPFInK5WFuEHFaIHEh Ig7Rz8gZxPTt72rzHvTgj/DAJSa400MscTunxdbmIY9bN82WjlOWvBQ4CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9JT4mQ0NHg61N555angdLjtZZtMB8GA1UdIwQY MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthIZtZz6 GxAbfqyOghU+sxP9cCw36d8SkFnUHGjPUsaqQcfiM2Cuci2kOcQQIiuiufXIZu9p AKF1iv3C9rUDWjoftKz+uuLBfvDhBF/t8JcOsvk7nYtVkNYKGVHetl9fg52Gdv7N ivV7PABukrATpMuerjGlFtdB+sd7rl6IRyGQxj5aWrKjbBt04hk8udE/0gQugC8t 0oiEXry1dUyX5lwLEUVpeeM5P8l8NV9rtpX9o20zECK3d1APy2ZCZ0kCOHYubnCY pGN4UHNzjyiBzZJtYAiGadA8Il9XJB24GyfCuz7QNpM+y7zSF0O9QS+6OXx2ecth 02RdiiP2FXBmGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:39:05 2025 by rpki-client