This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json) Hash identifier: SJhv4eUGjHPeHskxxW4rIUBvLwdU29alB9UmyOESkOE= Subject key identifier: 65:AB:BB:C6:E2:8A:34:D7:8B:8C:76:58:B8:F6:6C:48:38:19:50:A9 Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Certificate serial: 019B3D59D2DB9D725FCEDCFB4CF8D81A2840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 20:00:55 +0000 Manifest this update: Sat 20 Dec 2025 20:00:55 +0000 Manifest next update: Sun 21 Dec 2025 20:00:55 +0000 Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=) 2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=) 3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=) 4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=) 5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=) 6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=) 7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=) 8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: IJWusopO0rD2wJAQnzGJ/gT9UtScNE2JkUTzkt0pVzY=) 9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d2:db:9d:72:5f:ce:dc:fb:4c:f8:d8:1a:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Validity Not Before: Dec 20 20:00:55 2025 GMT Not After : Dec 21 20:00:55 2025 GMT Subject: CN=65abbbc6e28a34d78b8c7658b8f66c48381950a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:b5:a1:3f:cc:a7:be:e8:f2:87:a2:a3:9d: 75:87:96:05:1f:4c:5b:55:44:e2:f0:8b:99:ad:b7: 7d:dc:64:b8:6a:0c:66:59:43:2e:72:ed:44:f7:d4: 84:de:bd:42:b5:1f:8f:a8:c8:cc:89:a3:2d:a4:16: 12:12:bc:ad:a3:f1:0f:00:c1:af:15:f6:43:0f:19: 84:96:ff:69:ba:ed:95:f3:77:8d:06:83:c4:a0:0d: c2:b4:49:63:be:bc:06:30:e1:e2:01:7a:24:ce:34: 2e:c7:75:63:d0:d9:0f:b2:99:ee:80:7a:45:af:9c: 4f:df:26:67:0b:f9:10:cc:dd:af:ac:95:bb:aa:91: 69:27:b2:16:79:84:46:fc:7c:5d:37:52:0c:01:97: 87:9a:ed:ab:ff:e4:3f:d5:d5:69:fa:fd:49:ab:49: bf:f5:eb:20:13:ab:e7:c6:cb:f0:c0:9a:3f:26:2e: 29:87:97:74:99:82:af:b4:c8:c3:2e:7d:bf:99:ea: 21:4c:8f:b8:f2:89:17:85:a7:50:c6:4c:7e:4d:8c: 47:e6:f6:c4:2e:33:b5:22:13:bb:54:ce:d9:b1:b7: 03:6c:84:ba:90:59:2e:67:86:f1:fa:ba:64:4a:30: 90:61:84:60:84:f5:fb:41:58:b5:56:15:9c:47:26: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:BB:C6:E2:8A:34:D7:8B:8C:76:58:B8:F6:6C:48:38:19:50:A9 X509v3 Authority Key Identifier: keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:02:4f:bf:59:75:b4:ed:6d:28:08:e8:46:c8:c3:cb:74:cd: 7a:fe:9e:37:44:b4:78:95:9b:ae:64:9d:70:67:e9:9d:f3:84: af:c6:66:f0:4f:5a:b3:ea:c2:ce:91:c3:50:c9:5e:1c:c6:6e: 6b:5f:74:32:5b:2c:90:1f:88:f1:40:a1:9b:cc:4b:50:66:61: 6a:a5:42:7d:7c:0f:55:de:52:38:ba:a5:97:08:5a:24:01:01: c2:0c:a4:19:4a:cb:0e:4a:ed:2d:33:c6:2d:c1:c9:a0:f2:33: 1d:24:6d:c0:37:07:17:e9:b0:20:f8:eb:4a:8d:8f:c1:9b:a0: 59:02:89:06:98:40:28:0d:f7:7b:bc:62:44:c9:26:23:be:2c: c0:73:6c:21:f8:db:10:37:57:c3:56:4b:ec:a8:21:66:7e:49: 1e:36:59:bc:be:c7:e9:7a:c8:46:07:51:6f:50:12:42:af:0e: cf:97:c1:80:1a:e6:cd:92:8d:9b:cd:bb:4f:c7:34:4e:ba:cd: 89:5a:03:9a:2f:fb:e4:98:d2:ed:91:2d:66:30:e5:90:05:26: cc:a9:e1:bc:de:59:21:50:05:81:38:32:c9:a6:39:1d:95:03: 10:95:77:60:a9:c3:51:35:a4:2a:db:a6:9d:68:24:b7:79:57: 17:bd:b4:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdLbnXJfztz7TPjYGihAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl MTEzOTYwHhcNMjUxMjIwMjAwMDU1WhcNMjUxMjIxMjAwMDU1WjAzMTEwLwYDVQQD Eyg2NWFiYmJjNmUyOGEzNGQ3OGI4Yzc2NThiOGY2NmM0ODM4MTk1MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeq1oT/Mp77o8oeio511h5YFH0xb VUTi8IuZrbd93GS4agxmWUMucu1E99SE3r1CtR+PqMjMiaMtpBYSEryto/EPAMGv FfZDDxmElv9puu2V83eNBoPEoA3CtEljvrwGMOHiAXokzjQux3Vj0NkPspnugHpF r5xP3yZnC/kQzN2vrJW7qpFpJ7IWeYRG/HxdN1IMAZeHmu2r/+Q/1dVp+v1Jq0m/ 9esgE6vnxsvwwJo/Ji4ph5d0mYKvtMjDLn2/meohTI+48okXhadQxkx+TYxH5vbE LjO1IhO7VM7ZsbcDbIS6kFkuZ4bx+rpkSjCQYYRghPX7QVi1VhWcRyb3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWru8biijTXi4x2WLj2bEg4GVCpMB8GA1UdIwQY MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt N2JmZjI5NmM2YjAyLzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQJPv1l1 tO1tKAjoRsjDy3TNev6eN0S0eJWbrmSdcGfpnfOEr8Zm8E9as+rCzpHDUMleHMZu a190MlsskB+I8UChm8xLUGZhaqVCfXwPVd5SOLqllwhaJAEBwgykGUrLDkrtLTPG LcHJoPIzHSRtwDcHF+mwIPjrSo2PwZugWQKJBphAKA33e7xiRMkmI74swHNsIfjb EDdXw1ZL7KghZn5JHjZZvL7H6XrIRgdRb1ASQq8Oz5fBgBrmzZKNm827T8c0TrrN iVoDmi/75JjS7ZEtZjDlkAUmzKnhvN5ZIVAFgTgyyaY5HZUDEJV3YKnDUTWkKtum nWgkt3lXF720hA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:44:41 2025 by rpki-client