This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json) Hash identifier: gkiZ7GVaiWNgdXwtWfjpXyPL0daMybcFuIkC9AdCJ/o= Subject key identifier: 49:B3:B5:38:71:67:85:AE:04:B3:2A:5D:95:96:54:19:99:99:FE:F7 Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295 Certificate serial: 019B50731B6D34FAD7C642C8EDF50D0743CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 13:01:19 +0000 Manifest this update: Wed 24 Dec 2025 13:01:19 +0000 Manifest next update: Thu 25 Dec 2025 13:01:19 +0000 Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: R6xJ7S++QBtjtjchgqVFb71n8E1mUlqe0doWbpR91sQ=) 2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:1b:6d:34:fa:d7:c6:42:c8:ed:f5:0d:07:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295 Validity Not Before: Dec 24 13:01:19 2025 GMT Not After : Dec 25 13:01:19 2025 GMT Subject: CN=49b3b538716785ae04b32a5d959654199999fef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:13:95:63:ba:29:a4:b6:45:b1:0c:17:f4: 79:e2:43:26:00:94:a7:84:76:34:4e:d0:3b:25:09: 27:c2:6a:b8:4a:45:dc:6e:e6:a9:61:3b:2e:7d:15: 1a:35:5d:83:48:30:57:12:ef:45:b0:6c:f8:80:bb: fd:98:1d:c9:f5:53:83:3a:4e:4e:dc:72:35:07:ff: 26:53:00:b2:93:91:2c:c0:c2:13:ac:37:b9:56:a0: 04:8c:50:e4:21:81:0a:59:8f:9f:67:c5:41:d2:19: 91:a9:fc:2f:4f:c5:5e:a9:da:ed:5b:8d:23:86:94: a6:f4:32:f7:00:97:8e:ed:e0:2e:39:6b:cd:82:c4: e8:24:08:79:f3:8c:78:0b:93:ee:b3:54:bd:fb:b6: 7d:96:1e:0e:19:84:84:24:07:ab:40:c4:05:e3:72: de:8a:36:38:f0:b2:e5:55:73:19:d1:da:89:93:c0: 6f:c1:fa:12:e4:d6:69:5e:27:18:b4:47:73:76:01: 20:27:b7:80:66:32:50:6a:21:4b:e8:ab:0b:07:29: a1:de:7b:43:94:f3:02:a0:b8:93:60:97:fb:89:9a: ae:a0:dd:39:0d:e0:66:5f:ba:39:3a:49:7b:c0:87: bb:ab:ba:11:4e:94:d4:64:90:ce:61:bb:66:4e:b1: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:B5:38:71:67:85:AE:04:B3:2A:5D:95:96:54:19:99:99:FE:F7 X509v3 Authority Key Identifier: keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:f3:c6:65:b1:a4:ca:c9:84:be:39:54:1c:bb:ba:ac:5b: 66:7e:1c:13:cf:f4:bb:68:c5:9e:a8:b0:f3:ee:92:58:df:1c: df:d0:62:0f:a8:2e:1a:18:df:63:3d:28:13:6a:34:9d:5f:5d: d7:9e:e7:6b:0d:ac:6c:a1:5e:94:4e:03:33:5e:7c:c5:55:aa: 68:63:87:0f:a2:df:31:f3:46:02:b7:31:56:c6:fb:0b:48:d1: 2d:f9:81:ed:30:16:9d:de:c6:97:ac:f2:7a:31:f1:91:19:a2: be:8c:6b:dd:83:57:df:de:17:9f:20:a5:7e:d1:e3:b4:49:a1: 1d:c8:8f:b5:14:5b:7f:5b:d8:3d:df:27:91:5f:17:94:24:99: e9:b8:39:ce:74:c4:df:7a:77:c5:e7:62:61:ab:62:9d:4e:b1: 75:48:a8:0d:4f:8b:54:38:f0:ff:bf:d4:02:ae:c7:c4:51:34: 68:67:0f:5a:22:78:c6:ab:2a:f7:74:a5:7b:71:dd:6a:e2:b1: b1:3b:5a:5b:93:9b:0d:f5:fb:d6:f1:42:f7:68:cc:33:38:df: 11:5f:a5:cd:f6:a1:1e:e7:fd:3c:86:d8:d7:5f:1f:9f:2a:29: 7a:f7:2a:b2:a6:8c:73:9a:c5:65:15:2e:90:fc:b2:1a:03:ca: b6:77:c5:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcxttNPrXxkLI7fUNB0POMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw OTEyOTUwHhcNMjUxMjI0MTMwMTE5WhcNMjUxMjI1MTMwMTE5WjAzMTEwLwYDVQQD Eyg0OWIzYjUzODcxNjc4NWFlMDRiMzJhNWQ5NTk2NTQxOTk5OTlmZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwTlWO6KaS2RbEMF/R54kMmAJSn hHY0TtA7JQknwmq4SkXcbuapYTsufRUaNV2DSDBXEu9FsGz4gLv9mB3J9VODOk5O 3HI1B/8mUwCyk5EswMITrDe5VqAEjFDkIYEKWY+fZ8VB0hmRqfwvT8VeqdrtW40j hpSm9DL3AJeO7eAuOWvNgsToJAh584x4C5Pus1S9+7Z9lh4OGYSEJAerQMQF43Le ijY48LLlVXMZ0dqJk8BvwfoS5NZpXicYtEdzdgEgJ7eAZjJQaiFL6KsLBymh3ntD lPMCoLiTYJf7iZquoN05DeBmX7o5Okl7wIe7q7oRTpTUZJDOYbtmTrEmmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmztThxZ4WuBLMqXZWWVBmZmf73MB8GA1UdIwQY MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1 LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtzzxmWx pMrJhL45VBy7uqxbZn4cE8/0u2jFnqiw8+6SWN8c39BiD6guGhjfYz0oE2o0nV9d 157naw2sbKFelE4DM158xVWqaGOHD6LfMfNGArcxVsb7C0jRLfmB7TAWnd7Gl6zy ejHxkRmivoxr3YNX394XnyClftHjtEmhHciPtRRbf1vYPd8nkV8XlCSZ6bg5znTE 33p3xediYatinU6xdUioDU+LVDjw/7/UAq7HxFE0aGcPWiJ4xqsq93Sle3HdauKx sTtaW5ObDfX71vFC92jMMzjfEV+lzfahHuf9PIbY118fnyopevcqsqaMc5rFZRUu kPyyGgPKtnfFlg== -----END CERTIFICATE-----Generated at Wed Dec 24 15:14:02 2025 by rpki-client