This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json) Hash identifier: cgjLRLpbWxoAVyGxGNgF2f9CpHA0AvJzXlS30lJ9qbs= Subject key identifier: 0C:9B:B4:3A:D4:9F:B5:28:B4:A1:89:76:62:FA:AC:83:24:B5:DD:B5 Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93 Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493 Certificate serial: 019B3BD99A81446F07304D25864118E43BF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft Manifest number: 1660 Signing time: Sat 20 Dec 2025 13:01:15 +0000 Manifest this update: Sat 20 Dec 2025 13:01:15 +0000 Manifest next update: Sun 21 Dec 2025 13:01:15 +0000 Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: 4am9t4vuiAkXEYKM0zKy2uzRLvFIE5ycCime6zhfveE=) 2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9a:81:44:6f:07:30:4d:25:86:41:18:e4:3b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493 Validity Not Before: Dec 20 13:01:15 2025 GMT Not After : Dec 21 13:01:15 2025 GMT Subject: CN=0c9bb43ad49fb528b4a1897662faac8324b5ddb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:96:0b:8d:76:db:ff:34:a2:d8:f8:cd:7d: 0a:fc:42:d8:07:3f:00:e4:9c:09:ae:e3:f3:e6:a5: 50:01:8b:61:5d:0f:e6:2e:c8:f4:6d:d8:18:fd:8f: 87:97:e3:1a:36:c5:07:e8:ed:f4:dc:64:7b:a1:99: 92:d4:e1:2d:8d:53:a8:0f:1f:30:90:87:ba:b5:4e: 9f:85:6c:be:cf:aa:86:d9:b5:8b:23:7c:d0:65:71: ff:2d:c0:9c:e4:c9:ec:5f:ed:5a:86:47:82:c9:55: 0d:33:0f:c6:94:34:78:03:e2:95:f3:a4:9c:4e:78: ca:97:d9:6d:49:96:98:66:ac:0d:ea:bd:f5:7a:a7: 38:5f:93:9b:2f:5a:6e:a9:42:1a:01:b7:87:f1:b7: 4c:90:01:57:09:66:0c:1a:b1:10:74:29:a0:d6:ac: 45:b5:4e:69:bd:1d:c3:99:28:4f:02:c3:cf:c7:b1: d4:9b:40:eb:82:15:25:0a:56:8b:f0:a1:13:f8:6b: cd:a8:d0:55:34:13:ce:76:28:b5:75:e8:92:c5:4b: f3:16:7f:06:72:7f:4c:89:94:8a:f2:4c:aa:ed:9b: f5:3d:4d:e2:93:6c:9a:13:4e:c9:eb:fd:ea:0a:93: 7e:58:3f:71:f4:43:62:cb:6f:57:53:65:49:34:ae: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:B4:3A:D4:9F:B5:28:B4:A1:89:76:62:FA:AC:83:24:B5:DD:B5 X509v3 Authority Key Identifier: keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:87:7b:44:38:db:31:d8:7b:fa:82:9a:aa:f2:1b:95:36: 19:fd:a8:2f:57:90:e7:62:17:e7:73:25:74:89:64:a0:8c:d7: 2f:34:2d:69:91:be:55:b1:51:83:37:73:b1:6b:42:47:3d:15: 6b:08:89:7d:e5:9f:94:ed:cd:c6:c4:37:06:57:2d:53:6c:40: 0a:26:0a:bb:90:ba:e3:94:d2:e9:e5:c6:2c:7d:5a:55:22:b4: 61:98:6c:76:15:fc:07:33:45:85:9d:42:5a:d7:99:02:f0:ef: 91:9b:92:1a:dd:d3:93:19:c6:65:8e:40:1b:cc:62:4d:32:64: ed:4e:ff:f2:b5:9b:8a:73:a5:22:46:28:35:aa:72:73:c2:ae: 04:96:ca:26:23:d4:13:fb:73:d5:7f:5c:86:58:a3:3e:53:73: 7a:e6:a8:68:fe:f4:2a:bb:07:be:06:c6:ba:5e:cd:d5:fc:ec: 3a:55:54:67:ea:3d:77:c1:08:b3:26:a6:95:30:6a:44:c9:48: 04:cd:e1:f7:d4:c2:9d:14:4c:17:61:ce:ed:1d:13:c3:c9:fe: 17:f6:63:fd:66:72:ca:02:e8:81:81:26:91:0a:20:02:8b:20: 17:c0:aa:34:ef:88:0f:bf:77:ee:4e:4f:c4:5d:de:b1:bf:54: 83:42:46:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ZqBRG8HME0lhkEY5Dv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYTNiNTAyOGNlMzY0ZjUxMDJjMWFlYzI3NzM2YjdjMzNi YzA0OTMwHhcNMjUxMjIwMTMwMTE1WhcNMjUxMjIxMTMwMTE1WjAzMTEwLwYDVQQD EygwYzliYjQzYWQ0OWZiNTI4YjRhMTg5NzY2MmZhYWM4MzI0YjVkZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA402WC4122/80otj4zX0K/ELYBz8A 5JwJruPz5qVQAYthXQ/mLsj0bdgY/Y+Hl+MaNsUH6O303GR7oZmS1OEtjVOoDx8w kIe6tU6fhWy+z6qG2bWLI3zQZXH/LcCc5MnsX+1ahkeCyVUNMw/GlDR4A+KV86Sc TnjKl9ltSZaYZqwN6r31eqc4X5ObL1puqUIaAbeH8bdMkAFXCWYMGrEQdCmg1qxF tU5pvR3DmShPAsPPx7HUm0DrghUlClaL8KET+GvNqNBVNBPOdii1deiSxUvzFn8G cn9MiZSK8kyq7Zv1PU3ik2yaE07J6/3qCpN+WD9x9ENiy29XU2VJNK7x6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAybtDrUn7UotKGJdmL6rIMktd21MB8GA1UdIwQY MBaAFG6jtQKM42T1ECwa7Cdza3wzvASTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAt NjEyYTc2MjAwN2VjLzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lYTQ3MWEtZGE2NC00NTk2LTgzNzAtNjEyYTc2MjAwN2Vj LzEvYnFPMUFvempaUFVRTEJyc0ozTnJmRE84QkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJqHe0Q4 2zHYe/qCmqryG5U2Gf2oL1eQ52IX53MldIlkoIzXLzQtaZG+VbFRgzdzsWtCRz0V awiJfeWflO3NxsQ3BlctU2xACiYKu5C645TS6eXGLH1aVSK0YZhsdhX8BzNFhZ1C WteZAvDvkZuSGt3TkxnGZY5AG8xiTTJk7U7/8rWbinOlIkYoNapyc8KuBJbKJiPU E/tz1X9chlijPlNzeuaoaP70KrsHvgbGul7N1fzsOlVUZ+o9d8EIsyamlTBqRMlI BM3h99TCnRRMF2HO7R0Tw8n+F/Zj/WZyygLogYEmkQogAosgF8CqNO+ID7937k5P xF3esb9Ug0JGcA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:33 2025 by rpki-client