This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json) Hash identifier: 20cW9THK40GfZ0gAg85bB5b2a6smT8BMW0Z8oxzSyus= Subject key identifier: B5:15:C4:35:D4:BB:ED:AF:7C:18:B9:83:17:EB:5B:71:76:2C:75:93 Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e Certificate serial: 019B2364CC8C36C519F193C584731994DD1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft Manifest number: 03D6 Signing time: Mon 15 Dec 2025 19:02:47 +0000 Manifest this update: Mon 15 Dec 2025 19:02:47 +0000 Manifest next update: Tue 16 Dec 2025 19:02:47 +0000 Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=) 2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: v3kipEwPiWyv/OgJQWO4Fycop/fFhgaEyTov4pTi5WM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:cc:8c:36:c5:19:f1:93:c5:84:73:19:94:dd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e Validity Not Before: Dec 15 19:02:47 2025 GMT Not After : Dec 16 19:02:47 2025 GMT Subject: CN=b515c435d4bbedaf7c18b98317eb5b71762c7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:e4:eb:28:a9:16:30:1a:03:2e:e3:36:ea: 42:d6:a8:bc:87:b4:37:93:14:fa:fb:16:89:57:34: 0e:47:51:bd:c6:97:87:bd:43:94:61:12:27:cd:6b: fc:39:03:61:50:f3:41:03:3f:90:94:f6:f7:7c:cc: e1:43:d5:4c:27:5d:61:43:b7:f5:94:13:e7:3b:f8: d5:1e:0b:5d:86:30:54:28:ef:f4:ef:1e:f2:ad:b4: d3:8b:df:31:b8:c8:32:6c:19:f6:b0:89:c9:dc:6d: d0:4f:82:84:a9:ba:aa:2a:e2:51:01:b2:da:9d:38: d2:a8:95:b2:80:a4:c4:cb:e5:c8:6d:33:d7:36:47: 2e:73:3a:71:7a:59:02:3e:af:34:f6:6e:c1:e4:8c: ec:ec:61:0c:44:45:a0:a5:55:c1:7c:df:c8:d9:0e: ac:e3:27:f8:80:74:22:16:b6:20:5e:9b:1e:20:e3: 13:b8:22:c2:ae:8b:7a:32:45:25:03:43:95:f8:a3: d2:98:b7:33:6d:73:78:31:32:fb:f1:13:57:37:ad: 86:16:a6:2b:91:1d:0e:37:5b:06:6e:02:df:3a:4a: bb:b3:3c:df:eb:dc:6a:2b:5b:e5:2f:13:9e:ca:49: a1:1f:2b:0c:23:e5:d3:28:6b:c9:3a:0c:da:76:1e: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:C4:35:D4:BB:ED:AF:7C:18:B9:83:17:EB:5B:71:76:2C:75:93 X509v3 Authority Key Identifier: keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:39:48:53:1b:e9:9c:ce:c7:62:d7:00:0a:b0:08:e1:c9: d7:e6:b9:a8:c9:c0:7e:6d:39:ed:b0:29:e8:8f:0e:9c:6b:ec: 38:49:36:6c:20:b8:fc:7d:12:f5:16:5d:67:fe:10:2c:82:46: 0b:14:7b:47:e3:89:59:6e:66:33:2c:f2:53:87:d4:65:49:a6: 47:7e:55:70:d2:11:36:e4:5c:2e:c2:0f:37:85:36:ee:27:c0: 56:a7:bd:28:ca:bb:85:3f:93:d0:57:0f:de:63:c7:67:0d:3e: 22:e5:c6:57:3e:4e:aa:90:6c:48:63:73:b2:a4:74:b1:73:42: e4:02:a5:c2:ea:6c:bd:f5:88:f6:1a:c7:35:4b:da:78:df:f9: 83:d8:35:66:ce:05:15:cd:94:9a:7c:6e:85:ce:76:97:86:2a: f1:df:18:00:c9:b4:61:44:91:70:d0:a1:86:15:0c:ef:c3:1d: b3:8a:1a:73:e2:29:8a:51:48:4f:44:bf:49:c6:62:f8:fc:06: 6f:64:fb:9b:85:94:5f:cf:92:2b:fe:2a:66:7d:9e:b0:fa:6c: eb:b2:fa:4d:3a:e7:ae:84:8a:24:30:1a:74:96:5b:9d:d4:31: d6:99:58:a4:7f:44:c2:52:c3:f3:99:00:d6:f3:91:fe:d7:77: 8d:50:30:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZMyMNsUZ8ZPFhHMZlN0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3 YWMxMmUwHhcNMjUxMjE1MTkwMjQ3WhcNMjUxMjE2MTkwMjQ3WjAzMTEwLwYDVQQD EyhiNTE1YzQzNWQ0YmJlZGFmN2MxOGI5ODMxN2ViNWI3MTc2MmM3NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57Lk6yipFjAaAy7jNupC1qi8h7Q3 kxT6+xaJVzQOR1G9xpeHvUOUYRInzWv8OQNhUPNBAz+QlPb3fMzhQ9VMJ11hQ7f1 lBPnO/jVHgtdhjBUKO/07x7yrbTTi98xuMgybBn2sInJ3G3QT4KEqbqqKuJRAbLa nTjSqJWygKTEy+XIbTPXNkcuczpxelkCPq809m7B5Izs7GEMREWgpVXBfN/I2Q6s 4yf4gHQiFrYgXpseIOMTuCLCrot6MkUlA0OV+KPSmLczbXN4MTL78RNXN62GFqYr kR0ON1sGbgLfOkq7szzf69xqK1vlLxOeykmhHysMI+XTKGvJOgzadh485QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUVxDXUu+2vfBi5gxfrW3F2LHWTMB8GA1UdIwQY MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5 LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6E5SFMb 6ZzOx2LXAAqwCOHJ1+a5qMnAfm057bAp6I8OnGvsOEk2bCC4/H0S9RZdZ/4QLIJG CxR7R+OJWW5mMyzyU4fUZUmmR35VcNIRNuRcLsIPN4U27ifAVqe9KMq7hT+T0FcP 3mPHZw0+IuXGVz5OqpBsSGNzsqR0sXNC5AKlwupsvfWI9hrHNUvaeN/5g9g1Zs4F Fc2Umnxuhc52l4Yq8d8YAMm0YUSRcNChhhUM78Mds4oac+IpilFIT0S/ScZi+PwG b2T7m4WUX8+SK/4qZn2esPps67L6TTrnroSKJDAadJZbndQx1plYpH9EwlLD85kA 1vOR/td3jVAwYQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:34:50 2025 by rpki-client