This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft File: bQih9MOF86e2KYTVPoFmWplUEPM.mft (raw, json) Hash identifier: MOVK81PirNDpBPzWxqvlk3/LzY05E9EKnAWYul+39Zs= Subject key identifier: 7F:43:E2:89:CB:72:72:E7:38:0E:37:E7:6A:E8:88:9D:9D:5C:E6:8C Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3 Certificate serial: 019B194D506B31A5CD621B44CBF7AE960375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft Manifest number: 0B75 Signing time: Sat 13 Dec 2025 20:00:55 +0000 Manifest this update: Sat 13 Dec 2025 20:00:55 +0000 Manifest next update: Sun 14 Dec 2025 20:00:55 +0000 Files and hashes: 1: J7EMvjCrDCSEaNvEXQjzbwryII4.roa (hash: Ak6AJOV8w0m5lQCAa41zEyYCpJIBSURSyT+w9pihP/8=) 2: bQih9MOF86e2KYTVPoFmWplUEPM.crl (hash: VnELL9uNoYIMnVo4uXK2vN2nYE7ZV0CskDoW9T3OSqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:50:6b:31:a5:cd:62:1b:44:cb:f7:ae:96:03:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3 Validity Not Before: Dec 13 20:00:55 2025 GMT Not After : Dec 14 20:00:55 2025 GMT Subject: CN=7f43e289cb7272e7380e37e76ae8889d9d5ce68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:78:15:c7:6c:fd:87:f9:64:62:4f:db:e0: a6:6c:7b:24:a0:4e:d3:1f:d1:53:8b:5c:7e:a9:f3: 76:fd:da:50:f6:3b:f8:b6:10:7e:ab:7b:04:b4:cc: 34:91:47:6c:88:15:3b:08:3a:d7:b2:40:34:ca:fd: 58:39:e9:eb:f6:3e:b5:72:25:5d:72:b2:50:5d:08: 42:83:4c:46:76:99:74:88:31:e7:ca:c4:ae:eb:af: 43:d4:60:1c:ac:25:b9:38:7a:30:47:5d:a8:55:cb: 59:12:87:df:49:56:69:e8:0b:e7:5d:28:ea:eb:0c: be:30:5c:70:b8:d8:33:b9:4f:7a:7d:9f:10:3c:a3: a3:40:24:6a:f5:65:c3:92:61:89:8b:12:82:10:bc: 6f:2b:84:2a:09:8a:2b:70:2c:0a:24:62:72:69:5d: ee:fa:2b:1d:f1:f7:94:73:63:8d:75:b7:2a:37:18: cd:25:2c:f4:1a:1a:5e:d5:d7:2b:84:19:0f:93:e4: 97:17:f8:11:f6:90:a0:95:48:4d:f8:27:86:7d:5a: 6f:7c:ed:7b:8a:3e:c6:37:d6:6a:ce:39:3f:13:62: ec:07:e4:7d:a3:b0:56:73:0c:ae:22:17:e8:59:3f: 62:41:b1:e2:dd:f5:99:ca:9c:f8:68:ef:75:a0:5d: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:43:E2:89:CB:72:72:E7:38:0E:37:E7:6A:E8:88:9D:9D:5C:E6:8C X509v3 Authority Key Identifier: keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a5:7a:a2:61:9b:5a:7d:3f:b4:15:f0:23:bc:12:64:b9:59: f8:18:87:40:cf:a6:4d:fb:57:13:3c:78:0b:58:f2:95:c6:df: 50:18:d6:fa:90:c2:9d:53:ef:3e:39:61:29:a7:c1:3b:fb:6e: 18:2b:69:0a:a1:b4:c0:17:b4:1d:13:31:d8:cc:02:16:0f:c2: 3f:cc:a8:53:dc:d0:7c:21:2a:a8:33:cf:e1:55:9d:78:69:94: 95:94:05:62:ff:49:f2:93:f6:95:ac:b6:f0:21:ce:29:f2:03: ad:a3:d5:fd:88:3b:96:ba:33:46:02:91:78:05:3e:9a:2f:b3: a5:c3:9b:d9:88:c7:78:d2:70:25:f4:a0:ef:11:c5:e4:77:71: 58:6a:c3:1d:83:ad:39:f0:48:03:8e:8c:8d:f7:46:ef:36:80: 17:29:e6:5f:79:a7:1c:68:2b:6b:22:f7:54:7d:a5:f3:57:0d: b5:89:ef:52:09:ae:fe:77:dc:e7:b9:5f:8a:4b:e8:71:67:bf: 18:62:66:d3:bf:73:47:e3:ee:6d:34:0e:01:3f:69:9e:99:8f: 88:ac:ec:98:02:1c:b6:79:0f:9d:14:33:83:25:66:d8:24:dd: 9f:19:6a:7f:59:97:9b:56:45:ed:40:b2:2f:81:82:44:db:db: f3:33:16:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTVBrMaXNYhtEy/eulgN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDhhMWY0YzM4NWYzYTdiNjI5ODRkNTNlODE2NjVhOTk1 NDEwZjMwHhcNMjUxMjEzMjAwMDU1WhcNMjUxMjE0MjAwMDU1WjAzMTEwLwYDVQQD Eyg3ZjQzZTI4OWNiNzI3MmU3MzgwZTM3ZTc2YWU4ODg5ZDlkNWNlNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowZ4Fcds/Yf5ZGJP2+CmbHskoE7T H9FTi1x+qfN2/dpQ9jv4thB+q3sEtMw0kUdsiBU7CDrXskA0yv1YOenr9j61ciVd crJQXQhCg0xGdpl0iDHnysSu669D1GAcrCW5OHowR12oVctZEoffSVZp6AvnXSjq 6wy+MFxwuNgzuU96fZ8QPKOjQCRq9WXDkmGJixKCELxvK4QqCYorcCwKJGJyaV3u +isd8feUc2ONdbcqNxjNJSz0Ghpe1dcrhBkPk+SXF/gR9pCglUhN+CeGfVpvfO17 ij7GN9Zqzjk/E2LsB+R9o7BWcwyuIhfoWT9iQbHi3fWZypz4aO91oF1ZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9D4onLcnLnOA4352roiJ2dXOaMMB8GA1UdIwQY MBaAFG0IofTDhfOntimE1T6BZlqZVBDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEt NDNhODUyNmQ4MmJiLzEvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEtNDNhODUyNmQ4MmJi LzEvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKV6omGb Wn0/tBXwI7wSZLlZ+BiHQM+mTftXEzx4C1jylcbfUBjW+pDCnVPvPjlhKafBO/tu GCtpCqG0wBe0HRMx2MwCFg/CP8yoU9zQfCEqqDPP4VWdeGmUlZQFYv9J8pP2lay2 8CHOKfIDraPV/Yg7lrozRgKReAU+mi+zpcOb2YjHeNJwJfSg7xHF5HdxWGrDHYOt OfBIA46MjfdG7zaAFynmX3mnHGgrayL3VH2l81cNtYnvUgmu/nfc57lfikvocWe/ GGJm079zR+PubTQOAT9pnpmPiKzsmAIctnkPnRQzgyVm2CTdnxlqf1mXm1ZF7UCy L4GCRNvb8zMWtw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:18 2025 by rpki-client