This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: kfXvvHsXUuhYri8lZtrj7jr+y6I9F9zhmwV9Cc4Iw/s= Subject key identifier: D0:1D:CE:22:26:CA:36:0D:E1:A2:5A:EF:D7:6B:50:6C:3A:98:26:62 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B1B724A425E34453422E485395F034E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 149E Signing time: Sun 14 Dec 2025 06:00:33 +0000 Manifest this update: Sun 14 Dec 2025 06:00:33 +0000 Manifest next update: Mon 15 Dec 2025 06:00:33 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: jmZIlJ2Aup2FeYo4cI2HHWATrF/cfXl0/zgugLq2pr0=) 9: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) 10: v8hBMDKY65zo2V6449UJSPRVSUE.roa (hash: 7bLL/W+lnh1+jDhX4cXB4UWGoYDQrNjyksVTGR4y1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:72:4a:42:5e:34:45:34:22:e4:85:39:5f:03:4e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Dec 14 06:00:33 2025 GMT Not After : Dec 15 06:00:33 2025 GMT Subject: CN=d01dce2226ca360de1a25aefd76b506c3a982662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:0d:f8:44:20:cb:15:9e:1f:7d:b8:29:b7: ca:d2:48:92:a7:47:b7:47:a9:bb:53:dc:e9:24:bc: 5e:1a:2a:89:59:04:0e:6c:01:51:8c:a3:d0:ea:10: 5d:32:65:95:1c:9a:07:dc:f0:13:ef:f1:82:c0:33: 0b:fe:34:66:f6:dd:78:e8:a2:d7:56:e0:0d:b6:3c: 16:96:4f:76:d1:11:ea:27:22:b0:d2:75:7b:14:57: b9:90:4d:eb:f7:2a:24:37:e7:07:fc:f0:6c:b0:12: 4d:e0:3c:27:8d:44:65:e8:a5:b2:83:82:43:98:7d: 68:1e:0f:b9:ba:7f:20:db:9b:64:4e:26:e5:cd:e9: 12:0f:69:d5:a9:1e:27:ea:a7:63:21:59:93:ea:03: f3:ee:84:55:19:ea:c0:84:09:cb:d1:a2:94:f2:b5: d2:80:66:da:d7:ae:37:8a:ab:0d:bb:8c:09:02:79: 26:df:8d:4f:10:d2:e3:86:b8:47:56:a6:31:d2:cc: 57:4e:d8:9a:ab:d0:9d:6a:c3:e2:81:d6:1f:4d:9a: 39:02:21:c4:1b:1a:f1:c9:37:f8:dc:2a:de:38:dd: 00:5a:5a:ea:a7:6d:8f:12:c9:5a:18:dc:62:94:77: 1c:3f:3f:b8:bd:25:e2:32:85:c8:5d:05:71:c5:7e: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1D:CE:22:26:CA:36:0D:E1:A2:5A:EF:D7:6B:50:6C:3A:98:26:62 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:1d:38:89:77:26:1c:09:25:47:c2:69:e4:db:f5:01:58: d0:53:d2:3e:bd:99:b2:e2:32:c1:46:71:59:d0:c9:b4:32:91: 25:42:cb:a5:cd:c2:ab:6c:dd:79:64:21:76:1d:dd:4a:22:23: 8f:bf:66:fb:ce:2e:5d:3e:bb:0b:94:9e:c7:36:d3:6f:5b:b5: eb:fa:11:67:e8:40:f7:56:9b:8c:c6:8e:21:49:20:49:f0:4a: 58:58:21:44:44:cf:b4:48:8c:64:07:88:25:63:8a:23:36:28: d5:e0:fd:65:85:41:66:59:ec:1d:6f:0a:4e:e2:f1:ac:f0:41: ce:7f:18:a4:a2:27:44:57:6f:3e:fb:a4:b5:9b:a5:eb:ac:85: 2b:98:3a:fe:42:52:50:d6:9b:9f:61:4b:07:64:60:4e:3f:31: ed:b3:da:66:b1:de:fd:32:0e:44:79:0e:19:4e:7d:8f:60:02: c6:40:d4:69:5a:75:cf:b2:1a:bf:d4:12:b9:5c:d9:d7:25:bb: e0:ae:ad:3c:0b:9a:e6:9f:7d:b9:90:ab:64:8e:eb:a2:4b:99: 43:87:f2:16:41:cc:9b:76:ed:d2:ef:bd:61:42:80:d9:48:ce: 0d:c5:de:7c:e1:46:f5:57:b3:f0:b2:1c:ac:df:0c:80:e5:09: 43:2a:09:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbckpCXjRFNCLkhTlfA05vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUxMjE0MDYwMDMzWhcNMjUxMjE1MDYwMDMzWjAzMTEwLwYDVQQD EyhkMDFkY2UyMjI2Y2EzNjBkZTFhMjVhZWZkNzZiNTA2YzNhOTgyNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc4N+EQgyxWeH324KbfK0kiSp0e3 R6m7U9zpJLxeGiqJWQQObAFRjKPQ6hBdMmWVHJoH3PAT7/GCwDML/jRm9t146KLX VuANtjwWlk920RHqJyKw0nV7FFe5kE3r9yokN+cH/PBssBJN4DwnjURl6KWyg4JD mH1oHg+5un8g25tkTiblzekSD2nVqR4n6qdjIVmT6gPz7oRVGerAhAnL0aKU8rXS gGba1643iqsNu4wJAnkm341PENLjhrhHVqYx0sxXTtiaq9CdasPigdYfTZo5AiHE GxrxyTf43CreON0AWlrqp22PEslaGNxilHccPz+4vSXiMoXIXQVxxX4nXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAdziImyjYN4aJa79drUGw6mCZiMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetwdOIl3 JhwJJUfCaeTb9QFY0FPSPr2ZsuIywUZxWdDJtDKRJULLpc3Cq2zdeWQhdh3dSiIj j79m+84uXT67C5SexzbTb1u16/oRZ+hA91abjMaOIUkgSfBKWFghRETPtEiMZAeI JWOKIzYo1eD9ZYVBZlnsHW8KTuLxrPBBzn8YpKInRFdvPvuktZul66yFK5g6/kJS UNabn2FLB2RgTj8x7bPaZrHe/TIORHkOGU59j2ACxkDUaVp1z7Iav9QSuVzZ1yW7 4K6tPAua5p99uZCrZI7rokuZQ4fyFkHMm3bt0u+9YUKA2UjODcXefOFG9Vez8LIc rN8MgOUJQyoJsQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:30 2025 by rpki-client