This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: nk3ZbGh1/TIUA4I5KYf1G1Qz71Pd+PbtouLA7D9dwis= Subject key identifier: C7:C8:76:7F:1F:E6:15:62:A3:BE:6E:A7:40:02:C8:FF:F2:CC:D1:60 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B0F37603E1824A5A2B36F4A82FE4192BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0A7B Signing time: Thu 11 Dec 2025 21:00:45 +0000 Manifest this update: Thu 11 Dec 2025 21:00:45 +0000 Manifest next update: Fri 12 Dec 2025 21:00:45 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: OGZRrOwMnahl9qtbqI7tReBvGxZn+c7HybZ6dic32wM=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:60:3e:18:24:a5:a2:b3:6f:4a:82:fe:41:92:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Dec 11 21:00:45 2025 GMT Not After : Dec 12 21:00:45 2025 GMT Subject: CN=c7c8767f1fe61562a3be6ea74002c8fff2ccd160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:8c:85:1e:38:52:e7:47:0a:da:ef:b6:47: cd:f5:cc:a9:2b:48:c6:d6:92:ae:ac:c6:8c:bc:6f: 54:0d:18:10:ca:39:51:1b:79:7d:1f:da:d8:19:63: 4e:83:67:21:91:ee:39:24:d8:ee:26:3f:08:6a:ff: 5d:de:bf:5d:ef:e7:9f:6a:03:7b:11:9f:7d:ef:e2: 9d:78:b3:45:9b:a1:35:d6:9e:a0:0f:41:33:78:db: e8:1d:45:48:00:9f:ef:4a:36:cb:f6:fd:7f:38:29: b8:99:b5:73:35:85:30:4e:17:59:37:e9:1f:fc:13: 06:fc:0a:d5:36:e3:25:e1:f4:94:d3:f1:7a:7d:5e: 49:1d:50:b3:a5:43:97:00:18:2e:c5:a3:95:08:0a: 14:94:f2:16:06:12:fe:c9:69:4e:e8:64:2d:c0:f1: e0:2c:88:60:b7:f9:5e:42:94:e5:20:08:76:47:40: dd:be:9f:65:88:69:44:fb:08:37:53:20:4b:f2:1f: b8:64:26:de:92:6c:f5:df:9e:c6:5c:6a:dc:28:0e: 4a:94:1f:c9:ce:c4:bd:1a:28:e5:c5:39:db:15:39: 39:ea:2e:25:96:d4:ae:9c:a2:1f:55:2c:cf:65:45: b7:a7:83:4f:c7:f6:dc:0b:93:d3:20:9a:3a:d2:9c: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:76:7F:1F:E6:15:62:A3:BE:6E:A7:40:02:C8:FF:F2:CC:D1:60 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:37:f4:50:d3:81:5a:02:a9:40:6e:7e:5c:c9:47:3a:b4: 45:0b:7d:91:32:87:4a:52:6f:31:f6:0e:a1:b9:3d:c9:a0:a0: 76:64:38:e0:0e:8c:2c:af:af:ce:71:16:5d:c3:54:e9:95:f6: b4:86:b8:14:f0:27:fc:a1:ff:28:d9:85:5a:86:3d:6e:b9:ef: c1:92:28:75:46:70:9a:bb:63:0a:7d:54:bf:22:10:7c:7a:a4: 33:6c:41:8d:58:89:84:56:40:69:f7:3a:62:ab:08:3a:d3:58: 93:ea:df:54:e2:8f:d2:e2:21:4a:be:9d:e7:1a:c9:dd:05:84: 09:94:c2:d7:ab:aa:3b:97:79:de:66:7c:94:2a:1a:a9:c6:e1: a8:99:b3:99:fa:93:30:c5:5d:c3:b3:6d:a9:ce:aa:20:50:59: c8:60:f9:cf:cd:ed:00:09:cf:fc:7d:b8:ac:be:ae:b8:fb:2a: 8c:ab:a0:3d:0a:e6:88:5e:18:67:d8:e5:8d:a7:23:95:57:ca: db:b0:e5:b7:f3:79:0d:80:55:76:0c:3c:e8:14:d5:56:dc:c0: 9f:db:03:38:91:e5:05:78:07:61:ae:26:0d:be:6b:ad:a3:7e: 33:74:a7:a7:4f:e1:4a:b9:e1:bd:1e:99:45:f7:5d:9a:bd:8d: a2:19:17:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2A+GCSlorNvSoL+QZK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMjExMjEwMDQ1WhcNMjUxMjEyMjEwMDQ1WjAzMTEwLwYDVQQD EyhjN2M4NzY3ZjFmZTYxNTYyYTNiZTZlYTc0MDAyYzhmZmYyY2NkMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh6MhR44UudHCtrvtkfN9cypK0jG 1pKurMaMvG9UDRgQyjlRG3l9H9rYGWNOg2chke45JNjuJj8Iav9d3r9d7+efagN7 EZ997+KdeLNFm6E11p6gD0EzeNvoHUVIAJ/vSjbL9v1/OCm4mbVzNYUwThdZN+kf /BMG/ArVNuMl4fSU0/F6fV5JHVCzpUOXABguxaOVCAoUlPIWBhL+yWlO6GQtwPHg LIhgt/leQpTlIAh2R0Ddvp9liGlE+wg3UyBL8h+4ZCbekmz1357GXGrcKA5KlB/J zsS9GijlxTnbFTk56i4lltSunKIfVSzPZUW3p4NPx/bcC5PTIJo60pzX/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfIdn8f5hVio75up0ACyP/yzNFgMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMA39FDT gVoCqUBuflzJRzq0RQt9kTKHSlJvMfYOobk9yaCgdmQ44A6MLK+vznEWXcNU6ZX2 tIa4FPAn/KH/KNmFWoY9brnvwZIodUZwmrtjCn1UvyIQfHqkM2xBjViJhFZAafc6 YqsIOtNYk+rfVOKP0uIhSr6d5xrJ3QWECZTC16uqO5d53mZ8lCoaqcbhqJmzmfqT MMVdw7Ntqc6qIFBZyGD5z83tAAnP/H24rL6uuPsqjKugPQrmiF4YZ9jljacjlVfK 27Dlt/N5DYBVdgw86BTVVtzAn9sDOJHlBXgHYa4mDb5rraN+M3Snp0/hSrnhvR6Z Rfddmr2NohkXDA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:40 2025 by rpki-client