This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json) Hash identifier: an1ltz9GFwKI/El4cfKrzNwJhRceB7wwMZlm9bU/Drk= Subject key identifier: FB:63:0C:FD:20:EE:69:C3:F2:05:C4:82:99:63:4B:B0:67:3C:B2:8D Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a Certificate serial: 019B1E05D9A7A03F31B8B3AD4E1A54672737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft Manifest number: 0B3D Signing time: Sun 14 Dec 2025 18:00:58 +0000 Manifest this update: Sun 14 Dec 2025 18:00:58 +0000 Manifest next update: Mon 15 Dec 2025 18:00:58 +0000 Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: IbPSDc2lJyz2CY07pIYGYX+a6tW4w1C6V4sFhJLGTBY=) 2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:d9:a7:a0:3f:31:b8:b3:ad:4e:1a:54:67:27:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a Validity Not Before: Dec 14 18:00:58 2025 GMT Not After : Dec 15 18:00:58 2025 GMT Subject: CN=fb630cfd20ee69c3f205c48299634bb0673cb28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:f2:2f:85:76:84:58:3f:ce:87:3a:80:9f: 3f:6e:bc:af:cd:4e:ff:bf:76:30:5b:bd:1f:75:2c: 54:41:08:d8:5d:8d:14:3f:7b:3d:6f:4a:c1:ee:1b: f3:0f:9e:dd:94:a9:c2:e5:2f:5e:b3:e6:f5:0c:df: ca:54:22:61:e4:42:ca:95:b3:3e:f8:9c:fd:41:e8: 4c:c2:3f:be:05:45:a5:1a:23:30:7a:13:5a:ca:f9: 22:cd:c1:b1:6d:cb:ad:ee:67:dd:2c:28:02:55:4d: b3:1e:fa:12:ad:20:69:40:94:be:da:19:06:90:ac: a4:e9:3e:aa:61:30:3a:2b:91:70:54:0f:71:82:ba: 51:3b:4c:c2:8b:bc:27:6f:b2:1c:03:91:a3:a6:a2: ab:3a:51:98:8a:d2:e1:12:62:34:76:ce:45:9b:f9: 58:9a:6f:f2:5a:54:87:ff:d0:86:f7:af:ea:c7:ee: 97:a8:f4:6f:d6:e0:b7:ff:e5:17:88:ce:de:51:c6: 3e:e9:30:62:95:26:ec:9a:e5:ec:04:b7:fc:7b:f1: d2:7c:24:a7:b6:af:1f:e5:89:4a:76:bb:f5:fc:b6: 21:fb:d7:3f:0c:50:c6:66:05:24:95:ce:b5:b9:1a: f5:00:75:93:d0:cc:d3:cf:0f:6a:7b:99:a6:2e:d8: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:0C:FD:20:EE:69:C3:F2:05:C4:82:99:63:4B:B0:67:3C:B2:8D X509v3 Authority Key Identifier: keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f2:cc:18:4b:fc:7b:96:07:0c:46:72:02:b5:29:a4:73:ef: fa:d2:b4:35:dd:2a:4a:e2:88:83:f3:95:84:cf:4f:ef:62:72: ad:ab:68:0a:b2:34:09:aa:d7:a2:84:29:10:e6:5e:bf:b3:81: 5d:c3:71:cb:f6:d1:a0:b8:d0:bd:b4:3f:f0:d9:74:f4:bc:27: 60:93:51:69:44:e3:69:ff:64:d9:0e:4a:4b:71:c6:a5:19:ce: 7c:63:f2:b5:67:cc:83:34:d9:cc:42:19:23:eb:7f:dc:80:fa: bf:88:69:f1:f1:ad:2d:f5:52:8d:ec:3c:b8:bb:6d:ef:b0:0f: 35:8d:ef:2e:1e:be:7d:ac:b6:55:3e:78:65:50:61:d8:1a:1d: 20:28:cb:82:02:60:2a:4a:66:1a:6b:b9:dc:45:d6:d4:8f:d8: db:d6:61:8a:2b:32:20:a4:43:55:04:9e:00:94:9b:ad:bf:ff: c5:6d:64:8d:ad:ff:e3:d8:37:84:45:a6:ff:7b:20:80:0f:9d: cf:bd:97:65:6e:58:63:04:f8:41:bd:33:4b:0c:f5:0a:4b:48: 92:1f:b5:e1:62:66:58:a6:fa:3e:c6:33:c5:24:5d:04:d6:87: 3f:15:ac:19:fe:27:7d:12:68:d9:73:4c:d2:89:ca:59:90:7b: 9e:0c:0e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBdmnoD8xuLOtThpUZyc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz MDg3N2EwHhcNMjUxMjE0MTgwMDU4WhcNMjUxMjE1MTgwMDU4WjAzMTEwLwYDVQQD EyhmYjYzMGNmZDIwZWU2OWMzZjIwNWM0ODI5OTYzNGJiMDY3M2NiMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+vyL4V2hFg/zoc6gJ8/bryvzU7/ v3YwW70fdSxUQQjYXY0UP3s9b0rB7hvzD57dlKnC5S9es+b1DN/KVCJh5ELKlbM+ +Jz9QehMwj++BUWlGiMwehNayvkizcGxbcut7mfdLCgCVU2zHvoSrSBpQJS+2hkG kKyk6T6qYTA6K5FwVA9xgrpRO0zCi7wnb7IcA5GjpqKrOlGYitLhEmI0ds5Fm/lY mm/yWlSH/9CG96/qx+6XqPRv1uC3/+UXiM7eUcY+6TBilSbsmuXsBLf8e/HSfCSn tq8f5YlKdrv1/LYh+9c/DFDGZgUklc61uRr1AHWT0MzTzw9qe5mmLti0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtjDP0g7mnD8gXEgpljS7BnPLKNMB8GA1UdIwQY MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/LMGEv8 e5YHDEZyArUppHPv+tK0Nd0qSuKIg/OVhM9P72JyratoCrI0CarXooQpEOZev7OB XcNxy/bRoLjQvbQ/8Nl09LwnYJNRaUTjaf9k2Q5KS3HGpRnOfGPytWfMgzTZzEIZ I+t/3ID6v4hp8fGtLfVSjew8uLtt77APNY3vLh6+fay2VT54ZVBh2BodICjLggJg KkpmGmu53EXW1I/Y29ZhiisyIKRDVQSeAJSbrb//xW1kja3/49g3hEWm/3sggA+d z72XZW5YYwT4Qb0zSwz1CktIkh+14WJmWKb6PsYzxSRdBNaHPxWsGf4nfRJo2XNM 0onKWZB7ngwOCg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:38:20 2025 by rpki-client