This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: 74XZEOlX2FnihuKkw6rvqbw2XM0WijfMKt5TfngLRPo= Subject key identifier: 3E:33:B5:9C:A4:56:E8:34:C6:D2:B2:06:1A:7C:E8:E2:89:6A:FA:3B Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B413645C01573C91579C53ABA44C48872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 0F8C Signing time: Sun 21 Dec 2025 14:00:34 +0000 Manifest this update: Sun 21 Dec 2025 14:00:34 +0000 Manifest next update: Mon 22 Dec 2025 14:00:34 +0000 Files and hashes: 1: D2nJf0N8YrBqWlH7uNCRM6_-uvs.roa (hash: XzyVLDvtsFWRF8LIf/NtjL2syR+wFA2cNft4AxoOFPg=) 2: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=) 3: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=) 4: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=) 5: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: jo3VwTD0qiSbOKxslOStDn+ocfVbPS2fp6P7IFZs0+s=) 7: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=) 8: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:45:c0:15:73:c9:15:79:c5:3a:ba:44:c4:88:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Dec 21 14:00:34 2025 GMT Not After : Dec 22 14:00:34 2025 GMT Subject: CN=3e33b59ca456e834c6d2b2061a7ce8e2896afa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:3c:23:d6:b8:3a:aa:dc:24:29:45:c0:e8: 91:ab:54:d7:04:8d:f7:55:de:09:05:7c:c8:31:75: f9:7b:5d:73:dc:90:26:07:24:ca:8b:d9:e7:c0:ce: 25:1c:af:a9:8b:4b:d4:c5:ba:ca:ad:4b:d6:af:bc: 78:4c:ac:b6:74:e2:c0:82:84:14:4a:07:bb:df:e5: 87:e8:4c:0a:f6:55:f7:4c:9d:29:97:ca:c9:5c:2d: 38:d2:e5:41:8b:3d:fc:a4:38:cd:aa:9c:db:e3:4c: c0:40:0d:56:09:b0:96:61:d1:c6:49:5f:62:54:1a: 48:98:82:3c:3f:91:35:4d:e3:b7:52:65:44:61:5e: b6:e3:2e:fc:00:35:1f:5c:86:9f:e9:b2:b2:4c:09: 72:58:7d:46:88:b3:d7:71:66:68:c0:a0:64:71:2a: 9a:22:a7:d3:de:0c:f2:a1:a4:10:86:cc:2a:79:97: 18:b0:8e:67:c5:b4:86:43:e5:42:13:31:d7:7b:2f: a7:08:fd:d1:d0:6d:23:ff:9d:23:6f:4d:40:86:01: df:ed:42:7b:8a:3f:15:03:91:c9:b5:6b:9b:37:7c: d8:d9:3f:62:4a:f3:da:6b:f4:5b:09:8b:3e:3f:1f: a3:bc:cb:14:8c:79:3a:8a:cd:d3:48:89:84:96:25: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:B5:9C:A4:56:E8:34:C6:D2:B2:06:1A:7C:E8:E2:89:6A:FA:3B X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:98:6c:58:11:c9:b2:ef:76:58:83:4c:96:e6:85:1d:3c: f0:1a:47:9e:a4:90:d9:1b:e3:42:71:e6:fe:cc:d9:be:a0:7a: 0a:53:30:e2:8c:c3:84:67:af:ac:f4:a4:a1:41:bd:61:44:8b: 26:b2:86:96:62:0b:8f:2f:0e:b9:00:17:08:8e:9c:ae:15:64: c9:9c:87:e2:5c:9a:bc:5b:c8:ee:ec:c2:7d:fc:e9:57:f2:cc: b3:ac:4e:d1:1e:fe:0c:f3:3e:c2:72:db:a0:2c:13:18:9e:1a: 59:a8:a0:8a:ca:fb:53:b2:d0:4e:aa:de:40:76:b0:dd:40:35: c1:50:d1:7d:7c:c4:92:fa:b6:e0:64:5f:71:3c:75:89:51:bc: af:40:22:68:8b:8a:4b:24:4d:b2:c4:89:6f:36:c9:b6:c9:c9: 2d:c7:1f:7e:89:b1:b9:89:05:fa:bf:7e:cd:85:a6:cf:04:a1: 5c:e8:a2:78:73:da:dc:c8:1b:68:ff:53:96:81:23:32:09:8f: 4d:a2:25:0a:88:2b:b1:ad:59:43:c2:e6:0a:cb:c9:eb:94:71: 50:4e:7d:3a:ef:a3:f2:e8:59:92:64:fa:5b:f5:8f:98:55:c3: cc:7b:22:a1:b6:73:74:7f:49:1e:de:f2:8c:33:9e:ee:15:99: 28:5c:16:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNkXAFXPJFXnFOrpExIhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjUxMjIxMTQwMDM0WhcNMjUxMjIyMTQwMDM0WjAzMTEwLwYDVQQD EygzZTMzYjU5Y2E0NTZlODM0YzZkMmIyMDYxYTdjZThlMjg5NmFmYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZg8I9a4OqrcJClFwOiRq1TXBI33 Vd4JBXzIMXX5e11z3JAmByTKi9nnwM4lHK+pi0vUxbrKrUvWr7x4TKy2dOLAgoQU Sge73+WH6EwK9lX3TJ0pl8rJXC040uVBiz38pDjNqpzb40zAQA1WCbCWYdHGSV9i VBpImII8P5E1TeO3UmVEYV624y78ADUfXIaf6bKyTAlyWH1GiLPXcWZowKBkcSqa IqfT3gzyoaQQhswqeZcYsI5nxbSGQ+VCEzHXey+nCP3R0G0j/50jb01AhgHf7UJ7 ij8VA5HJtWubN3zY2T9iSvPaa/RbCYs+Px+jvMsUjHk6is3TSImEliXRhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4ztZykVug0xtKyBhp86OKJavo7MB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmGYbFgR ybLvdliDTJbmhR088BpHnqSQ2RvjQnHm/szZvqB6ClMw4ozDhGevrPSkoUG9YUSL JrKGlmILjy8OuQAXCI6crhVkyZyH4lyavFvI7uzCffzpV/LMs6xO0R7+DPM+wnLb oCwTGJ4aWaigisr7U7LQTqreQHaw3UA1wVDRfXzEkvq24GRfcTx1iVG8r0AiaIuK SyRNssSJbzbJtsnJLccffomxuYkF+r9+zYWmzwShXOiieHPa3MgbaP9TloEjMgmP TaIlCogrsa1ZQ8LmCsvJ65RxUE59Ou+j8uhZkmT6W/WPmFXDzHsiobZzdH9JHt7y jDOe7hWZKFwW0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:30:44 2025 by rpki-client