This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json) Hash identifier: VUfk+Qj8vejMOHtXbhPYYmOh4rsNE4zged6ORu6F2TQ= Subject key identifier: BE:02:B8:F7:8A:8B:38:E9:87:9C:26:3A:BD:BF:DE:1D:FC:CF:A9:AA Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9 Certificate serial: 019AC78D233DC01228409543AC39AF702D87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft Manifest number: 0CA5 Signing time: Thu 27 Nov 2025 23:01:46 +0000 Manifest this update: Thu 27 Nov 2025 23:01:46 +0000 Manifest next update: Fri 28 Nov 2025 23:01:46 +0000 Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: DIJmm1dINvY5y2ExBngCaTbmIo8boCmIuOHhr3Cf+1k=) 2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 23:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:8d:23:3d:c0:12:28:40:95:43:ac:39:af:70:2d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9 Validity Not Before: Nov 27 23:01:46 2025 GMT Not After : Nov 28 23:01:46 2025 GMT Subject: CN=be02b8f78a8b38e9879c263abdbfde1dfccfa9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:51:ef:d6:c3:bc:df:5f:fa:5c:27:9e:ad: 25:33:68:f6:bf:c4:2d:0b:2c:52:7e:ae:98:db:1b: 6b:ce:24:b5:b4:47:e6:0e:a2:4a:cb:c8:bc:a4:05: a6:e6:18:63:5a:ea:69:fc:fd:e7:6d:d6:45:cd:d6: ac:eb:1f:0c:cc:3e:8a:ed:1f:fc:8a:b7:f4:9d:09: 66:fb:a8:af:a8:b7:38:24:75:0c:09:f2:75:59:a1: 84:2f:8d:dc:64:87:9f:d3:d5:00:d5:30:fc:e6:e5: 86:ad:b6:e4:fd:4d:82:3b:50:0d:b5:91:bd:cc:bb: 2c:78:52:b3:3c:52:89:22:9c:a2:70:cc:87:c5:3d: c1:df:ac:4b:c1:2b:8a:e8:d7:2f:4a:15:67:7f:96: 6c:3e:a3:b9:8b:01:87:c5:70:98:0f:99:07:21:d7: 26:98:e8:e7:f0:9e:40:cd:89:40:c8:33:6c:9d:7c: 0d:6c:a8:cf:db:90:ae:cd:23:b5:18:fd:7e:28:c2: 04:b6:5d:72:8b:af:17:68:2a:01:70:0f:b7:08:38: 61:55:cf:83:ee:c1:5a:fa:a1:08:a3:7b:6f:a3:81: 55:fb:15:71:2b:43:01:48:94:f4:63:4d:e2:82:a9: 96:bd:6a:9c:c9:e3:ee:f8:fb:71:26:f8:e1:f1:73: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:B8:F7:8A:8B:38:E9:87:9C:26:3A:BD:BF:DE:1D:FC:CF:A9:AA X509v3 Authority Key Identifier: keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:41:38:73:6d:0a:c8:6d:0d:09:0f:b8:f6:37:21:78:ff:bc: 64:fc:91:50:41:40:1d:ff:88:df:41:a9:65:fa:10:66:55:e3: 87:ac:a7:e5:7f:0d:fc:9e:64:5d:2e:a2:59:60:1c:37:b3:cd: 34:3c:b8:0f:10:10:6d:38:2c:f5:c3:e3:eb:7c:ab:31:02:d2: 85:a9:da:4d:32:2d:bd:c4:ec:ed:94:84:0e:c0:18:2a:4a:00: 9f:ac:96:af:f1:a5:7a:70:67:51:b9:62:21:2a:44:d9:c0:48: 59:bc:c3:3f:f0:88:67:02:56:67:1f:2b:d8:a0:2e:1a:82:74: a9:32:07:d5:49:e3:4c:ed:e9:d6:bd:2e:7c:c5:b6:e7:89:48: 36:de:c8:9d:41:31:a3:42:df:d3:40:16:56:62:2a:8d:49:d8: 9f:c0:01:80:06:8b:64:67:d1:88:90:73:fb:5c:45:3d:44:93: d0:5e:3b:c3:cb:54:2e:44:8f:aa:8f:4a:d3:ae:2d:27:f0:93: 7f:dc:68:27:a5:e1:64:50:a7:07:a4:03:f2:4d:c1:db:e8:34: c6:22:d0:23:46:0b:d2:74:ab:61:eb:74:66:1e:e5:ea:50:67: 11:f5:73:f6:f6:6b:66:89:09:f5:fe:0e:c1:f8:93:fb:58:03: f3:4b:76:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrHjSM9wBIoQJVDrDmvcC2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1 OGRiZjkwHhcNMjUxMTI3MjMwMTQ2WhcNMjUxMTI4MjMwMTQ2WjAzMTEwLwYDVQQD EyhiZTAyYjhmNzhhOGIzOGU5ODc5YzI2M2FiZGJmZGUxZGZjY2ZhOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5NR79bDvN9f+lwnnq0lM2j2v8Qt CyxSfq6Y2xtrziS1tEfmDqJKy8i8pAWm5hhjWupp/P3nbdZFzdas6x8MzD6K7R/8 irf0nQlm+6ivqLc4JHUMCfJ1WaGEL43cZIef09UA1TD85uWGrbbk/U2CO1ANtZG9 zLsseFKzPFKJIpyicMyHxT3B36xLwSuK6NcvShVnf5ZsPqO5iwGHxXCYD5kHIdcm mOjn8J5AzYlAyDNsnXwNbKjP25CuzSO1GP1+KMIEtl1yi68XaCoBcA+3CDhhVc+D 7sFa+qEIo3tvo4FV+xVxK0MBSJT0Y03igqmWvWqcyePu+PtxJvjh8XPx1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4CuPeKizjph5wmOr2/3h38z6mqMB8GA1UdIwQY MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt YjI1YTY3YjJlYjRhLzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkE4c20K yG0NCQ+49jcheP+8ZPyRUEFAHf+I30GpZfoQZlXjh6yn5X8N/J5kXS6iWWAcN7PN NDy4DxAQbTgs9cPj63yrMQLShanaTTItvcTs7ZSEDsAYKkoAn6yWr/GlenBnUbli ISpE2cBIWbzDP/CIZwJWZx8r2KAuGoJ0qTIH1UnjTO3p1r0ufMW254lINt7InUEx o0Lf00AWVmIqjUnYn8ABgAaLZGfRiJBz+1xFPUST0F47w8tULkSPqo9K064tJ/CT f9xoJ6XhZFCnB6QD8k3B2+g0xiLQI0YL0nSrYet0Zh7l6lBnEfVz9vZrZokJ9f4O wfiT+1gD80t2IA== -----END CERTIFICATE-----Generated at Fri Nov 28 08:02:40 2025 by rpki-client