This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json) Hash identifier: 6JKjdxg6n7YPYq9g3KaZLBiN/Uo758PAWo3Z47MB3w8= Subject key identifier: 45:79:80:BC:AD:D7:2D:67:98:45:90:4D:A2:1C:64:CD:0F:0B:D2:3A Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Certificate serial: 019B0D806984391CD590A9D1A49AB13D6375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft Manifest number: 01C5 Signing time: Thu 11 Dec 2025 13:01:17 +0000 Manifest this update: Thu 11 Dec 2025 13:01:17 +0000 Manifest next update: Fri 12 Dec 2025 13:01:17 +0000 Files and hashes: 1: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: A+xT94wZcNvNYjWAcVhp4zCwkHyh/D2i2vttcyR7vKo=) 2: VUIS3dckNr0Kh1Z6hZLO0YNZ4g4.roa (hash: aYI+W1bfXl98I8N9jO+WeobvU+Z0j8a9IrQSBqb8MBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:69:84:39:1c:d5:90:a9:d1:a4:9a:b1:3d:63:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Validity Not Before: Dec 11 13:01:17 2025 GMT Not After : Dec 12 13:01:17 2025 GMT Subject: CN=457980bcadd72d679845904da21c64cd0f0bd23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:65:29:a9:41:73:e6:58:ab:11:a2:56:1f: aa:5d:91:53:fe:ce:fc:ac:93:fc:56:b3:a6:b5:2a: b9:74:46:18:c1:47:53:b9:82:be:7f:e4:ba:ee:db: 05:6d:02:b9:4d:07:7a:13:12:10:9e:77:d3:94:0f: 6e:22:6f:18:67:e8:7e:4b:9f:6b:9b:81:56:43:6b: 4a:26:6e:60:f3:1e:d5:fa:1f:3c:74:24:a5:d8:c6: 50:f3:ed:3e:2b:03:32:34:fe:d9:7b:bc:47:26:8f: e7:19:a5:fe:c7:8d:24:da:58:4a:19:b2:a1:5b:86: 6d:d6:34:82:78:1c:e0:e1:0c:14:68:ae:28:82:9e: 9b:f6:56:87:74:47:85:ad:2c:de:50:e1:19:12:bc: a0:8c:3b:47:b7:91:6a:1c:f7:52:e9:31:cf:f3:8a: 4f:06:27:1e:41:5f:bf:15:a7:00:e2:ec:b3:0b:9c: b3:2e:ef:58:fb:cb:b5:3b:63:0e:e8:1d:e4:d1:75: be:cd:b1:7e:10:8f:6a:32:53:61:66:38:43:e6:ff: b0:df:0e:1b:d7:57:da:bf:35:26:ff:51:f0:1c:a0: 96:45:7c:f2:8d:ac:0a:51:15:5f:dd:3c:52:c1:c2: 47:60:79:b8:32:eb:b7:b9:ec:df:c2:76:fb:64:6f: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:80:BC:AD:D7:2D:67:98:45:90:4D:A2:1C:64:CD:0F:0B:D2:3A X509v3 Authority Key Identifier: keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:61:1f:5c:33:06:01:30:c8:c3:ed:39:10:0e:88:26:eb:d4: af:71:ac:18:03:7e:a7:42:c4:84:3b:96:ed:a1:54:42:52:27: e6:a1:6b:45:f7:41:46:71:43:a7:26:1a:3c:1e:f8:43:df:be: 9a:cb:d3:51:f8:be:c2:4c:bc:c8:78:66:ec:ec:8a:10:fd:4d: 34:3d:8e:11:10:a3:a2:6e:13:45:67:01:21:7b:42:13:cc:14: d6:c9:5e:97:9b:38:43:31:9e:9c:ad:1f:31:d7:5c:fb:f1:26: 43:13:8a:30:c0:74:da:6a:29:c8:d9:a1:5f:11:0a:d2:e1:ab: e6:60:59:f3:8b:c8:96:ec:7b:df:b3:84:5f:5a:b4:41:74:2d: 35:8a:8b:60:d8:b5:ea:e5:c1:77:5e:19:a2:d4:85:c8:ec:43: 21:3e:af:7c:a4:27:60:1c:1c:fe:68:26:82:4a:e8:53:52:a8: cb:4e:d1:4a:6b:01:ed:1a:c9:57:a6:4e:40:d3:33:ca:6f:9f: 56:ae:fb:44:08:27:73:19:8e:5e:70:80:8f:55:72:73:fb:c0: 14:05:84:bd:d0:41:fd:8f:76:8f:96:ab:4f:ff:ec:80:ef:78: f0:c5:11:33:33:0d:b1:a9:86:7c:1e:a0:78:8b:c2:f5:17:5c: db:b9:fd:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgGmEORzVkKnRpJqxPWN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk OWVjY2IwHhcNMjUxMjExMTMwMTE3WhcNMjUxMjEyMTMwMTE3WjAzMTEwLwYDVQQD Eyg0NTc5ODBiY2FkZDcyZDY3OTg0NTkwNGRhMjFjNjRjZDBmMGJkMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LNlKalBc+ZYqxGiVh+qXZFT/s78 rJP8VrOmtSq5dEYYwUdTuYK+f+S67tsFbQK5TQd6ExIQnnfTlA9uIm8YZ+h+S59r m4FWQ2tKJm5g8x7V+h88dCSl2MZQ8+0+KwMyNP7Ze7xHJo/nGaX+x40k2lhKGbKh W4Zt1jSCeBzg4QwUaK4ogp6b9laHdEeFrSzeUOEZErygjDtHt5FqHPdS6THP84pP BiceQV+/FacA4uyzC5yzLu9Y+8u1O2MO6B3k0XW+zbF+EI9qMlNhZjhD5v+w3w4b 11favzUm/1HwHKCWRXzyjawKURVf3TxSwcJHYHm4Muu3uezfwnb7ZG90ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV5gLyt1y1nmEWQTaIcZM0PC9I6MB8GA1UdIwQY MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGEfXDMG ATDIw+05EA6IJuvUr3GsGAN+p0LEhDuW7aFUQlIn5qFrRfdBRnFDpyYaPB74Q9++ msvTUfi+wky8yHhm7OyKEP1NND2OERCjom4TRWcBIXtCE8wU1slel5s4QzGenK0f Mddc+/EmQxOKMMB02mopyNmhXxEK0uGr5mBZ84vIlux737OEX1q0QXQtNYqLYNi1 6uXBd14ZotSFyOxDIT6vfKQnYBwc/mgmgkroU1Koy07RSmsB7RrJV6ZOQNMzym+f Vq77RAgncxmOXnCAj1Vyc/vAFAWEvdBB/Y92j5arT//sgO948MURMzMNsamGfB6g eIvC9Rdc27n9Rw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:58:13 2025 by rpki-client