This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json) Hash identifier: KZWdPX/lrtmJgUHpe2To5501v83mj7CXrg20ZRdrXDs= Subject key identifier: 1D:06:8E:12:E2:79:0D:13:30:71:2C:9A:84:53:C7:01:43:09:CB:17 Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Certificate serial: 019B5975E2D473BF4789DF2529C35FCF316F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft Manifest number: 15F6 Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=) 2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: 6IjskZIgAeuYrHq6Wf9e3m8FXX3xgGPkQHCfxaSYOgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e2:d4:73:bf:47:89:df:25:29:c3:5f:cf:31:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4 Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=1d068e12e2790d1330712c9a8453c7014309cb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:aa:57:41:37:55:b5:08:b5:6e:e7:e0:99: 15:24:c4:9e:11:47:db:f4:13:f7:8e:a3:b7:58:46: 73:26:25:5e:aa:60:39:54:9d:eb:38:74:87:87:ba: 17:84:31:11:5e:0f:a4:77:7e:cc:30:7b:e8:23:b4: 81:83:8c:f4:bb:a5:9e:f4:82:fd:f6:82:8d:71:56: ec:fe:a0:91:db:61:12:39:a0:05:8b:60:29:9a:bf: a8:52:c3:72:d2:f0:27:04:18:80:69:a5:91:bf:0c: d2:07:94:3e:af:d6:41:fe:8d:30:64:74:fa:11:6f: d9:c3:59:b4:cd:f9:5a:e0:df:22:00:e7:e8:68:c0: 60:16:06:9e:94:c9:ec:1c:84:a7:db:2b:94:d1:29: 30:6a:b2:50:5e:0b:f1:d6:6a:38:36:15:27:36:c4: d3:fb:d3:3a:c1:de:e4:bc:17:12:fe:7e:66:a7:c1: 89:fe:c0:bd:4c:ba:c0:de:f7:22:e1:aa:0f:c3:2a: 54:3f:3b:33:71:6a:4c:80:e5:34:9b:90:33:d5:3e: e1:3e:e6:14:37:6e:42:64:9e:fb:7e:d0:e8:c7:d1: 1f:c7:c8:77:57:c5:41:38:06:27:a1:b2:0a:b9:94: d2:af:a6:0d:97:95:ec:e0:e8:a9:f4:00:d4:fe:48: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:8E:12:E2:79:0D:13:30:71:2C:9A:84:53:C7:01:43:09:CB:17 X509v3 Authority Key Identifier: keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:02:9f:13:8a:26:1b:81:da:38:81:71:b2:fe:c2:99:8b:16: f1:3f:7b:a4:91:ae:93:8f:90:03:13:79:6e:96:68:de:f6:67: 27:f9:ce:af:cf:ac:e7:e8:c5:a4:39:c5:7b:c8:f1:07:b1:d9: 18:22:d0:23:1d:1a:0c:63:07:16:0b:de:34:1b:eb:fc:60:b5: 31:fa:3f:bc:a3:b9:33:f5:f6:25:2a:11:e9:b0:ce:27:76:4c: ed:a4:93:7a:b0:2e:de:e8:bd:b4:d7:d3:34:a8:f3:e1:1c:09: de:19:5b:0f:2b:aa:af:28:7a:c1:5d:d3:15:ee:58:8a:c2:ff: 51:4a:e4:8e:1a:7d:ca:c9:25:2e:1b:51:10:5e:be:54:3a:f5: 09:42:15:52:09:44:fa:9c:8d:06:ad:4c:e9:71:d2:82:eb:b8: 59:1e:f5:e4:24:07:e6:10:3f:8d:da:7c:91:e2:f6:b2:bc:12: fd:61:ea:d0:c1:16:37:23:24:bb:f9:b4:b6:1a:72:57:35:c4: 4d:61:6e:42:e0:0e:b9:b1:c6:b5:03:70:eb:d2:6d:86:bf:4f: ba:0c:d7:3a:1a:3f:3b:28:d5:f8:c9:85:ee:5f:09:50:57:cc: 91:27:0a:38:b0:1d:f5:6d:25:17:10:03:49:49:58:7a:7e:5d: 41:45:ff:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeLUc79Hid8lKcNfzzFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl MTMzYjQwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD EygxZDA2OGUxMmUyNzkwZDEzMzA3MTJjOWE4NDUzYzcwMTQzMDljYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/yqV0E3VbUItW7n4JkVJMSeEUfb 9BP3jqO3WEZzJiVeqmA5VJ3rOHSHh7oXhDERXg+kd37MMHvoI7SBg4z0u6We9IL9 9oKNcVbs/qCR22ESOaAFi2Apmr+oUsNy0vAnBBiAaaWRvwzSB5Q+r9ZB/o0wZHT6 EW/Zw1m0zfla4N8iAOfoaMBgFgaelMnsHISn2yuU0SkwarJQXgvx1mo4NhUnNsTT +9M6wd7kvBcS/n5mp8GJ/sC9TLrA3vci4aoPwypUPzszcWpMgOU0m5Az1T7hPuYU N25CZJ77ftDox9Efx8h3V8VBOAYnobIKuZTSr6YNl5Xs4Oip9ADU/ki2GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0GjhLieQ0TMHEsmoRTxwFDCcsXMB8GA1UdIwQY MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQKfE4om G4HaOIFxsv7CmYsW8T97pJGuk4+QAxN5bpZo3vZnJ/nOr8+s5+jFpDnFe8jxB7HZ GCLQIx0aDGMHFgveNBvr/GC1Mfo/vKO5M/X2JSoR6bDOJ3ZM7aSTerAu3ui9tNfT NKjz4RwJ3hlbDyuqryh6wV3TFe5YisL/UUrkjhp9ysklLhtREF6+VDr1CUIVUglE +pyNBq1M6XHSguu4WR715CQH5hA/jdp8keL2srwS/WHq0MEWNyMku/m0thpyVzXE TWFuQuAOubHGtQNw69Jthr9PugzXOho/OyjV+MmF7l8JUFfMkScKOLAd9W0lFxAD SUlYen5dQUX/8g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:07 2025 by rpki-client