This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json) Hash identifier: 3mL7YWShHP+8nNO848OLUf4YArhrWtXg5x2IlqXpJ1Y= Subject key identifier: 4D:23:5A:D1:F4:CA:F4:B7:2A:0E:5D:3E:49:3C:5A:EB:3C:9E:4A:75 Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Certificate serial: 019AF01B0718257C0EB49368A7ED0D2701ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft Manifest number: 1773 Signing time: Fri 05 Dec 2025 20:01:34 +0000 Manifest this update: Fri 05 Dec 2025 20:01:34 +0000 Manifest next update: Sat 06 Dec 2025 20:01:34 +0000 Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=) 2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=) 3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=) 4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=) 5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=) 6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=) 7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=) 8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: vZOT7/jxH0qjKoLYsUs7+eDi2tIEJFj3vHuEDN4zK30=) 9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1b:07:18:25:7c:0e:b4:93:68:a7:ed:0d:27:01:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Validity Not Before: Dec 5 20:01:34 2025 GMT Not After : Dec 6 20:01:34 2025 GMT Subject: CN=4d235ad1f4caf4b72a0e5d3e493c5aeb3c9e4a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:b1:75:78:67:f0:d7:38:c1:86:da:20:ee: 2d:ef:9e:12:18:f4:89:db:89:9c:4a:13:f0:67:b7: 7e:16:4a:78:12:e0:8d:6d:8d:70:7e:22:44:0b:b9: 63:64:64:e5:19:28:d2:02:b6:b1:3b:76:a4:2f:c5: 5d:cb:98:d3:29:dc:04:f3:6a:54:c8:d2:31:4d:b3: 26:fe:57:d4:d6:98:0a:2f:ef:89:bd:1f:08:d6:d4: e0:b4:2b:32:93:82:0e:1e:77:53:60:07:ab:6f:be: 70:57:0c:a3:f7:38:b0:0b:38:d6:90:d9:6e:26:80: b6:5b:f7:6c:8b:ce:b7:0f:07:f4:04:ac:e5:da:5f: 2f:34:0c:60:50:45:88:a5:1b:ed:81:10:08:a2:1e: 59:b9:b7:f5:20:19:00:e4:b4:e7:88:bb:d7:43:e9: c0:72:38:ee:d7:d9:b0:fe:b6:c7:7d:fc:6f:8b:8d: 9d:bf:e5:cb:7b:9b:2c:13:38:a8:ab:25:43:9f:ea: 99:27:23:4b:4c:e0:18:21:f7:cc:0b:e0:4a:ea:0c: 22:db:0f:8c:2f:de:2d:69:62:4e:7a:41:36:5b:fe: 3e:cd:e3:2d:95:5f:70:b6:ce:c5:ca:72:72:37:c6: b7:92:a9:33:76:18:5d:6e:7c:ec:49:3f:bd:eb:97: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:5A:D1:F4:CA:F4:B7:2A:0E:5D:3E:49:3C:5A:EB:3C:9E:4A:75 X509v3 Authority Key Identifier: keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:29:c1:66:c0:1d:7a:5e:cc:57:25:33:23:4a:f3:6f:27: 9b:48:b2:4b:7d:c4:f6:08:10:80:b0:cb:03:00:8a:2c:3c:ab: bd:79:62:13:23:a7:ed:d5:07:a0:e6:37:37:52:1b:1d:0c:f6: f4:6f:2a:fc:8c:81:98:cc:35:39:af:e2:4f:95:ea:a3:f6:50: cb:29:2f:6a:0c:a9:41:47:e3:d7:e6:70:d0:54:ac:da:3a:7a: 59:17:e7:d0:54:fe:78:a6:bb:ea:e6:5e:33:8b:01:8d:2f:3b: 32:54:cf:63:38:b5:c2:9e:0b:66:07:a4:6b:27:3b:22:1d:c6: 83:aa:d5:53:68:c4:75:cc:63:55:92:04:a8:6f:9f:ad:5c:1a: ce:b8:4c:1f:97:66:86:ac:fa:38:da:89:18:13:f0:f4:0a:92: 1c:78:a3:bc:b0:26:37:4b:70:ee:b9:f3:30:a6:de:a5:28:e2: 19:6e:89:6f:04:12:39:a1:34:9e:9e:47:ec:97:e8:e7:98:cb: 71:41:b9:b5:96:34:38:0a:dc:43:71:b4:fd:58:55:a1:bb:38: 55:6f:24:62:34:7d:93:f8:b5:b2:a1:fc:8c:98:53:65:33:39: 5c:0b:44:08:88:66:94:50:d5:73:db:87:17:8b:99:49:78:55: 4b:01:f3:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGwcYJXwOtJNop+0NJwHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl MTEzOTYwHhcNMjUxMjA1MjAwMTM0WhcNMjUxMjA2MjAwMTM0WjAzMTEwLwYDVQQD Eyg0ZDIzNWFkMWY0Y2FmNGI3MmEwZTVkM2U0OTNjNWFlYjNjOWU0YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnexdXhn8Nc4wYbaIO4t754SGPSJ 24mcShPwZ7d+Fkp4EuCNbY1wfiJEC7ljZGTlGSjSAraxO3akL8Vdy5jTKdwE82pU yNIxTbMm/lfU1pgKL++JvR8I1tTgtCsyk4IOHndTYAerb75wVwyj9ziwCzjWkNlu JoC2W/dsi863Dwf0BKzl2l8vNAxgUEWIpRvtgRAIoh5Zubf1IBkA5LTniLvXQ+nA cjju19mw/rbHffxvi42dv+XLe5ssEzioqyVDn+qZJyNLTOAYIffMC+BK6gwi2w+M L94taWJOekE2W/4+zeMtlV9wts7FynJyN8a3kqkzdhhdbnzsST+965fSOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0jWtH0yvS3Kg5dPkk8Wus8nkp1MB8GA1UdIwQY MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt N2JmZjI5NmM2YjAyLzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBwpwWbA HXpezFclMyNK828nm0iyS33E9ggQgLDLAwCKLDyrvXliEyOn7dUHoOY3N1IbHQz2 9G8q/IyBmMw1Oa/iT5Xqo/ZQyykvagypQUfj1+Zw0FSs2jp6WRfn0FT+eKa76uZe M4sBjS87MlTPYzi1wp4LZgekayc7Ih3Gg6rVU2jEdcxjVZIEqG+frVwazrhMH5dm hqz6ONqJGBPw9AqSHHijvLAmN0tw7rnzMKbepSjiGW6JbwQSOaE0np5H7Jfo55jL cUG5tZY0OArcQ3G0/VhVobs4VW8kYjR9k/i1sqH8jJhTZTM5XAtECIhmlFDVc9uH F4uZSXhVSwHzDg== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:22 2025 by rpki-client