This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json) Hash identifier: BCFY3pkC5CrLDSjcSxtBflwDNnUuX3+1jfsVY71XOt4= Subject key identifier: 2B:B7:E8:12:F4:2C:F0:6D:73:FD:D2:FB:C0:F0:08:01:21:31:65:2F Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Certificate serial: 019AF2ADCD4829F68373AAC0E304D66DA16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: LUeACqkJ6JEpWQUeDYBr+v/Hh2EB13OU0//XYkNs0sU=) 2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cd:48:29:f6:83:73:aa:c0:e3:04:d6:6d:a1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=2bb7e812f42cf06d73fdd2fbc0f008012131652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:be:3e:3d:e1:74:29:aa:8b:b0:09:1d:89: 6a:56:eb:f3:31:7c:0a:c5:e3:bd:4b:07:9f:3a:16: 44:94:e0:4a:60:52:35:7a:a4:c6:80:10:f2:e3:20: 66:75:43:18:63:2a:0f:d7:4b:ee:66:66:91:1b:72: e3:91:79:bb:aa:11:a5:92:0f:f0:7e:cb:2b:69:dc: a6:36:a3:07:ea:ee:9c:74:e7:6a:7c:60:8f:82:a6: 44:7d:1b:94:39:38:fc:94:a8:c7:c6:2e:39:b0:66: 57:ec:4a:1a:27:23:9c:e1:26:8a:db:64:08:95:e2: 9c:53:e9:7b:1e:46:76:21:c8:6f:22:eb:b3:75:03: b5:27:db:bd:e1:4c:bb:fe:4c:79:54:24:e7:0a:31: 81:3f:a4:83:f7:01:fe:ad:1e:e9:0c:3f:0d:96:e9: 9b:62:63:b7:b6:33:fa:1d:3e:66:56:c8:f6:22:d9: a0:54:24:c1:dc:17:38:40:0e:6c:2b:f6:2d:61:7a: 33:22:a7:4c:d3:3b:63:d4:c7:78:28:0e:7f:b0:8a: a9:9b:45:6c:3b:34:f4:2a:d9:07:f6:cf:d4:6d:0e: 13:ea:22:31:2d:c4:6e:8f:39:fc:40:d8:e3:24:fc: 2a:c6:76:00:c9:b9:92:81:92:11:9a:d5:16:68:82: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:E8:12:F4:2C:F0:6D:73:FD:D2:FB:C0:F0:08:01:21:31:65:2F X509v3 Authority Key Identifier: keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0a:b0:c9:72:09:30:c7:83:a4:c6:7e:1e:8e:69:a8:4f:56: f4:62:d2:ce:9a:b4:91:1e:07:4b:bb:fd:f2:29:a9:89:8f:98: 05:fe:e9:c0:96:76:7e:2b:75:5b:32:48:34:d8:dd:9a:f2:72: 50:ea:57:bc:ef:ba:69:80:5e:50:44:73:5e:7f:8c:56:a1:9a: b2:71:80:a2:d8:1e:c1:16:9c:f4:e6:3b:2f:db:5d:7f:22:d8: 9c:6b:b8:f2:a3:84:75:25:5f:01:33:9f:d2:44:49:b3:4e:53: 0d:71:e8:98:55:73:3a:6c:bf:5d:71:eb:84:c3:f5:21:ea:82: 4c:2e:99:ee:b7:3c:c0:68:02:2b:ad:57:b1:c3:e6:ae:d5:45: fb:11:d7:83:0c:7f:56:fe:15:fa:d4:9c:55:b3:4d:78:0c:9f: c5:f3:0c:68:76:7b:3d:b7:3f:5e:b5:27:74:7d:d8:87:28:ee: 41:ed:69:e3:b0:72:99:8d:10:9b:f9:34:85:36:e6:4c:07:e2: f8:51:40:ee:01:7c:ff:db:e9:64:9f:f0:dd:bf:ad:46:41:47: 83:17:00:30:f6:51:17:f4:61:6c:d3:91:10:3f:1e:51:23:4b: 9b:94:fb:96:66:fc:3b:da:f7:a0:14:8a:b4:97:65:d6:fa:36: 8f:e6:e5:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc1IKfaDc6rA4wTWbaFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk OTdhZjYwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygyYmI3ZTgxMmY0MmNmMDZkNzNmZGQyZmJjMGYwMDgwMTIxMzE2NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+G+Pj3hdCmqi7AJHYlqVuvzMXwK xeO9SwefOhZElOBKYFI1eqTGgBDy4yBmdUMYYyoP10vuZmaRG3LjkXm7qhGlkg/w fssradymNqMH6u6cdOdqfGCPgqZEfRuUOTj8lKjHxi45sGZX7EoaJyOc4SaK22QI leKcU+l7HkZ2IchvIuuzdQO1J9u94Uy7/kx5VCTnCjGBP6SD9wH+rR7pDD8Nlumb YmO3tjP6HT5mVsj2ItmgVCTB3Bc4QA5sK/YtYXozIqdM0ztj1Md4KA5/sIqpm0Vs OzT0KtkH9s/UbQ4T6iIxLcRujzn8QNjjJPwqxnYAybmSgZIRmtUWaIKr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu36BL0LPBtc/3S+8DwCAEhMWUvMB8GA1UdIwQY MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQqwyXIJ MMeDpMZ+Ho5pqE9W9GLSzpq0kR4HS7v98impiY+YBf7pwJZ2fit1WzJINNjdmvJy UOpXvO+6aYBeUERzXn+MVqGasnGAotgewRac9OY7L9tdfyLYnGu48qOEdSVfATOf 0kRJs05TDXHomFVzOmy/XXHrhMP1IeqCTC6Z7rc8wGgCK61XscPmrtVF+xHXgwx/ Vv4V+tScVbNNeAyfxfMMaHZ7Pbc/XrUndH3YhyjuQe1p47BymY0Qm/k0hTbmTAfi +FFA7gF8/9vpZJ/w3b+tRkFHgxcAMPZRF/RhbNORED8eUSNLm5T7lmb8O9r3oBSK tJdl1vo2j+blqg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:41 2025 by rpki-client