This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: TG/p+e5SVXNiwfNqI1wCnGLdL0U9C0Jjt6sqDpkZfIU= Subject key identifier: 7C:FB:83:50:D6:79:87:48:47:FD:D0:2B:BD:33:61:52:48:62:D0:C8 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019AF23FF2CE540219A5BAD1B90548D074D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 0FEA Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: 3uKGkaB71Io0TP/g6z43TN9tp179ebIPHNI20rjHdUU=) 2: 7tcWpWZUfFjRAri1J6RRc98qQHs.roa (hash: UMCFQzzz1Y9tdAH7wk0WZ6bxV8IcxDs3YEnSy4ipSic=) 3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f2:ce:54:02:19:a5:ba:d1:b9:05:48:d0:74:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=7cfb8350d679874847fdd02bbd3361524862d0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:16:a1:93:2f:bf:fb:85:f4:af:30:fc:44: 14:c8:bc:7c:f4:ba:04:cc:f5:a8:87:f6:1b:7f:ef: dd:26:fb:6c:63:d5:1a:0e:49:22:87:c3:66:e5:4e: d3:ea:c1:7d:dd:98:58:28:90:f2:98:74:36:ac:4c: b6:49:f2:d3:94:60:b5:91:db:b5:95:68:48:d3:f4: 05:7f:ed:fb:77:63:c6:16:6a:f0:aa:bd:f4:7c:2f: 6c:44:2c:21:05:1b:9e:b9:28:9d:dd:27:77:e0:97: 8d:af:92:f4:9b:47:34:3e:2e:90:9c:69:be:8f:9c: 0f:2a:2a:8f:ec:15:e1:05:93:46:b2:a7:47:14:2a: 30:2a:51:48:76:4c:bb:5e:23:eb:30:c9:96:32:aa: bb:41:4b:06:fd:2a:96:a5:3c:e3:f7:e7:c3:79:7f: d8:9e:cb:46:da:11:f8:97:5b:9d:e6:68:ca:cc:a1: 16:ee:38:bd:4a:c4:4a:7a:94:e7:3d:86:4c:94:fa: 20:45:31:0c:33:27:e8:bf:54:d2:b6:63:ed:a2:b6: 5b:1f:43:8d:ca:00:c5:39:f6:24:91:e4:75:b9:a0: 86:c0:a9:46:cd:7c:63:7d:1c:a6:c3:2d:41:5d:07: 8a:10:29:e5:88:21:72:98:5d:f9:36:25:fe:c7:44: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:83:50:D6:79:87:48:47:FD:D0:2B:BD:33:61:52:48:62:D0:C8 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:42:ab:6c:e4:73:a2:0b:58:b8:0e:a0:54:a2:72:8d:4d:34: df:4d:da:0d:89:f6:5f:d3:55:98:87:e6:44:43:1b:dc:bd:85: 17:2e:06:ac:d0:65:43:3a:42:98:2c:70:b9:99:9b:a9:e7:02: d3:de:de:10:9f:b6:41:f3:09:6d:ac:5d:f6:0f:d3:52:8b:52: 47:d6:73:41:e3:da:44:c1:f8:dc:06:ed:09:e4:9f:db:e9:19: 73:b5:7b:a2:44:7e:cb:c7:a2:b7:92:72:34:fa:93:35:47:66: 61:35:35:a4:7d:3d:98:1c:1c:e7:5d:30:62:1d:1a:e5:5f:03: a7:ae:d1:ca:b4:76:f5:6d:1d:05:38:14:44:35:39:f0:fc:ca: af:b4:b5:e1:83:fc:93:b6:74:4e:fb:a5:ce:df:b5:22:b6:06: 1a:22:99:85:14:59:ab:7d:d6:ff:43:43:0f:ba:74:61:09:44: 15:dd:a6:83:18:79:77:19:ca:68:a2:30:78:41:85:78:4b:01: 3e:5f:80:cc:08:b0:13:e0:2c:32:05:32:eb:f5:12:f9:a5:80: 34:81:d8:be:e8:14:ad:80:17:f5:c2:04:a3:96:6d:70:95:53: 10:37:33:80:4d:54:e0:a8:f4:a2:ea:10:79:55:21:63:05:9f: 75:1d:94:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/LOVAIZpbrRuQVI0HTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD Eyg3Y2ZiODM1MGQ2Nzk4NzQ4NDdmZGQwMmJiZDMzNjE1MjQ4NjJkMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2YWoZMvv/uF9K8w/EQUyLx89LoE zPWoh/Ybf+/dJvtsY9UaDkkih8Nm5U7T6sF93ZhYKJDymHQ2rEy2SfLTlGC1kdu1 lWhI0/QFf+37d2PGFmrwqr30fC9sRCwhBRueuSid3Sd34JeNr5L0m0c0Pi6QnGm+ j5wPKiqP7BXhBZNGsqdHFCowKlFIdky7XiPrMMmWMqq7QUsG/SqWpTzj9+fDeX/Y nstG2hH4l1ud5mjKzKEW7ji9SsRKepTnPYZMlPogRTEMMyfov1TStmPtorZbH0ON ygDFOfYkkeR1uaCGwKlGzXxjfRymwy1BXQeKECnliCFymF35NiX+x0SmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz7g1DWeYdIR/3QK70zYVJIYtDIMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6kKrbORz ogtYuA6gVKJyjU00303aDYn2X9NVmIfmREMb3L2FFy4GrNBlQzpCmCxwuZmbqecC 097eEJ+2QfMJbaxd9g/TUotSR9ZzQePaRMH43AbtCeSf2+kZc7V7okR+y8eit5Jy NPqTNUdmYTU1pH09mBwc510wYh0a5V8Dp67RyrR29W0dBTgURDU58PzKr7S14YP8 k7Z0Tvulzt+1IrYGGiKZhRRZq33W/0NDD7p0YQlEFd2mgxh5dxnKaKIweEGFeEsB Pl+AzAiwE+AsMgUy6/US+aWANIHYvugUrYAX9cIEo5ZtcJVTEDczgE1U4Kj0ouoQ eVUhYwWfdR2UOg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:08 2025 by rpki-client