This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: 1vi/N0ePyY+fU6pfmaDnI1I2b2zNf1cALVrZTBdNzEY= Subject key identifier: CA:89:F8:BF:C8:55:79:92:02:8B:07:40:F9:02:50:89:43:BE:C0:E1 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019B247626C92C928266EBBDF7760BE05A0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 1004 Signing time: Tue 16 Dec 2025 00:01:21 +0000 Manifest this update: Tue 16 Dec 2025 00:01:21 +0000 Manifest next update: Wed 17 Dec 2025 00:01:21 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: 35mrIzsuk7jmQGNkH0j0ureyBaAtJ5dlXRpafgVR0Ks=) 2: 7tcWpWZUfFjRAri1J6RRc98qQHs.roa (hash: UMCFQzzz1Y9tdAH7wk0WZ6bxV8IcxDs3YEnSy4ipSic=) 3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:26:c9:2c:92:82:66:eb:bd:f7:76:0b:e0:5a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Dec 16 00:01:21 2025 GMT Not After : Dec 17 00:01:21 2025 GMT Subject: CN=ca89f8bfc8557992028b0740f902508943bec0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:a5:a0:2b:e1:6c:1f:1e:1c:07:90:a3:37: a5:7b:db:cf:67:99:83:a4:61:83:1f:60:78:54:0c: 9e:3a:4d:44:1e:f5:d6:4a:d0:0f:d4:7e:b5:e7:95: 0e:02:91:7d:30:16:ab:21:2d:4b:f3:3e:ef:bc:c1: 43:4d:36:41:ea:df:18:49:d9:22:76:94:3d:39:98: 0c:9a:19:92:35:8f:ac:fb:83:c9:9b:a3:a7:a4:fd: 49:03:9c:97:bd:e8:55:5d:0b:59:25:14:d8:7e:7d: 0e:98:f5:0c:71:aa:4f:62:84:c0:3b:fe:b0:88:5d: a7:c6:00:ff:69:ea:15:4c:56:2f:de:21:48:13:45: 59:50:3a:a8:29:9b:4d:d5:ca:a1:d7:05:9b:11:99: 2d:37:b0:43:a2:cb:a9:e9:07:9f:28:2f:36:6d:d3: 3a:3a:84:2a:d8:68:95:04:c4:5e:dd:f5:08:df:76: c2:a9:01:5a:c2:45:6b:19:66:f1:b4:48:0f:22:80: a6:b7:02:8b:d8:b0:26:0d:cd:51:ec:65:53:61:23: c2:3e:ae:4f:4c:bd:a0:cd:3e:0c:71:0c:43:0a:6d: 7a:31:1c:34:24:67:32:b0:2e:99:17:e1:9a:0c:dc: 57:77:0e:d2:d3:5c:6d:a5:d4:a9:a7:b3:52:93:a9: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:F8:BF:C8:55:79:92:02:8B:07:40:F9:02:50:89:43:BE:C0:E1 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0e:51:96:34:e1:6b:3e:ab:cc:37:de:28:40:1d:25:5f:59: f7:d6:02:8f:d4:6b:f8:a5:db:26:d5:51:a9:f3:3d:0f:ce:a7: b7:23:39:03:82:33:33:45:64:c5:a0:ac:7b:35:00:ae:30:7b: aa:b7:d2:76:20:a3:97:ca:23:5d:c9:3c:cb:61:df:f4:3f:dc: c7:21:5d:78:0a:05:d9:d8:9f:53:1b:27:01:8e:d5:e1:79:a7: 1e:c1:0e:51:55:0b:2d:40:6d:de:4a:40:dc:2a:ec:97:e0:0c: 36:1e:d3:e5:32:0d:de:d3:a7:9b:04:cf:65:2e:85:09:cc:c0: 7c:55:93:f5:97:49:eb:81:46:07:17:c0:af:f5:02:17:83:69: 64:27:15:8c:6f:47:0b:3b:82:23:2d:da:b6:0c:ea:53:34:c9: c4:ee:40:ca:3d:07:d7:8c:3a:d0:68:08:54:50:6d:bb:80:91: bb:2d:2e:a1:d4:40:c5:10:c3:42:56:7b:91:e4:8d:0e:09:53: 4c:f9:ce:b9:2e:6c:71:75:60:ba:99:5d:f3:77:17:c2:b5:28: 01:f3:fe:fe:d9:d6:fa:78:77:9f:df:ce:4f:8e:57:19:d8:cf: 8a:a3:ab:ba:bf:c7:9e:8c:da:c6:5c:ab:17:18:ff:a8:cf:1f: 9e:d7:1b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdibJLJKCZuu993YL4FoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMjE2MDAwMTIxWhcNMjUxMjE3MDAwMTIxWjAzMTEwLwYDVQQD EyhjYTg5ZjhiZmM4NTU3OTkyMDI4YjA3NDBmOTAyNTA4OTQzYmVjMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1eloCvhbB8eHAeQozele9vPZ5mD pGGDH2B4VAyeOk1EHvXWStAP1H6155UOApF9MBarIS1L8z7vvMFDTTZB6t8YSdki dpQ9OZgMmhmSNY+s+4PJm6OnpP1JA5yXvehVXQtZJRTYfn0OmPUMcapPYoTAO/6w iF2nxgD/aeoVTFYv3iFIE0VZUDqoKZtN1cqh1wWbEZktN7BDosup6QefKC82bdM6 OoQq2GiVBMRe3fUI33bCqQFawkVrGWbxtEgPIoCmtwKL2LAmDc1R7GVTYSPCPq5P TL2gzT4McQxDCm16MRw0JGcysC6ZF+GaDNxXdw7S01xtpdSpp7NSk6lOEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqJ+L/IVXmSAosHQPkCUIlDvsDhMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ5RljTh az6rzDfeKEAdJV9Z99YCj9Rr+KXbJtVRqfM9D86ntyM5A4IzM0VkxaCsezUArjB7 qrfSdiCjl8ojXck8y2Hf9D/cxyFdeAoF2difUxsnAY7V4XmnHsEOUVULLUBt3kpA 3Crsl+AMNh7T5TIN3tOnmwTPZS6FCczAfFWT9ZdJ64FGBxfAr/UCF4NpZCcVjG9H CzuCIy3atgzqUzTJxO5Ayj0H14w60GgIVFBtu4CRuy0uodRAxRDDQlZ7keSNDglT TPnOuS5scXVgupld83cXwrUoAfP+/tnW+nh3n9/OT45XGdjPiqOrur/Hnozaxlyr Fxj/qM8fntcb7A== -----END CERTIFICATE-----Generated at Tue Dec 16 10:52:25 2025 by rpki-client