This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json) Hash identifier: 7U7E/hiTuTUIJI1YrYUqp0D+97kc4j2XJfAhDm3xP84= Subject key identifier: A0:88:8E:52:82:1B:A7:95:9B:B5:73:46:BA:60:19:F6:31:16:13:85 Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Certificate serial: 019AF61C77E596B06206AECD4710AB5FD447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft Manifest number: 169A Signing time: Sun 07 Dec 2025 00:00:52 +0000 Manifest this update: Sun 07 Dec 2025 00:00:52 +0000 Manifest next update: Mon 08 Dec 2025 00:00:52 +0000 Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=) 2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: MtIMxpj7/ap6uinpLcpo9MHZlmT3y3oXcylVNKFeO54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:77:e5:96:b0:62:06:ae:cd:47:10:ab:5f:d4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Validity Not Before: Dec 7 00:00:52 2025 GMT Not After : Dec 8 00:00:52 2025 GMT Subject: CN=a0888e52821ba7959bb57346ba6019f631161385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:95:39:39:4f:6e:c5:86:3d:6f:64:40:19: 9e:c7:34:53:f8:cf:c5:03:53:ed:d7:6e:2f:df:23: 74:31:fc:30:63:68:d7:4c:15:03:db:a6:1b:f6:92: 40:56:0a:a6:be:a4:37:0a:42:0c:45:a7:c8:be:60: 9e:f4:91:a0:3a:cf:fd:c6:e5:92:89:21:12:ca:d4: 08:d1:69:a5:8d:f2:9b:e6:d7:fd:d9:ca:dc:ea:53: c3:92:6d:2e:ba:b4:81:7d:f8:f5:b5:5c:54:e8:df: 82:88:86:ef:fd:9d:4a:55:c9:96:12:35:de:58:30: 39:d0:79:32:da:b6:2d:08:ea:30:a8:12:28:a1:65: a4:16:94:63:d5:1c:9e:31:a4:a7:fe:a0:b4:fd:5f: 0a:42:f0:ef:90:64:2b:4d:6e:d4:5a:77:b8:7d:27: 2a:4c:f2:70:d8:89:dc:25:7d:61:44:87:fe:7f:14: fd:99:47:10:ec:21:ff:30:ed:3a:ec:84:75:b9:30: c0:26:3f:cb:7a:0d:aa:ce:64:14:4a:29:3e:4f:77: 61:df:e9:01:ea:0c:90:d2:c5:a7:99:a5:ed:e3:51: 0f:c0:4a:77:a3:d7:53:30:ed:dd:3a:21:1d:1f:2a: b3:8a:3d:4c:e0:f7:32:f3:a2:54:d0:e7:71:b3:2d: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:88:8E:52:82:1B:A7:95:9B:B5:73:46:BA:60:19:F6:31:16:13:85 X509v3 Authority Key Identifier: keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:02:3b:99:b8:e3:72:8b:1b:39:8f:18:08:ea:33:03:a7:a0: 89:b6:0e:13:fc:9b:7c:a6:5a:c3:58:f3:93:4f:db:ba:ff:48: 67:4e:13:a5:e4:3b:7e:53:ff:29:0a:55:ca:22:e1:6e:73:82: d4:1b:68:8e:16:d5:e6:97:36:98:c4:89:dc:73:3c:0b:61:5e: 29:71:40:a6:bb:7a:ec:55:85:a4:df:71:02:43:36:e6:3f:ee: 8d:4e:b2:a5:20:1c:06:a9:53:31:9d:6e:5d:38:29:2c:3b:28: 89:4d:a8:e6:b3:ab:af:94:2c:f8:01:c9:ae:ad:32:82:14:f1: 5e:ea:a3:ca:e7:9c:00:03:75:23:dd:f6:65:ad:97:b1:1e:59: 6c:46:da:df:73:af:0d:da:59:78:fa:d5:b8:6e:30:06:05:98: a4:7d:f2:de:40:52:f6:e5:83:da:7f:94:51:c9:9d:03:f8:89: 87:43:12:29:a5:54:96:e3:da:2e:32:e2:86:0e:f6:72:7e:63: 1b:a3:76:8f:34:f2:5b:c7:27:06:8c:b4:71:64:07:0f:d6:b7: 01:fd:ce:3d:12:9f:63:15:ca:7c:27:22:fb:08:e7:be:91:5d: 1a:9c:f7:6d:f9:8b:9c:a7:30:6f:ca:36:61:d7:51:aa:26:26: ec:0c:0c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHfllrBiBq7NRxCrX9RHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmJiODFkODIzMDY5ZGQ4MjRkOGQ4ZDgyYzhkYmZiMzA1 ZGI5OGYwHhcNMjUxMjA3MDAwMDUyWhcNMjUxMjA4MDAwMDUyWjAzMTEwLwYDVQQD EyhhMDg4OGU1MjgyMWJhNzk1OWJiNTczNDZiYTYwMTlmNjMxMTYxMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms6VOTlPbsWGPW9kQBmexzRT+M/F A1Pt124v3yN0MfwwY2jXTBUD26Yb9pJAVgqmvqQ3CkIMRafIvmCe9JGgOs/9xuWS iSESytQI0WmljfKb5tf92crc6lPDkm0uurSBffj1tVxU6N+CiIbv/Z1KVcmWEjXe WDA50Hky2rYtCOowqBIooWWkFpRj1RyeMaSn/qC0/V8KQvDvkGQrTW7UWne4fScq TPJw2IncJX1hRIf+fxT9mUcQ7CH/MO067IR1uTDAJj/Leg2qzmQUSik+T3dh3+kB 6gyQ0sWnmaXt41EPwEp3o9dTMO3dOiEdHyqzij1M4Pcy86JU0Odxsy2ZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCIjlKCG6eVm7VzRrpgGfYxFhOFMB8GA1UdIwQY MBaAFGy7uB2CMGndgk2NjYLI2/swXbmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3Njkt OGQ2NWY0ZWU5MWRmLzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3NjktOGQ2NWY0ZWU5MWRm LzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAI7mbjj cosbOY8YCOozA6egibYOE/ybfKZaw1jzk0/buv9IZ04TpeQ7flP/KQpVyiLhbnOC 1BtojhbV5pc2mMSJ3HM8C2FeKXFAprt67FWFpN9xAkM25j/ujU6ypSAcBqlTMZ1u XTgpLDsoiU2o5rOrr5Qs+AHJrq0yghTxXuqjyuecAAN1I932Za2XsR5ZbEba33Ov DdpZePrVuG4wBgWYpH3y3kBS9uWD2n+UUcmdA/iJh0MSKaVUluPaLjLihg72cn5j G6N2jzTyW8cnBoy0cWQHD9a3Af3OPRKfYxXKfCci+wjnvpFdGpz3bfmLnKcwb8o2 YddRqiYm7AwMAw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:59 2025 by rpki-client