This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json) Hash identifier: re3R+nRLL6MooxXHph2xFb86JyHXtletDpaaSVyWaeY= Subject key identifier: 3D:15:36:65:8D:DC:64:AA:E8:75:06:48:1C:B2:E0:27:28:F4:21:8C Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Certificate serial: 019AF12D9A979A958E6CCBD453712FFF5EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: g3ccQfZfpjqWU6dtRDKpBix+Vt/1MykXOe58A7jojeU=) 2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9a:97:9a:95:8e:6c:cb:d4:53:71:2f:ff:5e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=3d1536658ddc64aae87506481cb2e02728f4218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:26:d7:06:bf:dc:fb:04:0c:a5:af:a3:68: b0:c3:c7:85:08:0f:dc:52:7c:69:84:95:66:e8:9a: c1:c1:38:ef:16:4a:7d:8a:43:0b:53:07:93:17:8d: c9:30:f0:01:5c:76:d4:7b:e1:d3:8f:b9:2a:83:f1: cd:dd:1a:c3:6f:f0:41:c9:8f:a6:11:85:f1:c4:c3: 09:ed:cc:57:c9:89:e7:af:54:05:73:fd:9f:de:46: f3:af:67:8d:31:91:95:1d:1e:5d:df:d6:17:c8:d3: b6:a0:15:9c:99:87:04:ef:16:d7:22:ab:aa:ba:9a: 04:23:de:3b:b7:3b:23:81:65:6f:9f:79:3f:1d:3f: cb:33:19:08:90:c8:69:71:bf:0a:ff:89:fd:82:c2: 46:94:e5:0d:16:72:7c:14:12:9a:b0:e5:11:05:cf: a6:14:0f:20:b6:99:ff:cf:6d:34:c7:2e:67:dd:17: 6c:4f:54:22:38:70:14:00:90:0a:1a:64:f3:f9:e3: 48:36:37:60:b3:51:e9:78:83:e7:d6:56:16:ec:66: 35:1a:d6:63:82:55:6c:b1:8f:1a:27:5d:3d:02:b1: 48:06:c0:2d:89:ce:b9:bb:c6:fa:4f:09:bb:c9:26: 59:b5:9c:d5:69:65:3f:5c:a3:42:7a:0a:f8:04:3c: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:36:65:8D:DC:64:AA:E8:75:06:48:1C:B2:E0:27:28:F4:21:8C X509v3 Authority Key Identifier: keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:78:6f:6b:3e:a7:20:3e:0d:b0:64:9a:99:f3:5a:af:35: 38:00:e0:b6:53:bf:51:05:62:5a:13:3f:92:b0:21:6a:08:36: d6:e7:32:14:26:7b:ec:8c:1e:06:c0:93:b9:5f:06:ae:b7:45: 52:9e:bf:47:a1:10:a5:46:a2:5c:02:eb:62:26:3a:50:d7:11: ff:75:95:d2:24:86:bc:28:74:9b:eb:fe:ab:01:aa:d2:40:ea: 54:a8:ae:86:16:57:fe:43:63:31:b5:46:9f:45:ad:c4:b8:43: ae:2e:d1:b0:f3:16:7e:84:2e:63:51:cf:bd:40:66:90:2c:0b: 44:aa:b8:29:a1:12:35:ca:b0:af:2d:fa:ca:16:c3:89:57:a8: c5:f7:49:94:71:8b:d8:70:ee:6c:70:1c:81:f2:c9:16:a2:11: 3e:87:3e:2b:d7:81:b7:41:62:2c:8b:51:09:3d:09:22:90:4c: 74:a4:2b:40:44:e1:4b:76:a0:c7:01:d8:62:83:0e:ba:fb:b0: 54:75:f0:f5:44:8c:68:b6:af:4c:94:48:93:54:af:2b:24:0f: 8c:ee:6d:c5:c4:31:ad:fb:4d:08:cc:b1:ae:f0:e9:86:40:1e: 88:bf:cd:57:a6:9f:48:f0:e7:5f:a1:e2:c4:00:95:3c:73:a0: 72:54:90:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZqXmpWObMvUU3Ev/16jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx Zjg0OTMwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EygzZDE1MzY2NThkZGM2NGFhZTg3NTA2NDgxY2IyZTAyNzI4ZjQyMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Mm1wa/3PsEDKWvo2iww8eFCA/c UnxphJVm6JrBwTjvFkp9ikMLUweTF43JMPABXHbUe+HTj7kqg/HN3RrDb/BByY+m EYXxxMMJ7cxXyYnnr1QFc/2f3kbzr2eNMZGVHR5d39YXyNO2oBWcmYcE7xbXIquq upoEI947tzsjgWVvn3k/HT/LMxkIkMhpcb8K/4n9gsJGlOUNFnJ8FBKasOURBc+m FA8gtpn/z200xy5n3RdsT1QiOHAUAJAKGmTz+eNINjdgs1HpeIPn1lYW7GY1GtZj glVssY8aJ109ArFIBsAtic65u8b6Twm7ySZZtZzVaWU/XKNCegr4BDxAvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0VNmWN3GSq6HUGSByy4Cco9CGMMB8GA1UdIwQY MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeJ4b2s+ pyA+DbBkmpnzWq81OADgtlO/UQViWhM/krAhagg21ucyFCZ77IweBsCTuV8GrrdF Up6/R6EQpUaiXALrYiY6UNcR/3WV0iSGvCh0m+v+qwGq0kDqVKiuhhZX/kNjMbVG n0WtxLhDri7RsPMWfoQuY1HPvUBmkCwLRKq4KaESNcqwry36yhbDiVeoxfdJlHGL 2HDubHAcgfLJFqIRPoc+K9eBt0FiLItRCT0JIpBMdKQrQEThS3agxwHYYoMOuvuw VHXw9USMaLavTJRIk1SvKyQPjO5txcQxrftNCMyxrvDphkAeiL/NV6afSPDnX6Hi xACVPHOgclSQtw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:14 2025 by rpki-client