This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json) Hash identifier: e25iQxP17ptNb5F62EUgjZlNOZDg3z2BVENrRO2kIqs= Subject key identifier: 4C:F4:35:22:70:35:72:1C:11:93:3C:57:2B:AE:CA:02:40:A7:43:E9 Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Certificate serial: 019AF1D277F9575E18F17DCF95DB3B8A6025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft Manifest number: 066C Signing time: Sat 06 Dec 2025 04:01:33 +0000 Manifest this update: Sat 06 Dec 2025 04:01:33 +0000 Manifest next update: Sun 07 Dec 2025 04:01:33 +0000 Files and hashes: 1: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (hash: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=) 2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: VDO4TTEnhPjzzuSVYavE1cKLkfJzhFdhwGI3e2WCC8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:77:f9:57:5e:18:f1:7d:cf:95:db:3b:8a:60:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Validity Not Before: Dec 6 04:01:33 2025 GMT Not After : Dec 7 04:01:33 2025 GMT Subject: CN=4cf435227035721c11933c572baeca0240a743e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:83:1e:d6:1f:c2:cc:d1:e2:19:de:fd:33:55: f6:59:5a:34:33:31:33:e1:f7:45:f7:8c:3b:5e:44: a6:ce:9a:3f:c7:88:a9:42:31:49:e1:e3:81:38:81: 3b:c7:6e:a2:35:99:26:ef:9e:6d:c3:6e:e8:d2:22: f4:0a:cb:0b:7a:89:80:d4:08:d8:f4:5f:fb:c6:a8: d1:d6:ad:a1:45:d8:d6:74:f3:3c:0f:3e:af:91:7b: ed:06:8e:cc:45:6d:35:82:04:cf:19:b2:6e:c3:65: 78:38:ac:e6:64:e2:51:f4:5e:65:9a:31:59:5f:3d: 40:10:12:a2:ca:c2:d4:2a:e4:49:37:11:c9:c1:89: dc:5d:89:07:22:82:f2:e7:e0:06:ec:ab:eb:aa:43: 86:d3:b4:bf:92:46:ab:5b:c5:ee:4c:fd:4d:b8:03: d3:0b:4f:e3:04:91:74:88:16:f7:73:8d:b5:65:61: 5a:8c:20:1a:95:2b:90:9e:a7:a6:c9:a6:49:2b:de: c2:ea:40:f6:fb:e4:af:33:3f:73:0b:7d:48:f4:d9: 9d:c6:56:3d:26:e5:6d:69:7f:3d:5f:90:43:88:eb: 9b:53:c5:df:10:d6:00:51:95:2d:56:28:53:dc:6f: d6:a3:6f:94:59:6b:cb:bb:85:85:ca:1a:98:af:63: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:35:22:70:35:72:1C:11:93:3C:57:2B:AE:CA:02:40:A7:43:E9 X509v3 Authority Key Identifier: keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:19:f9:72:05:46:62:5f:16:22:37:d2:fe:0b:c9:be:cd: 7d:c2:8a:37:bc:91:58:e6:a2:1d:1e:df:e2:12:b1:3e:a3:20: f4:13:4f:99:04:c3:fa:f9:4f:fb:16:16:08:67:17:a7:e4:36: 38:1d:2e:b2:dc:64:38:7c:e8:dc:e0:0a:95:2b:b3:44:d1:3d: 1f:a1:85:96:98:5e:18:2a:88:e3:94:d1:cf:35:8f:92:b6:cd: 13:15:7a:95:9a:ce:63:7b:ff:5d:f3:8b:65:f0:cf:4a:67:0f: e3:d3:87:c6:76:8c:af:fd:e6:cf:44:01:2b:30:c5:69:df:02: 57:f8:e6:48:65:c0:9c:0e:a5:d7:12:f7:72:16:8f:c8:33:a4: f6:db:14:9d:e0:98:20:1d:3e:54:7f:69:d5:e3:f9:5f:31:e7: 87:11:81:c6:9e:9b:ce:6a:00:bc:80:05:da:e3:aa:56:66:ee: b8:b5:bc:d4:33:eb:11:bb:35:b4:14:66:c3:a5:37:8d:02:cd: 5f:d1:4f:07:b8:0f:b3:31:77:3d:7f:5a:18:11:88:a5:78:fb: a4:fb:7c:b0:10:20:09:4f:64:6a:b0:7a:5a:dd:2b:23:6e:5d: 63:fb:22:8a:78:16:25:7f:ff:3c:f2:ab:4b:10:83:2a:76:40: f7:86:31:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0nf5V14Y8X3Plds7imAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWE0NzBkYmFiOWMxYzMzNGYwZjg1ZjQxN2NkMWFhNDI1 ZTlmMTMwHhcNMjUxMjA2MDQwMTMzWhcNMjUxMjA3MDQwMTMzWjAzMTEwLwYDVQQD Eyg0Y2Y0MzUyMjcwMzU3MjFjMTE5MzNjNTcyYmFlY2EwMjQwYTc0M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Me1h/CzNHiGd79M1X2WVo0MzEz 4fdF94w7XkSmzpo/x4ipQjFJ4eOBOIE7x26iNZkm755tw27o0iL0CssLeomA1AjY 9F/7xqjR1q2hRdjWdPM8Dz6vkXvtBo7MRW01ggTPGbJuw2V4OKzmZOJR9F5lmjFZ Xz1AEBKiysLUKuRJNxHJwYncXYkHIoLy5+AG7KvrqkOG07S/kkarW8XuTP1NuAPT C0/jBJF0iBb3c421ZWFajCAalSuQnqemyaZJK97C6kD2++SvMz9zC31I9NmdxlY9 JuVtaX89X5BDiOubU8XfENYAUZUtVihT3G/Wo2+UWWvLu4WFyhqYr2MpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz0NSJwNXIcEZM8VyuuygJAp0PpMB8GA1UdIwQY MBaAFAZaRw26ucHDNPD4X0F80apCXp8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2Mt NjUwNzhhN2Y2NWI4LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2MtNjUwNzhhN2Y2NWI4 LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPQZ+XIF RmJfFiI30v4Lyb7NfcKKN7yRWOaiHR7f4hKxPqMg9BNPmQTD+vlP+xYWCGcXp+Q2 OB0ustxkOHzo3OAKlSuzRNE9H6GFlpheGCqI45TRzzWPkrbNExV6lZrOY3v/XfOL ZfDPSmcP49OHxnaMr/3mz0QBKzDFad8CV/jmSGXAnA6l1xL3chaPyDOk9tsUneCY IB0+VH9p1eP5XzHnhxGBxp6bzmoAvIAF2uOqVmbuuLW81DPrEbs1tBRmw6U3jQLN X9FPB7gPszF3PX9aGBGIpXj7pPt8sBAgCU9karB6Wt0rI25dY/siingWJX//PPKr SxCDKnZA94YxRw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:36 2025 by rpki-client