This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json) Hash identifier: +gv8oK6ompbUJe5E/NJ2RtUTiN2E9eksWH1JhnvieLU= Subject key identifier: 3E:05:1E:7F:15:74:F1:66:BC:E7:02:2B:DB:54:25:18:17:26:CA:DA Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Certificate serial: 019AF50AB73AFB3651E694758F134BEB1D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft Manifest number: 1004 Signing time: Sat 06 Dec 2025 19:01:51 +0000 Manifest this update: Sat 06 Dec 2025 19:01:51 +0000 Manifest next update: Sun 07 Dec 2025 19:01:51 +0000 Files and hashes: 1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=) 2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=) 3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=) 4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: +kz3LgyOmp4QunsbpJ79tSeK5WoB9UnkDH9Ybt+Uepw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b7:3a:fb:36:51:e6:94:75:8f:13:4b:eb:1d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Validity Not Before: Dec 6 19:01:51 2025 GMT Not After : Dec 7 19:01:51 2025 GMT Subject: CN=3e051e7f1574f166bce7022bdb5425181726cada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:36:ba:29:7a:61:e6:8e:ec:50:78:05:ce: 10:61:82:75:f7:58:56:37:8a:0e:42:77:bb:5f:f1: 09:f3:7d:c0:81:8b:b6:13:23:a8:27:27:ca:bd:6c: 52:bd:9e:2e:6e:c2:f5:6b:44:22:61:b5:1d:4b:14: 6d:44:0d:d2:3d:c5:46:0e:82:99:b4:ee:1f:c7:46: b1:9f:0a:35:ad:b0:a9:57:e3:fe:c1:c0:dd:ec:a0: 19:50:e4:fb:8c:0d:4b:00:e8:f1:30:bc:89:0c:e6: 76:af:a0:5b:64:65:2f:9b:37:07:41:0f:7a:cd:8d: 82:b9:98:4d:ec:7f:f0:20:77:69:39:50:e6:55:d7: 04:7b:3c:53:26:a7:c2:9f:8b:7c:bd:a1:6b:44:0d: 75:e2:86:2d:9a:31:65:6f:bd:b0:28:da:18:fc:14: 60:a0:df:93:5c:a3:5e:73:bd:06:03:92:fc:26:35: b9:47:f4:cc:1d:5b:2c:bd:0c:94:a5:cc:83:6c:0c: bf:cb:ed:b2:a2:8f:8f:9e:c6:da:32:39:80:9f:ec: db:29:3a:66:10:d5:ae:44:d8:ec:a7:44:b1:8d:66: 08:9e:77:4e:58:d8:81:12:2c:3e:95:a0:6b:32:6f: 97:b0:8d:91:70:2f:4d:7c:91:59:00:46:97:47:0a: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:1E:7F:15:74:F1:66:BC:E7:02:2B:DB:54:25:18:17:26:CA:DA X509v3 Authority Key Identifier: keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1b:d9:5d:a8:7d:ff:2a:1f:41:60:43:3e:2b:a5:15:cc:65: 3b:4b:a2:bf:b6:7d:a8:48:a7:cb:e8:21:ab:c4:cf:85:88:e2: 2f:03:df:a7:1c:3c:de:4e:be:a1:c2:e6:f0:4f:02:bb:20:57: 8f:b3:8b:55:f0:93:24:74:4f:48:f7:e6:64:d0:6b:2f:6f:6f: cc:50:e0:66:40:b9:0a:c1:cf:3e:a0:0f:25:de:b4:8d:aa:a8: 3e:e8:cd:4e:11:5c:c3:8b:2f:d0:82:ca:4a:94:4d:06:30:d1: e3:c4:ac:b6:0c:55:e4:df:67:0e:4b:8c:fe:d4:0e:44:67:9c: 39:4a:dc:33:d1:7f:1c:02:01:bd:5b:ae:8e:9a:3a:e3:2f:b0: 9e:d4:73:46:ac:53:ce:c5:bc:7a:ea:d8:73:44:b5:7b:9d:c1: de:53:fc:60:0e:3f:3e:a4:5f:e7:25:f3:79:6f:d1:a5:99:89: cd:bb:85:82:57:61:d9:d6:62:a9:d2:82:19:a5:66:50:41:9a: 53:72:64:45:77:40:bd:47:28:a3:a5:0e:19:b2:0e:f0:aa:83: 65:0c:c5:b1:ad:92:bd:1f:26:da:be:ff:2c:3c:51:cf:6b:fa: 90:06:73:a6:ac:c2:fa:6e:10:68:11:24:13:b4:30:40:73:29: 20:5c:f3:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Crc6+zZR5pR1jxNL6x16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw ZjE4NjUwHhcNMjUxMjA2MTkwMTUxWhcNMjUxMjA3MTkwMTUxWjAzMTEwLwYDVQQD EygzZTA1MWU3ZjE1NzRmMTY2YmNlNzAyMmJkYjU0MjUxODE3MjZjYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8I2uil6YeaO7FB4Bc4QYYJ191hW N4oOQne7X/EJ833AgYu2EyOoJyfKvWxSvZ4ubsL1a0QiYbUdSxRtRA3SPcVGDoKZ tO4fx0axnwo1rbCpV+P+wcDd7KAZUOT7jA1LAOjxMLyJDOZ2r6BbZGUvmzcHQQ96 zY2CuZhN7H/wIHdpOVDmVdcEezxTJqfCn4t8vaFrRA114oYtmjFlb72wKNoY/BRg oN+TXKNec70GA5L8JjW5R/TMHVssvQyUpcyDbAy/y+2yoo+PnsbaMjmAn+zbKTpm ENWuRNjsp0SxjWYInndOWNiBEiw+laBrMm+XsI2RcC9NfJFZAEaXRwrQYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4FHn8VdPFmvOcCK9tUJRgXJsraMB8GA1UdIwQY MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxvZXah9 /yofQWBDPiulFcxlO0uiv7Z9qEiny+ghq8TPhYjiLwPfpxw83k6+ocLm8E8CuyBX j7OLVfCTJHRPSPfmZNBrL29vzFDgZkC5CsHPPqAPJd60jaqoPujNThFcw4sv0ILK SpRNBjDR48SstgxV5N9nDkuM/tQORGecOUrcM9F/HAIBvVuujpo64y+wntRzRqxT zsW8eurYc0S1e53B3lP8YA4/PqRf5yXzeW/RpZmJzbuFgldh2dZiqdKCGaVmUEGa U3JkRXdAvUcoo6UOGbIO8KqDZQzFsa2SvR8m2r7/LDxRz2v6kAZzpqzC+m4QaBEk E7QwQHMpIFzziQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:47 2025 by rpki-client