This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json) Hash identifier: 34RUdDjuyiDLRrmz0BCm43yBZmEJWdzorKRZ+vflxzU= Subject key identifier: 23:11:71:83:2A:ED:14:C2:E2:E3:22:13:2C:20:9D:78:A6:D6:09:C8 Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Certificate serial: 019AF3F7A3A3F42B741C2B1D3BA33EB41847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft Manifest number: 1547 Signing time: Sat 06 Dec 2025 14:01:24 +0000 Manifest this update: Sat 06 Dec 2025 14:01:24 +0000 Manifest next update: Sun 07 Dec 2025 14:01:24 +0000 Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=) 2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: osGd+vmAPf70wYur7bqce2MV3AlBuN0sFc7k1xvO8z0=) 3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a3:a3:f4:2b:74:1c:2b:1d:3b:a3:3e:b4:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Validity Not Before: Dec 6 14:01:24 2025 GMT Not After : Dec 7 14:01:24 2025 GMT Subject: CN=231171832aed14c2e2e322132c209d78a6d609c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:e0:63:fc:ed:ac:2d:ea:f2:94:ac:9c:1d: 5a:ff:50:39:32:32:d0:a7:14:2f:6f:32:c6:23:c7: c5:0c:91:25:4f:11:1a:ba:20:cc:b6:30:93:01:d7: 1a:43:a0:3a:a0:0a:82:81:6e:e2:cb:ec:40:ba:78: 9c:15:01:36:ae:b6:57:9f:2d:ef:97:a2:7e:99:54: 08:3a:e2:94:92:56:9e:1b:ad:a6:7d:a3:88:46:80: 8d:f2:c0:3b:a8:f1:18:87:06:69:75:40:1e:f7:f6: 4b:dc:ef:0f:41:0d:f0:b6:c4:d1:d3:fe:02:9e:6e: 61:31:b4:c7:0c:7e:b3:cf:f2:d4:36:55:20:19:94: dd:70:18:df:75:e4:5e:30:bc:bd:e0:39:bb:17:f1: 97:cd:39:1c:22:ad:05:44:40:29:3c:d1:b3:09:5d: 8e:e3:15:5c:4f:68:b5:62:5f:eb:47:51:73:4f:7d: 71:01:5d:e5:6a:dc:3e:66:2e:e7:a1:38:87:c8:d4: cf:b6:eb:c3:dc:81:5f:10:60:de:37:1c:56:5b:16: 2f:7f:b4:38:ec:a5:7f:fb:8f:93:88:75:13:d5:30: 56:38:40:80:eb:ab:22:67:44:41:7c:99:7b:55:5d: 1d:19:23:4d:e9:21:4f:e6:f6:60:9e:15:e1:32:a6: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:11:71:83:2A:ED:14:C2:E2:E3:22:13:2C:20:9D:78:A6:D6:09:C8 X509v3 Authority Key Identifier: keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9f:1a:4f:ca:d7:fd:9c:80:a8:f0:7a:85:c1:8f:a4:d0:e9: 8d:c6:e2:2c:87:1a:60:2c:29:c7:fd:51:dc:81:e8:df:bf:e4: 8e:c7:ab:ef:90:e4:1f:dc:5f:dd:df:e5:5c:86:fb:62:3e:60: 1b:73:64:d6:b0:0d:03:88:d0:5a:1f:74:31:73:6c:1e:96:0f: 8e:bf:aa:ce:41:a4:19:40:a3:ec:83:0b:94:c2:ba:3e:2d:88: 43:fd:14:31:f1:50:3c:83:2b:ed:c6:0a:41:bf:68:db:4b:71: c4:c7:b8:77:8a:18:30:0e:19:22:db:05:90:46:fe:e4:cb:7a: 0e:58:37:7f:48:66:29:a3:7f:30:9d:70:fb:d6:1e:f2:a6:39: 33:21:8c:36:b1:3e:e3:d4:ec:fb:64:65:67:c0:35:7e:4d:e3: 2f:8e:9e:10:df:8f:29:b3:40:13:c3:8a:7d:54:22:da:a9:4c: 9b:5a:e3:86:3f:7e:65:32:3e:32:15:40:0a:d9:26:89:ad:11: 74:77:86:00:55:d3:a9:ca:a1:5f:67:c1:de:bc:a0:83:82:88: a9:c1:04:4d:e1:e8:2b:d9:3c:c0:95:e5:4d:ea:92:f6:de:82: 70:8b:f6:44:8f:f8:90:f4:c5:a6:5b:29:a1:d3:c3:85:27:e5: aa:ca:d9:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96Oj9Ct0HCsdO6M+tBhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw OWY0OTkwHhcNMjUxMjA2MTQwMTI0WhcNMjUxMjA3MTQwMTI0WjAzMTEwLwYDVQQD EygyMzExNzE4MzJhZWQxNGMyZTJlMzIyMTMyYzIwOWQ3OGE2ZDYwOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XngY/ztrC3q8pSsnB1a/1A5MjLQ pxQvbzLGI8fFDJElTxEauiDMtjCTAdcaQ6A6oAqCgW7iy+xAunicFQE2rrZXny3v l6J+mVQIOuKUklaeG62mfaOIRoCN8sA7qPEYhwZpdUAe9/ZL3O8PQQ3wtsTR0/4C nm5hMbTHDH6zz/LUNlUgGZTdcBjfdeReMLy94Dm7F/GXzTkcIq0FREApPNGzCV2O 4xVcT2i1Yl/rR1FzT31xAV3latw+Zi7noTiHyNTPtuvD3IFfEGDeNxxWWxYvf7Q4 7KV/+4+TiHUT1TBWOECA66siZ0RBfJl7VV0dGSNN6SFP5vZgnhXhMqbYwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMRcYMq7RTC4uMiEywgnXim1gnIMB8GA1UdIwQY MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp8aT8rX /ZyAqPB6hcGPpNDpjcbiLIcaYCwpx/1R3IHo37/kjser75DkH9xf3d/lXIb7Yj5g G3Nk1rANA4jQWh90MXNsHpYPjr+qzkGkGUCj7IMLlMK6Pi2IQ/0UMfFQPIMr7cYK Qb9o20txxMe4d4oYMA4ZItsFkEb+5Mt6Dlg3f0hmKaN/MJ1w+9Ye8qY5MyGMNrE+ 49Ts+2RlZ8A1fk3jL46eEN+PKbNAE8OKfVQi2qlMm1rjhj9+ZTI+MhVACtkmia0R dHeGAFXTqcqhX2fB3rygg4KIqcEETeHoK9k8wJXlTeqS9t6CcIv2RI/4kPTFplsp odPDhSflqsrZaw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:48 2025 by rpki-client