This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json) Hash identifier: FTFAvG1FbSHh8gFmGMdql8rbPnIhXURx8cNXQ2gt3XM= Subject key identifier: 62:69:73:59:77:FF:A6:46:40:8F:D8:1A:F6:41:A7:56:DB:D7:1E:62 Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019AF23FF9CFBF2FF017038C574E4D087C1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft Manifest number: 1508 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=) 2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: Sfi6kYY1x8UK2AEIUTyKtWPsAveK+cU6KTRBbDCFwYc=) 3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f9:cf:bf:2f:f0:17:03:8c:57:4e:4d:08:7c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=6269735977ffa646408fd81af641a756dbd71e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:da:d8:91:18:d3:38:d3:b1:71:eb:50:29: 8c:81:4c:85:14:c7:c2:67:e8:c3:f6:4f:4f:10:c3: 53:4c:ab:c2:e6:70:c3:01:67:11:7a:5c:58:a7:4c: 83:a1:e2:66:72:ba:76:35:1b:8e:ec:08:37:53:70: 4a:39:ca:c5:43:06:11:ed:6d:d0:d1:f2:94:67:93: 9e:e6:53:3c:b7:ee:8a:35:39:40:14:c4:58:d6:b9: e1:24:ff:b4:7e:10:1d:db:96:c0:5e:3b:1c:67:ce: a5:df:28:3d:e0:e1:df:cc:ed:74:8c:8b:b3:8a:27: 2d:59:8a:13:12:c7:de:ee:a0:cd:99:f9:3c:37:f8: 93:98:56:e9:d2:e2:ab:c1:33:71:e3:46:94:cb:d4: dc:ad:8a:08:ba:53:85:0b:a5:47:7e:50:5d:82:18: 9e:ba:16:e8:46:b0:d4:43:9f:eb:e2:80:03:51:03: fc:b6:07:1a:db:3e:0b:8b:59:26:7c:fe:68:60:e8: 04:c3:bc:2b:01:ed:e1:72:d5:ce:13:55:92:95:69: 3f:b2:73:8f:a3:db:7a:50:ad:9a:00:6c:1f:7e:bd: 1d:57:8f:50:a0:d3:2f:77:91:50:a8:70:1d:ad:af: c5:3f:da:16:74:74:41:0c:de:c5:b5:e4:ed:1b:21: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:69:73:59:77:FF:A6:46:40:8F:D8:1A:F6:41:A7:56:DB:D7:1E:62 X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ef:89:f6:41:5c:5b:4e:23:8f:29:7d:10:90:fb:ce:de:12: 96:a9:56:64:f9:86:af:e4:b6:d5:77:70:3f:c8:4f:8f:13:73: 88:bf:ab:39:95:0f:ee:db:ff:c1:a4:64:ee:52:75:29:89:a2: b7:17:1f:2f:35:be:b2:9f:dd:7e:88:71:08:49:b5:e2:f3:16: 0e:0a:40:c7:d4:d5:9b:05:eb:ee:cc:22:c5:9b:2c:74:00:d0: 68:30:eb:31:99:7e:ff:00:fc:28:d1:29:b8:b0:c1:cc:d9:67: 32:af:23:3e:50:5d:f7:8f:8c:86:39:68:91:6f:8c:79:79:87: 48:30:fe:24:db:be:63:de:3f:2d:17:1f:ab:d1:d7:73:7e:a2: 54:18:11:51:4b:91:7f:27:6b:d8:5e:d6:30:0f:db:2f:65:aa: b3:55:6e:e2:24:a1:f5:15:d7:3f:69:cc:01:b9:8b:a5:33:e6: 31:d9:7b:12:00:c8:89:a1:08:e8:9e:19:e5:ec:b9:6f:4a:ca: e8:dc:71:c2:65:26:76:f1:93:5a:1c:99:7d:0d:6c:e7:78:09: 03:72:98:1c:df:9b:e5:2c:48:47:05:e6:62:d5:9c:ac:c8:6d: 68:a7:5d:00:e7:57:45:c4:81:70:05:27:da:3d:49:80:58:84: 0a:c4:a5:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/nPvy/wFwOMV05NCHweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD Eyg2MjY5NzM1OTc3ZmZhNjQ2NDA4ZmQ4MWFmNjQxYTc1NmRiZDcxZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXa2JEY0zjTsXHrUCmMgUyFFMfC Z+jD9k9PEMNTTKvC5nDDAWcRelxYp0yDoeJmcrp2NRuO7Ag3U3BKOcrFQwYR7W3Q 0fKUZ5Oe5lM8t+6KNTlAFMRY1rnhJP+0fhAd25bAXjscZ86l3yg94OHfzO10jIuz iictWYoTEsfe7qDNmfk8N/iTmFbp0uKrwTNx40aUy9TcrYoIulOFC6VHflBdghie uhboRrDUQ5/r4oADUQP8tgca2z4Li1kmfP5oYOgEw7wrAe3hctXOE1WSlWk/snOP o9t6UK2aAGwffr0dV49QoNMvd5FQqHAdra/FP9oWdHRBDN7FteTtGyFvawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJpc1l3/6ZGQI/YGvZBp1bb1x5iMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu+J9kFc W04jjyl9EJD7zt4SlqlWZPmGr+S21XdwP8hPjxNziL+rOZUP7tv/waRk7lJ1KYmi txcfLzW+sp/dfohxCEm14vMWDgpAx9TVmwXr7swixZssdADQaDDrMZl+/wD8KNEp uLDBzNlnMq8jPlBd94+MhjlokW+MeXmHSDD+JNu+Y94/LRcfq9HXc36iVBgRUUuR fydr2F7WMA/bL2Wqs1Vu4iSh9RXXP2nMAbmLpTPmMdl7EgDIiaEI6J4Z5ey5b0rK 6NxxwmUmdvGTWhyZfQ1s53gJA3KYHN+b5SxIRwXmYtWcrMhtaKddAOdXRcSBcAUn 2j1JgFiECsSlCA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:21 2025 by rpki-client