This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json) Hash identifier: MaD1v9iAHaCoqwPwIxVc5YDR1hl6QtX/B271mmxbpHI= Subject key identifier: FE:20:90:42:DD:EC:CE:80:7F:D5:69:F5:92:91:DD:8B:70:09:FC:5C Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019AF389ECEE7FAFCDD3A9BFDD2BEC43F7A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft Manifest number: 0FCB Signing time: Sat 06 Dec 2025 12:01:33 +0000 Manifest this update: Sat 06 Dec 2025 12:01:33 +0000 Manifest next update: Sun 07 Dec 2025 12:01:33 +0000 Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: Ub6IuPRQBw+4WN85wwoVm/8Uk9ONGb2wdAxZjnnYnR0=) 2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=) 3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ec:ee:7f:af:cd:d3:a9:bf:dd:2b:ec:43:f7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Dec 6 12:01:33 2025 GMT Not After : Dec 7 12:01:33 2025 GMT Subject: CN=fe209042ddecce807fd569f59291dd8b7009fc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:70:4f:f2:0d:87:d6:75:c0:c6:34:f5:85: a0:2f:fc:e9:03:a0:0f:7a:a5:e3:c9:d8:81:67:a0: 58:08:92:46:f7:cd:53:f9:f0:01:04:6f:00:67:41: ec:7d:0a:b0:39:77:2e:3c:92:59:10:c1:97:f2:11: 64:f2:b1:f9:89:34:58:96:a9:59:47:41:dd:08:10: 06:34:2a:37:f3:cd:b3:a7:29:f1:08:3c:8b:e7:8a: 36:7d:0c:d5:5d:2e:34:1b:7a:7c:75:07:a7:75:18: 45:7e:a3:79:7b:50:cf:80:67:0d:6e:da:b2:4a:79: 1e:56:1c:bf:42:b8:5e:e4:ef:8e:3e:d9:54:1f:7c: fe:ea:22:79:1d:d3:e7:44:2d:a2:40:bf:f5:10:8e: 09:ae:b4:ed:f1:1e:ae:04:71:a3:fc:66:bb:0a:aa: 47:91:86:d0:8d:49:59:8b:1e:3f:74:55:d2:f6:8c: 75:f0:06:b8:93:cd:ac:09:a2:45:4f:0f:d8:a8:45: 99:41:54:b0:a6:e6:3b:85:51:70:73:55:7c:b4:01: b8:4a:23:d4:07:09:16:f2:72:0d:ad:4e:f4:90:fc: 80:30:70:73:b4:c6:71:af:60:66:ea:e6:91:4f:18: b7:b3:42:fa:52:38:34:57:90:47:f0:6d:9e:2f:e7: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:90:42:DD:EC:CE:80:7F:D5:69:F5:92:91:DD:8B:70:09:FC:5C X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:16:eb:49:e9:ab:84:7b:fe:64:5e:cd:93:77:5f:22:c4: a6:41:d7:0a:7c:2c:e9:ea:b0:3d:14:f1:3f:53:d4:33:4c:87: 86:6d:58:11:5a:3a:31:cf:41:22:75:d0:d1:97:58:15:76:5f: f2:c5:e8:c1:51:df:ad:70:6c:38:3b:0e:4c:31:31:6b:4e:37: 6c:0f:18:6e:1a:86:a7:44:5d:cd:cb:e4:0f:25:ca:df:10:9e: 6d:6a:a6:09:dc:dc:60:eb:b4:7e:cd:4b:f3:c0:73:9b:53:6f: 83:41:fe:0b:46:6b:eb:76:93:79:df:e7:79:a3:78:ce:80:eb: 45:33:bb:95:52:75:78:09:de:97:16:85:86:21:d6:0f:70:35: b4:ba:ec:47:3c:e2:2a:41:54:91:6e:42:61:0e:b2:a6:e4:3d: 6f:26:50:53:0e:2a:e4:c2:85:5c:9a:87:36:43:7c:ef:e5:32: c3:e3:79:fa:71:ee:03:8c:76:cc:1c:60:3a:aa:22:73:f7:ba: 1c:4d:e9:d9:37:88:f6:cd:96:2c:b7:aa:5b:2e:5e:8f:bb:49: 32:2e:59:58:4c:5e:5a:e2:74:4d:f4:f7:0c:fc:03:fb:35:af: 5d:eb:5d:19:76:94:58:ee:e2:7a:b8:5b:0f:c9:bf:7f:4c:a5: e9:28:3f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziezuf6/N06m/3SvsQ/ejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjUxMjA2MTIwMTMzWhcNMjUxMjA3MTIwMTMzWjAzMTEwLwYDVQQD EyhmZTIwOTA0MmRkZWNjZTgwN2ZkNTY5ZjU5MjkxZGQ4YjcwMDlmYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhwT/INh9Z1wMY09YWgL/zpA6AP eqXjydiBZ6BYCJJG981T+fABBG8AZ0HsfQqwOXcuPJJZEMGX8hFk8rH5iTRYlqlZ R0HdCBAGNCo3882zpynxCDyL54o2fQzVXS40G3p8dQendRhFfqN5e1DPgGcNbtqy SnkeVhy/Qrhe5O+OPtlUH3z+6iJ5HdPnRC2iQL/1EI4JrrTt8R6uBHGj/Ga7CqpH kYbQjUlZix4/dFXS9ox18Aa4k82sCaJFTw/YqEWZQVSwpuY7hVFwc1V8tAG4SiPU BwkW8nINrU70kPyAMHBztMZxr2Bm6uaRTxi3s0L6Ujg0V5BH8G2eL+dxDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4gkELd7M6Af9Vp9ZKR3YtwCfxcMB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmkW60np q4R7/mRezZN3XyLEpkHXCnws6eqwPRTxP1PUM0yHhm1YEVo6Mc9BInXQ0ZdYFXZf 8sXowVHfrXBsODsOTDExa043bA8YbhqGp0RdzcvkDyXK3xCebWqmCdzcYOu0fs1L 88Bzm1Nvg0H+C0Zr63aTed/neaN4zoDrRTO7lVJ1eAnelxaFhiHWD3A1tLrsRzzi KkFUkW5CYQ6ypuQ9byZQUw4q5MKFXJqHNkN87+Uyw+N5+nHuA4x2zBxgOqoic/e6 HE3p2TeI9s2WLLeqWy5ej7tJMi5ZWExeWuJ0TfT3DPwD+zWvXetdGXaUWO7ierhb D8m/f0yl6Sg/xw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:14:24 2025 by rpki-client