This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json) Hash identifier: MwLbUcZpa873xajIa4aht+mIJoPx7nY1LIwhnwuA3jE= Subject key identifier: 90:7E:29:87:83:D2:16:B1:5B:61:DD:9F:6F:3F:7D:2F:E4:73:CF:B3 Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f Certificate serial: 019AF1D225D3FF775C190F97A51E8533DC13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft Manifest number: 136F Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: /jpS/o+f8WgtHFIDEXcud9JHYfSj8dhqvSBnnCcCCBE=) 2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:25:d3:ff:77:5c:19:0f:97:a5:1e:85:33:dc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=907e298783d216b15b61dd9f6f3f7d2fe473cfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:1e:84:1e:01:8a:86:9a:17:9d:e9:0e:fa: 4b:2a:32:97:c4:38:b1:9c:1e:62:c0:b6:66:ff:18: 1a:49:af:36:d7:a1:3f:64:f0:ec:f5:a3:59:c7:1c: f4:06:6e:66:e9:37:30:77:29:99:e1:49:96:d3:23: de:4e:2b:d0:cd:b4:28:21:0f:67:1c:d1:bc:55:84: 4c:1f:81:02:c7:bd:c6:4b:a0:97:f6:fe:8c:3d:89: ca:90:8c:71:ae:60:47:2d:33:09:1e:9d:4a:01:29: bf:74:0e:2e:ea:b6:fa:d8:04:0a:cc:45:6e:d4:22: 6d:82:b2:cf:e8:30:6d:21:38:e3:fb:4b:b5:7f:07: 71:39:fa:b2:5c:0d:69:8b:b0:ea:d5:b6:55:b2:f3: 78:8e:92:6f:c6:05:5d:e3:e9:2f:a7:45:85:0b:ef: 6e:87:14:5d:ec:4b:3a:ca:da:d2:83:61:44:62:26: 39:c5:c5:d8:16:1c:c1:23:6e:b9:58:45:ae:12:96: 45:c0:70:bf:3b:8c:3c:05:16:a2:ca:41:7f:ca:a8: ba:80:48:4a:5b:a9:fd:26:92:84:d4:da:da:5b:87: b4:35:e6:9e:a5:8a:f2:d0:fd:56:c3:45:00:6d:af: 81:47:33:b1:51:7f:00:62:e9:95:aa:08:c2:6e:05: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:29:87:83:D2:16:B1:5B:61:DD:9F:6F:3F:7D:2F:E4:73:CF:B3 X509v3 Authority Key Identifier: keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f2:62:2b:ba:40:1a:0d:86:6e:e3:7f:1f:2e:95:48:0c:cf: 17:77:3d:b4:80:24:fa:13:0e:40:4d:92:d0:e5:c0:d6:59:a4: 78:a0:ef:24:ec:43:b9:35:ea:56:61:10:69:33:99:fa:07:e0: e5:29:e3:b9:2b:b7:4c:30:ff:06:28:4e:92:88:ae:67:f9:19: 79:c9:e6:36:f6:ed:b5:c6:a1:9e:35:44:a2:a5:66:72:d9:49: 13:ca:0f:78:08:38:c4:3f:2d:a5:da:c7:d0:97:a2:45:f8:90: 57:5c:c0:00:6c:a1:0c:2d:1d:16:e5:0d:af:67:58:6b:81:88: 02:06:5b:a3:a6:c6:e6:95:2b:1d:d7:01:6b:3c:a6:13:f0:3b: a7:dc:d0:5a:b1:44:6b:c6:4c:08:8f:7f:71:27:93:9c:a5:e3: 2d:f3:bf:e6:8c:f4:55:da:5c:9e:cb:ac:dc:a1:28:b3:f7:3f: 6f:4b:0e:9d:fa:0a:d4:d6:cb:f9:fe:29:76:67:7d:c6:37:8c: c8:e7:81:d8:85:e9:7e:94:f0:39:36:1e:05:d0:d8:6a:ee:aa: d8:7a:30:0a:33:17:60:c6:6c:c7:c5:12:52:f6:91:1b:72:0d: 3f:12:d7:a7:2d:58:49:bd:1f:20:80:48:69:b1:44:bb:6a:a1: 03:d2:c3:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iXT/3dcGQ+XpR6FM9wTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5 MDYwMWYwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg5MDdlMjk4NzgzZDIxNmIxNWI2MWRkOWY2ZjNmN2QyZmU0NzNjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAkehB4BioaaF53pDvpLKjKXxDix nB5iwLZm/xgaSa8216E/ZPDs9aNZxxz0Bm5m6TcwdymZ4UmW0yPeTivQzbQoIQ9n HNG8VYRMH4ECx73GS6CX9v6MPYnKkIxxrmBHLTMJHp1KASm/dA4u6rb62AQKzEVu 1CJtgrLP6DBtITjj+0u1fwdxOfqyXA1pi7Dq1bZVsvN4jpJvxgVd4+kvp0WFC+9u hxRd7Es6ytrSg2FEYiY5xcXYFhzBI265WEWuEpZFwHC/O4w8BRaiykF/yqi6gEhK W6n9JpKE1NraW4e0NeaepYry0P1Ww0UAba+BRzOxUX8AYumVqgjCbgW6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB+KYeD0haxW2Hdn28/fS/kc8+zMB8GA1UdIwQY MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/JiK7pA Gg2GbuN/Hy6VSAzPF3c9tIAk+hMOQE2S0OXA1lmkeKDvJOxDuTXqVmEQaTOZ+gfg 5SnjuSu3TDD/BihOkoiuZ/kZecnmNvbttcahnjVEoqVmctlJE8oPeAg4xD8tpdrH 0JeiRfiQV1zAAGyhDC0dFuUNr2dYa4GIAgZbo6bG5pUrHdcBazymE/A7p9zQWrFE a8ZMCI9/cSeTnKXjLfO/5oz0Vdpcnsus3KEos/c/b0sOnfoK1NbL+f4pdmd9xjeM yOeB2IXpfpTwOTYeBdDYau6q2HowCjMXYMZsx8USUvaRG3INPxLXpy1YSb0fIIBI abFEu2qhA9LDww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:29 2025 by rpki-client