This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json) Hash identifier: IR8IKVwO9M1r0Wh9jONAqtaxrsywG0lzDp2xQy6qlbU= Subject key identifier: 8B:2D:67:68:A6:36:3A:7C:73:AD:F2:4F:A5:B0:DC:2A:64:8C:4C:BD Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f Certificate serial: 019B2DB013EF92B9238630CB9FB6A002F7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft Manifest number: 138E Signing time: Wed 17 Dec 2025 19:01:12 +0000 Manifest this update: Wed 17 Dec 2025 19:01:12 +0000 Manifest next update: Thu 18 Dec 2025 19:01:12 +0000 Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: MWv2OgO+E5iS79NnPJwYPEtpTEkMNTu3jMNdnopYgXY=) 2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:13:ef:92:b9:23:86:30:cb:9f:b6:a0:02:f7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f Validity Not Before: Dec 17 19:01:12 2025 GMT Not After : Dec 18 19:01:12 2025 GMT Subject: CN=8b2d6768a6363a7c73adf24fa5b0dc2a648c4cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:db:ab:2b:b7:b5:a8:08:57:66:1e:77:f3: 73:f5:e5:b9:15:44:23:ba:36:a1:11:e9:10:33:91: 60:2c:5a:36:67:a0:70:7f:5b:5c:db:3a:82:24:a3: bf:7e:d8:a2:f8:79:71:c5:cc:85:66:21:11:cb:47: c0:bb:40:5d:99:86:4b:5c:0c:0f:45:5b:17:65:4b: bd:60:ad:d3:fd:5a:fb:42:10:da:b0:be:06:f6:ad: 60:f7:2b:af:61:1b:5f:a3:9f:04:80:17:f3:34:5b: 1b:44:a4:54:ff:2f:51:01:a9:d3:a6:4d:0d:5e:56: de:20:67:2c:70:3f:33:20:92:3a:27:5f:12:d5:4c: f1:7a:06:31:95:34:8c:76:74:98:61:f5:55:92:8a: 2c:33:a3:3e:16:4e:f4:b5:6d:71:f0:c0:4b:66:29: 4b:5f:3c:d1:98:48:30:6a:6f:56:56:f6:0b:a8:72: 6b:55:f8:e3:17:c2:0e:97:f9:50:09:f6:a3:46:24: 24:67:f9:28:bd:7a:18:6f:a4:a9:e0:58:11:b5:67: a0:d4:9b:f1:b0:8a:97:c4:9f:e3:21:87:7d:2c:a7: a8:ac:57:66:7c:57:a3:d6:ce:e2:28:8b:54:e4:a6: 52:e2:72:23:ec:c0:d3:a8:cb:50:46:dd:3f:a5:e2: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2D:67:68:A6:36:3A:7C:73:AD:F2:4F:A5:B0:DC:2A:64:8C:4C:BD X509v3 Authority Key Identifier: keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:c5:28:78:1a:da:e5:a4:38:18:9a:99:b6:9e:c5:3d:cd: 03:b5:12:fa:93:93:68:7a:b6:c9:cf:00:f8:48:f9:09:11:6b: 78:db:1b:ed:5d:83:83:43:f5:87:3c:b0:54:a7:9b:76:d6:ec: a8:6e:d0:5a:4c:6c:5a:1e:b3:e9:e6:a8:3f:6b:7b:81:04:99: 1c:82:f7:1f:5f:8f:50:13:5e:b4:43:19:c5:18:07:2f:73:18: 85:7a:78:7d:c2:92:2d:ee:fc:06:ea:c9:4e:44:fd:51:c8:bd: 46:61:66:8c:b7:bf:1d:06:22:05:62:70:88:4e:55:0e:2f:3c: b9:1d:e2:fe:7a:07:b2:a9:78:bd:1e:64:0d:33:fd:6a:39:d8: f6:06:18:01:48:51:ca:6b:84:bf:15:d6:a0:92:48:50:a8:49: 4b:e3:76:73:62:9a:2b:04:5b:71:37:d9:c7:fe:9f:0b:ba:e0: ff:c0:a7:45:88:33:89:94:37:10:80:38:de:0a:85:55:69:ed: 93:24:4f:de:6a:64:3c:08:52:f6:c4:c7:f3:9e:3a:53:a6:f0: 7d:23:ab:13:68:d4:c2:ef:9d:6a:f7:74:6d:e8:9d:19:cd:ad: 5c:92:29:60:c9:c3:40:62:51:e3:23:a4:a1:46:d2:b9:79:b0: df:b8:d9:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsBPvkrkjhjDLn7agAvfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5 MDYwMWYwHhcNMjUxMjE3MTkwMTEyWhcNMjUxMjE4MTkwMTEyWjAzMTEwLwYDVQQD Eyg4YjJkNjc2OGE2MzYzYTdjNzNhZGYyNGZhNWIwZGMyYTY0OGM0Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsefbqyu3tagIV2Yed/Nz9eW5FUQj ujahEekQM5FgLFo2Z6Bwf1tc2zqCJKO/ftii+HlxxcyFZiERy0fAu0BdmYZLXAwP RVsXZUu9YK3T/Vr7QhDasL4G9q1g9yuvYRtfo58EgBfzNFsbRKRU/y9RAanTpk0N XlbeIGcscD8zIJI6J18S1UzxegYxlTSMdnSYYfVVkoosM6M+Fk70tW1x8MBLZilL XzzRmEgwam9WVvYLqHJrVfjjF8IOl/lQCfajRiQkZ/kovXoYb6Sp4FgRtWeg1Jvx sIqXxJ/jIYd9LKeorFdmfFej1s7iKItU5KZS4nIj7MDTqMtQRt0/peLXaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIstZ2imNjp8c63yT6Ww3CpkjEy9MB8GA1UdIwQY MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE3FKHga 2uWkOBiambaexT3NA7US+pOTaHq2yc8A+Ej5CRFreNsb7V2Dg0P1hzywVKebdtbs qG7QWkxsWh6z6eaoP2t7gQSZHIL3H1+PUBNetEMZxRgHL3MYhXp4fcKSLe78BurJ TkT9Uci9RmFmjLe/HQYiBWJwiE5VDi88uR3i/noHsql4vR5kDTP9ajnY9gYYAUhR ymuEvxXWoJJIUKhJS+N2c2KaKwRbcTfZx/6fC7rg/8CnRYgziZQ3EIA43gqFVWnt kyRP3mpkPAhS9sTH8546U6bwfSOrE2jUwu+davd0beidGc2tXJIpYMnDQGJR4yOk oUbSuXmw37jZ8Q== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:44 2025 by rpki-client