This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json) Hash identifier: jH2CMrMhrXQJNXIS17BoWom+RBkLadIygADWIznwbPY= Subject key identifier: ED:9C:3B:62:F4:46:DC:86:B0:80:DF:9B:F8:F4:83:D5:13:8B:A2:3E Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019AF42DCB1C293DDD7DF78A403A1641000B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft Manifest number: 02F5 Signing time: Sat 06 Dec 2025 15:00:33 +0000 Manifest this update: Sat 06 Dec 2025 15:00:33 +0000 Manifest next update: Sun 07 Dec 2025 15:00:33 +0000 Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=) 2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: JKJAJB+PLJVmgcFiYYZbACM6oKJ17XRXigZyyhlwRkc=) 3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:cb:1c:29:3d:dd:7d:f7:8a:40:3a:16:41:00:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Dec 6 15:00:33 2025 GMT Not After : Dec 7 15:00:33 2025 GMT Subject: CN=ed9c3b62f446dc86b080df9bf8f483d5138ba23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:82:72:57:63:03:ae:b8:19:bb:ac:a1:04: 47:37:5e:68:68:55:ac:9e:4a:6d:0a:67:95:27:f7: 3b:a8:be:ca:06:93:29:7d:82:92:5f:7f:68:29:9a: b5:72:14:02:ad:ad:0a:12:3e:77:2d:92:5d:da:fd: 5e:7e:fc:51:a1:7a:23:71:46:21:f9:4d:e1:1c:96: 7e:11:00:7c:3b:4c:d5:f5:35:3b:30:bb:78:d5:f8: c9:51:fe:dd:63:97:90:25:70:92:1e:b1:81:b9:09: 16:2c:be:03:6b:b6:93:f2:9c:ad:7f:8c:6d:49:b6: 4d:b9:0f:7f:b7:cc:3b:62:ff:dc:49:98:c7:fe:8a: 92:d4:60:08:d4:55:75:49:3a:ab:2e:16:dd:11:ab: 3b:7b:85:67:c1:58:74:39:bc:12:27:77:2e:1b:14: 18:79:0b:0c:d9:18:63:30:15:85:63:df:b9:49:01: ab:82:77:a8:f0:b1:bd:47:14:66:70:52:c3:ba:09: c6:43:68:c6:03:d2:8e:d9:c2:80:c2:82:ca:55:47: 15:7b:a1:9c:1c:4f:45:35:7d:17:4e:c1:dc:e1:e7: c1:3d:5f:94:2c:b4:3f:a3:ca:12:9c:b1:42:9c:50: df:5a:9d:d2:3b:2b:29:33:a9:69:79:a2:ec:fc:12: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9C:3B:62:F4:46:DC:86:B0:80:DF:9B:F8:F4:83:D5:13:8B:A2:3E X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:02:7b:94:9c:27:19:3f:69:c8:8b:d6:29:af:34:0a:a2:95: 05:af:6c:be:2f:e0:07:4a:57:85:82:c9:e2:06:01:63:8b:45: 9c:c0:bf:40:1b:4f:52:59:c7:ab:bf:05:e5:83:66:9f:28:86: 99:62:4d:0f:ce:92:0e:23:88:f2:ce:72:49:d1:23:4e:f3:e2: 1f:8c:40:ea:d6:de:fa:f5:af:91:68:3e:f6:ab:e8:99:75:0c: de:b6:1d:8c:40:ea:b5:80:02:be:b3:e9:8d:cd:74:a9:2a:dd: c0:ee:4d:40:16:b5:be:ff:1d:7f:43:15:82:fe:42:68:7a:82: bd:ee:21:75:0f:b9:d1:62:1d:21:6b:fe:b0:4e:15:b9:b4:12: 2a:42:d0:89:30:a4:c5:ed:b4:fa:cd:82:b2:f5:5c:c9:c6:34: ec:dd:fc:3e:d4:a4:2d:1f:d6:b6:f8:7c:4e:cd:46:7c:28:b8: 0c:37:38:c9:95:ff:7f:f4:89:1c:a8:19:85:51:76:8e:8a:63: 8d:36:a4:a7:5d:7e:43:c9:2c:00:ef:d2:94:9e:bc:a0:df:2d: 9c:6d:cb:ee:a7:6f:3d:80:b3:53:3e:92:f9:dc:da:e0:e0:6f: d0:e5:08:4d:23:62:60:84:38:3d:19:c4:5b:95:f7:62:3b:0f: 39:81:04:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcscKT3dffeKQDoWQQALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjUxMjA2MTUwMDMzWhcNMjUxMjA3MTUwMDMzWjAzMTEwLwYDVQQD EyhlZDljM2I2MmY0NDZkYzg2YjA4MGRmOWJmOGY0ODNkNTEzOGJhMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiCcldjA664GbusoQRHN15oaFWs nkptCmeVJ/c7qL7KBpMpfYKSX39oKZq1chQCra0KEj53LZJd2v1efvxRoXojcUYh +U3hHJZ+EQB8O0zV9TU7MLt41fjJUf7dY5eQJXCSHrGBuQkWLL4Da7aT8pytf4xt SbZNuQ9/t8w7Yv/cSZjH/oqS1GAI1FV1STqrLhbdEas7e4VnwVh0ObwSJ3cuGxQY eQsM2RhjMBWFY9+5SQGrgneo8LG9RxRmcFLDugnGQ2jGA9KO2cKAwoLKVUcVe6Gc HE9FNX0XTsHc4efBPV+ULLQ/o8oSnLFCnFDfWp3SOyspM6lpeaLs/BK58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2cO2L0RtyGsIDfm/j0g9UTi6I+MB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwJ7lJwn GT9pyIvWKa80CqKVBa9svi/gB0pXhYLJ4gYBY4tFnMC/QBtPUlnHq78F5YNmnyiG mWJND86SDiOI8s5ySdEjTvPiH4xA6tbe+vWvkWg+9qvomXUM3rYdjEDqtYACvrPp jc10qSrdwO5NQBa1vv8df0MVgv5CaHqCve4hdQ+50WIdIWv+sE4VubQSKkLQiTCk xe20+s2CsvVcycY07N38PtSkLR/Wtvh8Ts1GfCi4DDc4yZX/f/SJHKgZhVF2jopj jTakp11+Q8ksAO/SlJ68oN8tnG3L7qdvPYCzUz6S+dza4OBv0OUITSNiYIQ4PRnE W5X3YjsPOYEEAw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:02 2025 by rpki-client