This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json) Hash identifier: Qg7uFuDd3ntqgSJJE3cmfv5G4FIfL/WU4F6UNoJmWyg= Subject key identifier: 4E:27:46:A7:81:71:64:EA:BB:79:D4:00:28:14:D9:11:54:4D:5B:B6 Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Certificate serial: 019AF2AD9C9B226AF2A49B103FE45E3BCEB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: R3xiuxTFEfnbJ28m96HBHa2Vad0v6rOo+BywJIXh2v4=) 2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9c:9b:22:6a:f2:a4:9b:10:3f:e4:5e:3b:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=4e2746a7817164eabb79d4002814d911544d5bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:48:a0:bc:c1:1a:76:24:55:65:dc:09:db:cb: ba:d6:01:ca:ec:f3:b4:f4:5c:57:3f:1f:2f:bd:21: c0:81:1c:47:11:c7:e9:1e:3c:0d:51:8c:c7:14:9a: 1f:dd:5f:85:a2:ee:80:89:0d:63:d4:42:bc:62:6a: c5:f2:8e:19:d5:b4:be:79:07:ec:07:73:36:ed:af: 3d:d6:04:69:5d:db:2d:e3:2e:57:0e:0a:35:16:1f: 5e:41:27:28:f4:a1:65:88:eb:42:51:66:3d:14:f4: a7:ff:8e:89:69:30:db:63:68:2c:a1:0f:6f:a0:a0: ba:8a:7d:57:b9:e5:d1:ab:95:4b:de:d7:c6:cf:3d: 0b:83:39:c6:2f:0e:0a:3c:2d:ba:cb:ec:79:1e:0b: a8:7a:77:23:53:e6:b9:d1:ba:44:8b:09:bb:39:98: a1:b7:b7:95:7f:fa:f1:46:5c:4c:c2:a6:29:6d:05: ff:02:fe:5e:2a:46:99:0a:38:26:c8:4f:e2:8a:d1: a1:d3:b0:c2:95:88:36:55:bc:01:f0:db:57:c0:8f: 42:3c:0c:a6:2b:98:1f:61:bb:c3:63:1f:7b:2b:25: 64:cb:a4:6f:ca:e6:e5:a4:7f:da:9e:16:7a:52:b7: 11:fc:8a:0a:ce:28:23:f2:81:ca:8c:d6:56:53:6d: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:27:46:A7:81:71:64:EA:BB:79:D4:00:28:14:D9:11:54:4D:5B:B6 X509v3 Authority Key Identifier: keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:cd:25:96:86:4f:24:12:6a:bf:13:71:ef:50:4c:31:6c:69: ee:16:09:1a:6e:10:37:9f:d3:03:0c:24:73:73:8d:4b:be:72: 83:be:2b:e2:1b:f1:de:ae:b7:ff:1e:70:7a:ad:29:6a:f3:3b: 7e:73:bf:db:87:2d:a2:49:77:dc:2b:7a:92:6f:18:54:ce:2e: 4d:a7:e3:97:36:82:8b:a0:b2:a0:8d:27:98:46:35:c8:95:7e: 3d:7c:bb:68:52:09:c2:d5:6d:31:50:2c:c4:c5:fe:fa:b6:cb: 12:2a:a4:5e:01:18:89:74:76:bf:1c:d1:e4:b9:3c:e2:24:03: 26:40:f7:02:39:ae:72:b8:3a:08:a5:c3:79:01:52:a6:a9:b5: 93:c6:16:e3:ea:f3:32:72:3e:18:29:e6:06:ce:45:0c:86:fd: 35:e1:91:5e:ce:c0:96:d9:8f:a5:ba:e1:42:3a:07:15:f6:9e: fa:b5:15:b8:d9:f6:28:53:99:53:93:4e:77:42:14:00:25:fa: 45:3b:75:8c:6e:f0:4d:62:e8:77:c1:18:49:58:49:7e:c2:7e: d4:5c:63:03:00:17:fd:79:44:98:23:a5:4d:81:f7:57:a7:7c: f1:7d:fc:c0:dd:99:cb:e9:d0:d0:44:fa:a2:c1:e6:14:12:7e: a2:3b:08:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZybImrypJsQP+ReO86wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4 ODljYTMwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg0ZTI3NDZhNzgxNzE2NGVhYmI3OWQ0MDAyODE0ZDkxMTU0NGQ1YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUigvMEadiRVZdwJ28u61gHK7PO0 9FxXPx8vvSHAgRxHEcfpHjwNUYzHFJof3V+Fou6AiQ1j1EK8YmrF8o4Z1bS+eQfs B3M27a891gRpXdst4y5XDgo1Fh9eQSco9KFliOtCUWY9FPSn/46JaTDbY2gsoQ9v oKC6in1XueXRq5VL3tfGzz0LgznGLw4KPC26y+x5HguoencjU+a50bpEiwm7OZih t7eVf/rxRlxMwqYpbQX/Av5eKkaZCjgmyE/iitGh07DClYg2VbwB8NtXwI9CPAym K5gfYbvDYx97KyVky6RvyublpH/anhZ6UrcR/IoKzigj8oHKjNZWU22xuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4nRqeBcWTqu3nUACgU2RFUTVu2MB8GA1UdIwQY MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt Y2ZkY2I1N2I1ZTFkLzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAps0lloZP JBJqvxNx71BMMWxp7hYJGm4QN5/TAwwkc3ONS75yg74r4hvx3q63/x5weq0pavM7 fnO/24ctokl33Ct6km8YVM4uTafjlzaCi6CyoI0nmEY1yJV+PXy7aFIJwtVtMVAs xMX++rbLEiqkXgEYiXR2vxzR5Lk84iQDJkD3Ajmucrg6CKXDeQFSpqm1k8YW4+rz MnI+GCnmBs5FDIb9NeGRXs7AltmPpbrhQjoHFfae+rUVuNn2KFOZU5NOd0IUACX6 RTt1jG7wTWLod8EYSVhJfsJ+1FxjAwAX/XlEmCOlTYH3V6d88X38wN2Zy+nQ0ET6 osHmFBJ+ojsIWw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:09 2025 by rpki-client