This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json) Hash identifier: k0t9Ozooj/uePyMl0RdaeSUxkYoJ66wV0wTsol/OVgM= Subject key identifier: 60:80:8B:A7:36:EA:97:1D:67:7D:74:5C:30:D6:EC:B0:E5:AF:5C:15 Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d Certificate serial: 019AF164059D9CFFEEA679E6643920D6270F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft Manifest number: 0309 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: +5IcWQq7wN0/1W1ErI22LxlrqCMnTaQi9vepXxvT84Y=) 2: gYQl8tX6UzR3RDmi_Q8x7-FjoRo.roa (hash: Ql10T2YHVZxrbMNqGA2K5KVTFR5OZbWrykLTc4F+v5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:05:9d:9c:ff:ee:a6:79:e6:64:39:20:d6:27:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=60808ba736ea971d677d745c30d6ecb0e5af5c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:84:4b:59:2e:18:7a:cb:14:34:5a:8b:c6: 30:e9:72:ee:14:db:86:20:52:c9:33:e0:f0:a9:ac: 65:3e:ac:cd:a0:4f:5b:63:e1:46:b4:e9:ee:a5:65: 6e:f7:3a:f3:38:59:88:e2:17:34:89:8b:2a:40:8b: be:4a:02:fc:36:03:d6:0e:3e:dd:f7:b7:9c:ca:75: c9:7e:4d:9c:4d:9e:c9:8c:a5:c6:93:2e:cc:a5:47: 8b:b8:25:98:22:8f:70:e8:0c:e3:9f:bc:56:0d:0b: b2:c9:74:82:ff:c3:92:2d:42:3c:9f:67:09:58:d9: c4:dd:3b:75:c3:b8:68:d3:f6:72:ab:8d:cd:97:1d: a8:54:b2:98:91:b7:32:d9:19:34:95:97:18:13:0a: 4a:7a:38:b7:10:56:b4:c4:73:68:f5:92:df:a3:56: a5:13:a4:b7:49:7f:d9:a9:dc:53:05:d6:8d:e1:47: ab:01:f1:57:bb:96:ee:f8:c1:4c:69:50:91:aa:4d: 9f:f7:a0:d0:e9:53:ff:86:0a:96:df:44:a9:07:52: cb:89:64:0f:a1:28:66:ca:1c:76:b8:7d:13:2e:1b: 43:83:3c:ed:14:e7:a3:52:34:46:1e:94:58:db:0b: bf:bd:1f:ba:84:51:9c:ac:1b:f9:75:71:d5:e8:8a: df:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:80:8B:A7:36:EA:97:1D:67:7D:74:5C:30:D6:EC:B0:E5:AF:5C:15 X509v3 Authority Key Identifier: keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8c:fb:15:82:e3:db:49:1b:0d:0c:8f:bd:1f:78:f6:85:26: 65:17:ed:88:65:80:b1:68:e6:76:5e:c4:50:46:0a:fb:4f:21: ab:3e:2d:96:e6:19:9a:4b:ef:a3:b8:63:b8:06:78:0e:53:a4: de:47:91:65:79:1a:c7:b5:d6:ac:3e:84:3f:0e:1d:80:50:b5: 90:ff:da:1b:18:72:19:44:85:49:99:a3:f3:a7:86:2c:36:9e: 61:c2:98:d1:59:21:d3:8f:40:b8:7b:4b:42:ae:88:34:66:12: 74:cf:4b:2a:0c:19:e8:0a:e8:12:10:b6:c7:4d:5b:96:8e:b4: 2b:ed:f7:0a:cc:22:1a:cc:4f:7d:cb:4b:89:99:72:e8:1d:26: 60:5a:56:8f:3d:85:92:b2:af:2c:3e:69:c4:f1:7f:9d:98:18: 9e:02:4c:63:d5:9b:17:5b:48:31:65:36:58:4e:ed:16:49:b6: 6f:d5:29:f8:42:92:8d:53:4e:80:ee:10:58:6a:9a:86:b1:50: b4:09:92:db:fb:60:7e:57:e6:80:02:89:d6:0e:f8:e9:72:23: ac:1f:2f:c3:03:90:e1:48:5f:2b:dd:f7:59:25:5f:50:64:ac: 00:da:14:bf:30:4e:64:6d:8b:32:0f:5f:2a:97:85:af:02:a4: d2:5d:84:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAWdnP/upnnmZDkg1icPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0 OWViMmQwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg2MDgwOGJhNzM2ZWE5NzFkNjc3ZDc0NWMzMGQ2ZWNiMGU1YWY1YzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx6ES1kuGHrLFDRai8Yw6XLuFNuG IFLJM+DwqaxlPqzNoE9bY+FGtOnupWVu9zrzOFmI4hc0iYsqQIu+SgL8NgPWDj7d 97ecynXJfk2cTZ7JjKXGky7MpUeLuCWYIo9w6Azjn7xWDQuyyXSC/8OSLUI8n2cJ WNnE3Tt1w7ho0/Zyq43Nlx2oVLKYkbcy2Rk0lZcYEwpKeji3EFa0xHNo9ZLfo1al E6S3SX/ZqdxTBdaN4UerAfFXu5bu+MFMaVCRqk2f96DQ6VP/hgqW30SpB1LLiWQP oShmyhx2uH0TLhtDgzztFOejUjRGHpRY2wu/vR+6hFGcrBv5dXHV6IrfhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCAi6c26pcdZ310XDDW7LDlr1wVMB8GA1UdIwQY MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4z7FYLj 20kbDQyPvR949oUmZRftiGWAsWjmdl7EUEYK+08hqz4tluYZmkvvo7hjuAZ4DlOk 3keRZXkax7XWrD6EPw4dgFC1kP/aGxhyGUSFSZmj86eGLDaeYcKY0Vkh049AuHtL Qq6INGYSdM9LKgwZ6AroEhC2x01blo60K+33CswiGsxPfctLiZly6B0mYFpWjz2F krKvLD5pxPF/nZgYngJMY9WbF1tIMWU2WE7tFkm2b9Up+EKSjVNOgO4QWGqahrFQ tAmS2/tgflfmgAKJ1g746XIjrB8vwwOQ4UhfK933WSVfUGSsANoUvzBOZG2LMg9f KpeFrwKk0l2EHw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:16 2025 by rpki-client