This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json) Hash identifier: 834+k2+haCAYmkMivqAllB3sjDGzlaKkkvxXSNr6Jc0= Subject key identifier: A5:58:54:40:80:A5:F4:F8:31:CB:92:19:0A:59:3B:87:3E:99:51:1C Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Certificate serial: 019AF163F539B671379D3C0FF59B039A1674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: MKvfH9q5MUUFS1osWj9cOc+prs5/R3H6EjmXMT8h+lY=) 2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f5:39:b6:71:37:9d:3c:0f:f5:9b:03:9a:16:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=a558544080a5f4f831cb92190a593b873e99511c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:b1:77:59:6a:7b:f6:f0:e2:7f:30:d6:da: 71:8d:e7:ca:4d:68:c5:ad:4e:24:3c:dd:31:a3:35: 54:64:23:3a:ef:17:38:9c:53:11:99:8f:19:49:2f: 32:28:1e:92:e7:94:b7:6b:ba:6a:b6:12:09:bd:b9: c0:7b:93:31:ed:f4:c7:6e:6f:18:aa:2d:95:cc:a1: 45:bd:52:e3:f8:5c:20:77:50:0a:7c:de:ed:00:a3: 0d:17:fa:e3:5b:2c:25:5e:49:12:d8:56:cb:fb:8e: 56:45:9f:98:54:71:1b:c5:33:c3:c0:73:c8:44:e4: 67:92:67:a7:6d:96:b8:30:3a:8c:01:f4:75:47:4c: 71:4e:19:39:36:4d:36:a5:d5:f5:d6:d9:da:07:ce: 7d:08:97:a1:3c:b0:cc:c9:ca:ce:9d:af:a2:9a:9f: 8f:1b:71:60:53:55:f1:4b:c3:c5:a5:b2:d0:cb:63: af:45:e0:5c:b8:13:24:48:95:1a:ac:d4:93:89:bd: b3:6d:ba:d0:4c:3e:36:b0:ab:ac:47:39:e4:2f:0f: ec:0b:ef:31:40:c8:ad:d6:23:aa:f7:ff:9f:04:99: 54:24:bb:9d:95:f5:6e:63:b7:b5:61:7b:c4:d1:53: a8:e3:46:f4:8f:ce:52:74:75:31:1b:c4:c7:10:2a: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:58:54:40:80:A5:F4:F8:31:CB:92:19:0A:59:3B:87:3E:99:51:1C X509v3 Authority Key Identifier: keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5c:29:3b:14:5c:61:4e:7d:80:b0:1f:3e:c2:15:06:35:43: 72:cb:aa:40:d5:bd:cd:a3:a9:44:c1:82:97:ad:51:82:9f:ba: 87:08:6b:09:dc:f4:93:61:1b:2f:19:53:38:72:a0:2a:7c:9d: c4:83:c8:27:40:55:8f:50:40:7c:59:5e:c1:e3:4b:ad:92:24: 94:93:07:76:a8:ab:0e:17:c8:4e:7c:20:de:ec:c4:90:ac:6e: e2:e1:01:1b:fa:c7:7d:d3:a0:2f:e0:03:d0:6a:c7:91:13:44: 4c:92:96:69:8a:86:95:0e:fc:c4:13:e1:e5:78:37:8b:f9:0a: 49:2e:6f:cb:d9:8b:10:db:9e:92:85:0a:85:76:bf:3e:4b:14: db:78:e9:c1:0e:c8:d2:c6:9b:b5:c5:44:14:91:b6:be:82:5b: a2:28:47:a3:a4:c9:95:f3:ad:03:0f:20:d0:a7:ea:a2:f9:0d: 04:c1:4d:98:af:22:7a:95:2f:83:bf:84:ed:02:8a:d8:fa:21: 80:8c:b7:d9:61:97:19:7a:7d:80:8f:4a:ce:da:35:a7:c1:0a: eb:f3:ae:10:7f:3e:52:85:6a:a3:73:52:e0:2d:17:64:e6:4f: a5:86:c5:93:2f:64:3d:4d:c4:b2:4b:55:d1:ae:77:ff:3c:17: 1b:cb:8e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/U5tnE3nTwP9ZsDmhZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi MThmOTYwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhhNTU4NTQ0MDgwYTVmNGY4MzFjYjkyMTkwYTU5M2I4NzNlOTk1MTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRexd1lqe/bw4n8w1tpxjefKTWjF rU4kPN0xozVUZCM67xc4nFMRmY8ZSS8yKB6S55S3a7pqthIJvbnAe5Mx7fTHbm8Y qi2VzKFFvVLj+Fwgd1AKfN7tAKMNF/rjWywlXkkS2FbL+45WRZ+YVHEbxTPDwHPI RORnkmenbZa4MDqMAfR1R0xxThk5Nk02pdX11tnaB859CJehPLDMycrOna+imp+P G3FgU1XxS8PFpbLQy2OvReBcuBMkSJUarNSTib2zbbrQTD42sKusRznkLw/sC+8x QMit1iOq9/+fBJlUJLudlfVuY7e1YXvE0VOo40b0j85SdHUxG8THECrKYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVYVECApfT4McuSGQpZO4c+mVEcMB8GA1UdIwQY MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3 LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1wpOxRc YU59gLAfPsIVBjVDcsuqQNW9zaOpRMGCl61Rgp+6hwhrCdz0k2EbLxlTOHKgKnyd xIPIJ0BVj1BAfFleweNLrZIklJMHdqirDhfITnwg3uzEkKxu4uEBG/rHfdOgL+AD 0GrHkRNETJKWaYqGlQ78xBPh5Xg3i/kKSS5vy9mLENuekoUKhXa/PksU23jpwQ7I 0sabtcVEFJG2voJboihHo6TJlfOtAw8g0KfqovkNBMFNmK8iepUvg7+E7QKK2Poh gIy32WGXGXp9gI9Kzto1p8EK6/OuEH8+UoVqo3NS4C0XZOZPpYbFky9kPU3EsktV 0a53/zwXG8uOIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:39 2025 by rpki-client