This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json) Hash identifier: OeDagcLs9aGxCiWsNShqDk4bD2EJkvD3ropxW2q+IbQ= Subject key identifier: 49:5C:4D:27:D5:F2:0D:81:A3:49:D2:EC:F1:68:03:5D:B0:F4:5B:5D Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8 Certificate serial: 019AF277205AB72F4CCCA690018C4A5C942B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: gk78L8KwREkW7UlNCoASaFKEfqO0Vu30DGCE5IJFiE0=) 2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:20:5a:b7:2f:4c:cc:a6:90:01:8c:4a:5c:94:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=495c4d27d5f20d81a349d2ecf168035db0f45b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:2a:e2:ad:3a:4c:d5:1c:bb:4b:cb:7d:d4: ad:58:5a:14:91:3a:62:f8:4d:27:15:35:87:77:89: 2d:09:4b:8f:f1:ca:7e:60:0f:ce:bd:f6:76:f1:bc: f2:22:9f:30:95:b8:b0:38:18:41:69:de:4f:87:ef: 64:6b:70:8f:60:87:12:12:a2:7e:cc:f7:0d:70:34: 7a:21:25:2f:fa:c0:0e:b9:a6:73:11:9f:d9:d5:92: c3:2e:0b:42:9d:ec:a9:83:ee:a3:7b:96:37:1c:49: 26:ae:17:dd:21:4f:3a:51:6f:48:12:89:6b:8e:01: ac:54:a5:61:81:86:60:ad:c8:a9:bc:3a:c2:e5:b5: d1:80:57:25:01:81:26:17:e6:66:ff:44:72:0e:91: 47:5b:96:46:07:d5:2e:9f:2d:e3:b1:6d:26:44:bb: 68:eb:5f:c1:5a:4c:e2:c9:0e:f6:40:a6:ef:0e:e3: d5:cb:37:f1:63:9a:13:c5:bf:41:09:ce:c6:64:14: 11:90:16:6e:c0:fd:08:93:de:4f:bd:85:c0:99:be: b8:3c:c2:50:e0:e1:c5:2e:65:52:09:4b:ba:bf:6a: a6:14:91:f7:5b:02:ef:ef:2f:c2:e9:17:db:40:c0: a5:85:20:6e:8f:3d:d2:13:39:2d:e6:f5:d7:9a:7a: fa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5C:4D:27:D5:F2:0D:81:A3:49:D2:EC:F1:68:03:5D:B0:F4:5B:5D X509v3 Authority Key Identifier: keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:61:39:e2:fd:19:53:be:d9:1c:4d:3b:65:a1:72:a7:85:de: 2e:fd:d3:3b:88:20:38:92:17:94:61:32:ce:d6:33:d7:49:84: 08:f7:40:48:b8:a8:4e:bb:f8:9d:a8:97:f6:d0:a1:92:70:5f: 8e:69:f1:4d:e3:98:95:41:f1:7c:f9:dc:00:3e:55:3c:55:07: 41:28:d3:da:47:58:a4:e0:b4:ab:4e:09:3f:91:a5:31:48:30: 56:c8:0f:63:a5:d0:cd:09:ff:ee:a1:42:0e:60:ea:5c:e3:80: 38:ad:4a:d0:ee:c7:e4:2f:f0:13:79:31:67:38:01:20:fa:e1: 7e:97:59:59:ff:fc:c2:47:a5:b0:aa:b8:08:fb:63:d8:3b:44: 6c:0f:1b:79:cb:e2:2e:76:8d:38:49:cb:94:52:99:ea:3e:fa: 92:35:b2:86:89:62:25:b8:33:0b:2d:82:cd:9f:43:33:8d:da: 44:7d:3d:e0:23:4b:1e:09:7f:32:56:e3:8c:a7:93:22:b1:01: 5a:73:cb:06:b5:45:ac:03:e6:24:17:34:95:b5:1c:35:c8:09: e8:a5:c2:ea:8e:f4:bd:80:3a:0f:96:6e:65:dd:2b:a9:ed:1d: f5:63:ea:01:18:fb:94:c3:ef:6e:98:a6:68:ce:18:8a:26:95: dc:59:9e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyBaty9MzKaQAYxKXJQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx NzQyYzgwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg0OTVjNGQyN2Q1ZjIwZDgxYTM0OWQyZWNmMTY4MDM1ZGIwZjQ1YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KAq4q06TNUcu0vLfdStWFoUkTpi +E0nFTWHd4ktCUuP8cp+YA/OvfZ28bzyIp8wlbiwOBhBad5Ph+9ka3CPYIcSEqJ+ zPcNcDR6ISUv+sAOuaZzEZ/Z1ZLDLgtCneypg+6je5Y3HEkmrhfdIU86UW9IEolr jgGsVKVhgYZgrcipvDrC5bXRgFclAYEmF+Zm/0RyDpFHW5ZGB9Uuny3jsW0mRLto 61/BWkziyQ72QKbvDuPVyzfxY5oTxb9BCc7GZBQRkBZuwP0Ik95PvYXAmb64PMJQ 4OHFLmVSCUu6v2qmFJH3WwLv7y/C6RfbQMClhSBujz3SEzkt5vXXmnr6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElcTSfV8g2Bo0nS7PFoA12w9FtdMB8GA1UdIwQY MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0 LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWE54v0Z U77ZHE07ZaFyp4XeLv3TO4ggOJIXlGEyztYz10mECPdASLioTrv4naiX9tChknBf jmnxTeOYlUHxfPncAD5VPFUHQSjT2kdYpOC0q04JP5GlMUgwVsgPY6XQzQn/7qFC DmDqXOOAOK1K0O7H5C/wE3kxZzgBIPrhfpdZWf/8wkelsKq4CPtj2DtEbA8becvi LnaNOEnLlFKZ6j76kjWyholiJbgzCy2CzZ9DM43aRH094CNLHgl/MlbjjKeTIrEB WnPLBrVFrAPmJBc0lbUcNcgJ6KXC6o70vYA6D5ZuZd0rqe0d9WPqARj7lMPvbpim aM4YiiaV3FmexA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:49 2025 by rpki-client