This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json) Hash identifier: iVlMVX1+EobuzjRpXZhhg4v1UOUqwUjkC+7jqN2uFW0= Subject key identifier: 61:30:40:0E:D4:3D:22:66:79:97:52:79:94:70:B6:87:2F:27:9E:83 Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Certificate serial: 019AF5786E53F40F8EBF09B06501E451BADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft Manifest number: 045C Signing time: Sat 06 Dec 2025 21:01:41 +0000 Manifest this update: Sat 06 Dec 2025 21:01:41 +0000 Manifest next update: Sun 07 Dec 2025 21:01:41 +0000 Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: 2I4Tm2aXjAggcJ4FckakY/aDF88s79kkpngtRtPsXcE=) 2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:6e:53:f4:0f:8e:bf:09:b0:65:01:e4:51:ba:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Validity Not Before: Dec 6 21:01:41 2025 GMT Not After : Dec 7 21:01:41 2025 GMT Subject: CN=6130400ed43d2266799752799470b6872f279e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:bd:6e:4a:15:b9:6a:95:55:fb:47:01:e3: f6:e2:08:6f:87:f8:48:58:75:6d:6c:16:ec:b2:c0: 31:be:ec:46:22:22:05:fc:a4:b5:6e:c2:b8:3b:bd: 61:00:8f:fc:1a:63:0f:bc:68:23:10:42:0a:62:d5: c1:66:f9:51:96:63:1c:e6:d2:ca:64:74:49:01:8b: ad:f3:e7:23:e3:a6:0d:da:5f:5e:d4:26:2d:30:72: 4f:c1:4c:95:44:d1:1d:c7:69:bf:96:49:34:c5:4e: 04:e0:e1:d4:55:59:2c:00:31:29:92:f8:4c:2a:d0: cf:64:11:41:7c:de:97:cf:20:83:08:a7:37:b0:f4: 3d:95:c0:dd:f4:19:50:11:a8:6c:4e:c4:39:1d:f1: 56:a1:39:26:63:b9:8c:52:18:34:f2:a8:b0:81:66: 1c:e5:b3:f2:bf:48:4e:58:00:53:82:9c:74:57:35: 04:3b:55:13:26:b5:93:2a:98:46:de:af:ae:fa:21: 14:8c:32:70:93:65:d4:75:f5:db:f8:82:4f:69:45: cc:fa:05:17:25:3b:cd:76:d6:0b:98:be:5b:93:46: c7:74:4b:65:66:44:7b:80:c2:93:7d:07:f8:a3:a9: 71:68:51:4b:9e:64:91:48:27:4a:55:89:0a:4e:82: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:30:40:0E:D4:3D:22:66:79:97:52:79:94:70:B6:87:2F:27:9E:83 X509v3 Authority Key Identifier: keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1f:99:8a:de:1b:6c:6e:d1:7d:42:ae:c5:e0:62:4e:c6:3c: 33:7d:f3:9b:aa:61:e8:6f:0d:3d:84:72:d0:f1:73:b7:39:ae: 18:15:0a:1c:12:87:44:35:f2:ba:55:8e:d4:ca:79:96:62:c9: 28:32:1c:ef:fe:ff:26:7e:81:63:7a:47:c2:9c:81:ea:c0:4d: ba:8d:d6:9b:5c:2f:a0:be:a9:d4:ce:e4:af:14:cf:7c:87:9c: 29:e0:e0:3d:d7:c4:19:c5:f0:f7:0d:b6:9b:1f:c7:c6:58:c4: cd:f9:98:63:17:59:48:49:f5:ed:a6:e2:15:0c:a5:07:e9:51: 5a:d5:28:1c:0c:a9:c1:d1:86:a2:74:ad:01:20:45:53:f0:71: c3:a0:41:32:94:6e:9d:c4:a7:1f:13:db:00:ae:4c:b9:63:aa: 08:d7:b9:e6:ab:ca:7d:53:59:e7:34:c0:54:97:30:3a:d7:41: c5:2d:6d:dd:7b:ec:9f:d5:ee:74:59:bd:bc:d5:a5:cf:ac:fa: 65:da:63:09:0c:ec:a4:80:7c:6c:f8:6c:6b:ba:8e:5f:1e:1a: ed:7d:d5:51:9c:1c:5a:84:35:9b:de:7c:b2:bc:91:19:58:e7: 7f:a5:a0:c0:a0:43:66:d7:17:c2:88:cb:1b:c6:15:e5:c2:de: bb:e3:b9:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eG5T9A+OvwmwZQHkUbrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw Y2YwNGEwHhcNMjUxMjA2MjEwMTQxWhcNMjUxMjA3MjEwMTQxWjAzMTEwLwYDVQQD Eyg2MTMwNDAwZWQ0M2QyMjY2Nzk5NzUyNzk5NDcwYjY4NzJmMjc5ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ry9bkoVuWqVVftHAeP24ghvh/hI WHVtbBbsssAxvuxGIiIF/KS1bsK4O71hAI/8GmMPvGgjEEIKYtXBZvlRlmMc5tLK ZHRJAYut8+cj46YN2l9e1CYtMHJPwUyVRNEdx2m/lkk0xU4E4OHUVVksADEpkvhM KtDPZBFBfN6XzyCDCKc3sPQ9lcDd9BlQEahsTsQ5HfFWoTkmY7mMUhg08qiwgWYc 5bPyv0hOWABTgpx0VzUEO1UTJrWTKphG3q+u+iEUjDJwk2XUdfXb+IJPaUXM+gUX JTvNdtYLmL5bk0bHdEtlZkR7gMKTfQf4o6lxaFFLnmSRSCdKVYkKToICHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEwQA7UPSJmeZdSeZRwtocvJ56DMB8GA1UdIwQY MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt Njk1ZDgyOTk5MjZlLzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB+Zit4b bG7RfUKuxeBiTsY8M33zm6ph6G8NPYRy0PFztzmuGBUKHBKHRDXyulWO1Mp5lmLJ KDIc7/7/Jn6BY3pHwpyB6sBNuo3Wm1wvoL6p1M7krxTPfIecKeDgPdfEGcXw9w22 mx/HxljEzfmYYxdZSEn17abiFQylB+lRWtUoHAypwdGGonStASBFU/Bxw6BBMpRu ncSnHxPbAK5MuWOqCNe55qvKfVNZ5zTAVJcwOtdBxS1t3Xvsn9XudFm9vNWlz6z6 ZdpjCQzspIB8bPhsa7qOXx4a7X3VUZwcWoQ1m958sryRGVjnf6WgwKBDZtcXwojL G8YV5cLeu+O56w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:24 2025 by rpki-client