This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json) Hash identifier: rsItooVH41hW1kua9DFE2GXno1If12Q5yHzSK+gaSp0= Subject key identifier: 95:CB:79:25:CC:69:F4:96:42:AD:A3:38:6F:D7:4A:1D:95:BE:C7:9C Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba Certificate serial: 019B2BF884707EE59D1D894E53A496967796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft Manifest number: 08AF Signing time: Wed 17 Dec 2025 11:01:05 +0000 Manifest this update: Wed 17 Dec 2025 11:01:05 +0000 Manifest next update: Thu 18 Dec 2025 11:01:05 +0000 Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: lx4hgmJ2kR1FuAffB/2CLu76A4DVhL8EeNoUl2PO4X8=) 2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:84:70:7e:e5:9d:1d:89:4e:53:a4:96:96:77:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba Validity Not Before: Dec 17 11:01:05 2025 GMT Not After : Dec 18 11:01:05 2025 GMT Subject: CN=95cb7925cc69f49642ada3386fd74a1d95bec79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:d2:59:b8:e4:1a:7e:e0:39:de:9b:d3:ec:2f: e2:b9:3f:78:16:b0:f9:cd:bf:65:df:f4:c1:44:c9: 3e:d6:51:86:2b:fc:ad:09:87:c0:3f:7f:e6:63:0e: 70:fc:af:30:fc:a0:a4:3c:93:ca:c1:7a:e4:9a:17: cc:4c:c9:1d:4f:15:87:c8:fc:02:4a:be:c9:d1:82: ab:60:db:6b:86:2d:86:41:86:d8:9a:41:00:5d:b2: d2:ea:e2:37:71:66:e0:2f:c7:14:7d:71:c0:94:45: fe:e1:53:5f:06:f5:fc:9c:ef:71:6d:26:75:12:d8: 0a:ae:b4:66:23:0a:ab:c3:b2:00:d4:e2:0e:88:a7: ae:02:3e:ce:72:2c:cf:76:c4:55:8d:a4:08:0e:e8: 45:89:99:47:61:b1:e1:a8:c7:e6:a0:f8:47:b7:64: e8:b2:06:e5:c4:20:4a:86:09:9a:20:95:62:b1:c1: 13:d7:00:74:ad:25:eb:39:09:a4:b1:3f:93:e5:4a: f5:b7:37:dc:14:72:f6:7d:eb:94:ea:c2:21:eb:9e: 1e:4d:83:ce:0b:a4:fd:be:fd:46:6d:1a:e6:4b:a8: 2b:74:ea:9f:87:1c:9c:8f:58:6d:99:cd:8c:a5:32: bf:6b:d8:6d:3f:fa:62:88:69:e2:75:9a:d6:30:3e: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:79:25:CC:69:F4:96:42:AD:A3:38:6F:D7:4A:1D:95:BE:C7:9C X509v3 Authority Key Identifier: keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:4d:9d:8a:87:5a:60:fa:11:76:76:07:1d:93:51:94:b9:af: dc:0c:d6:37:dc:e1:d2:b7:db:3a:a4:10:c8:ca:ff:35:e0:5d: e0:18:0c:ef:5a:22:99:b5:38:a5:89:fa:83:c9:22:03:7f:bc: 73:dd:20:a9:ee:35:b1:41:61:26:46:19:16:5a:22:63:13:05: f9:bb:79:9d:eb:8e:98:81:14:66:33:e4:fa:98:6c:be:73:03: 70:ef:bd:57:f2:f0:64:61:66:d3:2b:04:a6:29:e6:a0:c5:b8: df:72:32:e8:2d:f3:f9:49:87:01:3f:1f:bd:cb:c7:10:62:7c: 4b:39:a3:1b:cc:8e:a9:99:9e:df:09:0b:36:60:92:b0:e6:55: 65:62:4e:9e:22:01:24:28:f2:cd:c3:cc:1c:9f:d1:06:ce:c8: 76:27:78:ea:dd:8e:f3:f3:87:7e:6a:bd:3d:e8:d4:ad:21:cb: cd:d2:c5:d7:fe:97:52:93:a1:47:cd:6e:18:35:08:08:4f:e2: 23:b9:f5:5c:8b:3c:d9:55:97:e6:e3:ed:f8:9a:f2:8f:c2:46: 22:1a:ba:df:f4:9c:1e:c5:8a:13:74:58:7b:9c:43:9d:75:50: 59:20:a8:b7:bf:e4:1f:19:fe:53:0d:96:d6:26:5a:d2:64:1f: c5:08:a4:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IRwfuWdHYlOU6SWlneWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTJlMTA1ZjBlODI2ZTcxNWY3MmNjNWNiMDMxMmEyNTM0 NDI0YmEwHhcNMjUxMjE3MTEwMTA1WhcNMjUxMjE4MTEwMTA1WjAzMTEwLwYDVQQD Eyg5NWNiNzkyNWNjNjlmNDk2NDJhZGEzMzg2ZmQ3NGExZDk1YmVjNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/tJZuOQafuA53pvT7C/iuT94FrD5 zb9l3/TBRMk+1lGGK/ytCYfAP3/mYw5w/K8w/KCkPJPKwXrkmhfMTMkdTxWHyPwC Sr7J0YKrYNtrhi2GQYbYmkEAXbLS6uI3cWbgL8cUfXHAlEX+4VNfBvX8nO9xbSZ1 EtgKrrRmIwqrw7IA1OIOiKeuAj7OcizPdsRVjaQIDuhFiZlHYbHhqMfmoPhHt2To sgblxCBKhgmaIJViscET1wB0rSXrOQmksT+T5Ur1tzfcFHL2feuU6sIh654eTYPO C6T9vv1GbRrmS6grdOqfhxycj1htmc2MpTK/a9htP/piiGnidZrWMD4jsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXLeSXMafSWQq2jOG/XSh2VvsecMB8GA1UdIwQY MBaAFG5S4QXw6CbnFfcsxcsDEqJTRCS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjIt NWRlZTFlYTI5NzNiLzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjItNWRlZTFlYTI5NzNi LzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1E2dioda YPoRdnYHHZNRlLmv3AzWN9zh0rfbOqQQyMr/NeBd4BgM71oimbU4pYn6g8kiA3+8 c90gqe41sUFhJkYZFloiYxMF+bt5neuOmIEUZjPk+phsvnMDcO+9V/LwZGFm0ysE pinmoMW433Iy6C3z+UmHAT8fvcvHEGJ8SzmjG8yOqZme3wkLNmCSsOZVZWJOniIB JCjyzcPMHJ/RBs7Idid46t2O8/OHfmq9PejUrSHLzdLF1/6XUpOhR81uGDUICE/i I7n1XIs82VWX5uPt+Jryj8JGIhq63/ScHsWKE3RYe5xDnXVQWSCot7/kHxn+Uw2W 1iZa0mQfxQik5A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:23:11 2025 by rpki-client