This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json) Hash identifier: OXHgu7EiCDMQSdXnCR9RcizOlNOl9HUbjbOf5q5OoF8= Subject key identifier: 98:15:70:8F:19:7F:05:96:E6:2B:D5:A4:72:7A:1C:A2:43:26:27:72 Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba Certificate serial: 019AF208DAE10D9E692AFC4ACCE42D45028A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft Manifest number: 0891 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: OCjgEiYXDguku+p4DqtgN5I9NhtquuB65/wBTq5WmLE=) 2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:da:e1:0d:9e:69:2a:fc:4a:cc:e4:2d:45:02:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=9815708f197f0596e62bd5a4727a1ca243262772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:84:c3:b0:6f:84:35:09:84:47:0e:6c:36: 65:cc:b7:67:ec:aa:c2:46:fa:f5:fc:ce:58:0f:7f: 28:02:f6:6e:c3:82:8c:a7:c1:22:ac:2d:b8:8a:ce: 32:ee:08:77:f2:0e:1e:94:ac:47:4f:f9:84:6f:13: c7:07:69:76:e2:8c:42:8e:73:e5:63:53:49:d2:13: 1a:98:9d:02:e9:8f:0e:21:0a:c3:95:12:0c:0d:af: a2:bc:c9:9b:56:da:96:53:fe:9d:0f:2f:49:bc:48: 61:1a:cc:10:e1:05:34:ad:61:5b:62:9b:57:30:23: 25:02:c0:56:66:6d:b2:1b:ab:7e:19:ab:dd:4f:fb: b5:69:ec:50:68:82:b9:82:1c:04:6a:4f:a4:ea:98: 5d:3a:52:3e:62:e3:f0:b4:60:18:20:ae:69:84:61: 20:c4:87:31:af:6b:d0:c9:3c:f5:f2:c9:46:66:4b: 10:ee:57:4e:f1:37:3e:b3:d9:0b:8c:b7:32:49:20: db:0a:a8:85:8b:a8:2d:f6:09:fb:b5:99:6d:2c:14: 7a:7d:ca:48:c4:66:57:d6:1e:ab:a4:60:f3:9c:27: 3b:f7:c7:89:f2:bf:bb:1a:0a:f5:b1:38:5b:a2:e7: f0:9e:a5:48:e7:0b:90:1e:d1:ed:41:68:7d:de:ed: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:15:70:8F:19:7F:05:96:E6:2B:D5:A4:72:7A:1C:A2:43:26:27:72 X509v3 Authority Key Identifier: keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:db:d7:ed:08:60:83:dd:3e:d3:80:06:bd:84:11:d0:12:cf: 1f:7e:18:30:7a:29:ca:65:90:f6:c3:dc:19:0d:c5:ff:bd:08: 3a:3f:94:78:d7:9e:60:b5:d5:fe:71:b8:cf:d8:7c:57:38:c6: 84:5f:2c:39:45:e2:7b:f5:c0:78:b5:cc:6e:4b:e2:e7:ee:02: 25:2d:21:17:a1:78:91:e4:96:48:19:04:02:ba:e0:ed:9e:c9: a0:84:11:aa:f1:48:2d:23:44:84:dc:5e:50:26:56:87:9b:28: 38:14:78:27:a4:f5:47:0d:a9:e2:f9:21:ea:9a:d5:bf:8f:49: 44:42:5e:a1:a3:04:f7:96:9e:32:38:3f:f9:92:8c:0f:00:d8: f5:99:26:a8:e6:93:57:9b:dc:07:f7:0f:f4:78:74:fc:cc:25: dc:72:20:2c:f8:1f:16:e3:a4:f9:eb:9d:9b:05:95:8c:5f:ac: af:c6:8d:f6:47:24:cc:c3:63:68:51:d9:78:80:2d:5c:81:33: b5:b7:66:ca:00:35:8a:61:89:38:c7:f6:aa:eb:34:27:78:c7: 4b:47:2b:9b:e5:51:36:f7:0e:1b:df:da:79:2c:34:0b:5f:cf: f3:e1:13:c3:64:b2:e0:fd:b4:39:74:d6:3a:7e:de:51:5b:ff: 52:c5:bb:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNrhDZ5pKvxKzOQtRQKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTJlMTA1ZjBlODI2ZTcxNWY3MmNjNWNiMDMxMmEyNTM0 NDI0YmEwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg5ODE1NzA4ZjE5N2YwNTk2ZTYyYmQ1YTQ3MjdhMWNhMjQzMjYyNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+Ew7BvhDUJhEcObDZlzLdn7KrC Rvr1/M5YD38oAvZuw4KMp8EirC24is4y7gh38g4elKxHT/mEbxPHB2l24oxCjnPl Y1NJ0hMamJ0C6Y8OIQrDlRIMDa+ivMmbVtqWU/6dDy9JvEhhGswQ4QU0rWFbYptX MCMlAsBWZm2yG6t+GavdT/u1aexQaIK5ghwEak+k6phdOlI+YuPwtGAYIK5phGEg xIcxr2vQyTz18slGZksQ7ldO8Tc+s9kLjLcySSDbCqiFi6gt9gn7tZltLBR6fcpI xGZX1h6rpGDznCc798eJ8r+7Ggr1sThboufwnqVI5wuQHtHtQWh93u0uWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgVcI8ZfwWW5ivVpHJ6HKJDJidyMB8GA1UdIwQY MBaAFG5S4QXw6CbnFfcsxcsDEqJTRCS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjIt NWRlZTFlYTI5NzNiLzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjItNWRlZTFlYTI5NzNi LzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztvX7Qhg g90+04AGvYQR0BLPH34YMHopymWQ9sPcGQ3F/70IOj+UeNeeYLXV/nG4z9h8VzjG hF8sOUXie/XAeLXMbkvi5+4CJS0hF6F4keSWSBkEArrg7Z7JoIQRqvFILSNEhNxe UCZWh5soOBR4J6T1Rw2p4vkh6prVv49JREJeoaME95aeMjg/+ZKMDwDY9ZkmqOaT V5vcB/cP9Hh0/Mwl3HIgLPgfFuOk+eudmwWVjF+sr8aN9kckzMNjaFHZeIAtXIEz tbdmygA1imGJOMf2qus0J3jHS0crm+VRNvcOG9/aeSw0C1/P8+ETw2Sy4P20OXTW On7eUVv/UsW7cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:55 2025 by rpki-client