This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json) Hash identifier: AzPMG1JgWTLnt/7ryuNdnboupXnbrGxM1blm3jzspZw= Subject key identifier: 81:46:6E:6C:8E:3C:92:F0:5B:6F:60:AF:5A:BF:62:D5:47:6F:7A:71 Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Certificate serial: 019B2BC1A2128D75BE0A283647DC08D57BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft Manifest number: 175E Signing time: Wed 17 Dec 2025 10:01:08 +0000 Manifest this update: Wed 17 Dec 2025 10:01:08 +0000 Manifest next update: Thu 18 Dec 2025 10:01:08 +0000 Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: uMk5jyDUhCh65umnA0pmW7EMw8/VX0iKiDG4DC4WTak=) 2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:a2:12:8d:75:be:0a:28:36:47:dc:08:d5:7b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Validity Not Before: Dec 17 10:01:08 2025 GMT Not After : Dec 18 10:01:08 2025 GMT Subject: CN=81466e6c8e3c92f05b6f60af5abf62d5476f7a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:9d:13:52:39:6e:3e:50:62:37:cd:a5:18: 98:e5:05:0a:8c:83:ae:83:00:d8:38:29:3d:d3:5d: a9:90:1e:f3:97:73:25:ba:58:7c:cd:98:a6:5a:31: ca:80:3c:ed:85:47:9b:4c:3c:32:04:94:67:66:ff: b1:d9:66:f8:8c:1d:4b:ee:3e:1f:92:86:2b:bf:65: 18:77:0b:3f:81:b4:e5:71:62:37:ec:21:dc:65:d8: fa:1c:5c:eb:57:9d:b3:94:18:b9:69:ee:29:aa:a7: 72:6d:1a:25:89:98:18:55:24:9e:4a:37:04:0b:f8: 24:91:22:14:9e:3c:16:26:57:3b:6b:36:e9:98:d1: 5d:c6:7b:8e:a4:d2:0a:24:8f:ce:0d:ec:d5:eb:b3: cf:fa:ef:51:c3:cd:47:b1:0a:82:5b:1b:c0:6d:f5: 8d:0f:27:98:69:2e:a2:00:a5:d5:3b:87:39:ce:cd: 26:be:fd:46:de:57:62:04:8a:2e:20:c3:d7:4c:36: 3e:39:3c:05:78:ba:66:59:c7:74:8c:77:ac:b6:89: fa:71:fb:52:77:57:9e:1e:c7:21:d2:43:c3:c7:87: fc:55:7b:13:10:d1:2e:dc:d0:16:88:27:e3:7d:82: 1e:4d:86:24:c3:78:c9:0a:f4:f9:da:a5:04:9c:33: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:46:6E:6C:8E:3C:92:F0:5B:6F:60:AF:5A:BF:62:D5:47:6F:7A:71 X509v3 Authority Key Identifier: keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:47:f2:ef:0f:b9:27:10:05:8a:d5:41:6b:1d:92:5b:c4:ec: 62:12:d4:ea:b3:b7:ce:49:1f:8a:f6:c9:1f:6e:0a:d7:dc:25: 56:c0:d7:a5:65:3d:1f:b3:e9:0e:b7:a0:a7:33:ea:c7:4d:b0: 73:a3:3d:42:d3:7a:10:9b:09:73:83:b0:9c:e3:dc:80:51:08: 58:f5:ec:cc:cb:39:ce:ce:19:16:38:be:ec:d6:a4:c7:3e:fa: a9:fa:65:33:6c:27:da:a8:07:2c:f5:a7:de:31:c6:0f:61:ed: 53:bd:b4:19:79:96:cd:3a:dc:dc:dd:12:5a:29:07:99:80:4d: 7f:e6:f6:82:37:aa:1a:9f:6e:a5:a5:2f:59:02:e3:56:b8:e8: 27:30:e3:eb:73:a9:18:c4:aa:77:da:80:03:09:f1:a4:43:52: 17:a8:70:a9:da:dd:ea:99:d7:cf:e3:bb:39:c3:c6:d5:c2:5e: 02:0d:01:18:34:a3:9f:0e:14:71:a6:f8:98:18:22:27:2f:fc: 33:75:45:de:2d:c7:ff:32:c6:f6:02:0b:2c:f3:7b:af:a5:ad: b7:3e:30:7e:5c:20:5a:2a:62:a9:e1:33:e2:bd:3e:f1:76:c3: d1:e0:76:6f:5a:d2:22:c9:f3:91:c5:e7:05:97:cf:ca:d0:0b: b9:91:78:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwaISjXW+Cig2R9wI1Xu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk NGExMmUwHhcNMjUxMjE3MTAwMTA4WhcNMjUxMjE4MTAwMTA4WjAzMTEwLwYDVQQD Eyg4MTQ2NmU2YzhlM2M5MmYwNWI2ZjYwYWY1YWJmNjJkNTQ3NmY3YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ6dE1I5bj5QYjfNpRiY5QUKjIOu gwDYOCk9012pkB7zl3Mlulh8zZimWjHKgDzthUebTDwyBJRnZv+x2Wb4jB1L7j4f koYrv2UYdws/gbTlcWI37CHcZdj6HFzrV52zlBi5ae4pqqdybRoliZgYVSSeSjcE C/gkkSIUnjwWJlc7azbpmNFdxnuOpNIKJI/ODezV67PP+u9Rw81HsQqCWxvAbfWN DyeYaS6iAKXVO4c5zs0mvv1G3ldiBIouIMPXTDY+OTwFeLpmWcd0jHeston6cftS d1eeHsch0kPDx4f8VXsTENEu3NAWiCfjfYIeTYYkw3jJCvT52qUEnDPKHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFGbmyOPJLwW29gr1q/YtVHb3pxMB8GA1UdIwQY MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3 LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkfy7w+5 JxAFitVBax2SW8TsYhLU6rO3zkkfivbJH24K19wlVsDXpWU9H7PpDregpzPqx02w c6M9QtN6EJsJc4OwnOPcgFEIWPXszMs5zs4ZFji+7Nakxz76qfplM2wn2qgHLPWn 3jHGD2HtU720GXmWzTrc3N0SWikHmYBNf+b2gjeqGp9upaUvWQLjVrjoJzDj63Op GMSqd9qAAwnxpENSF6hwqdrd6pnXz+O7OcPG1cJeAg0BGDSjnw4Ucab4mBgiJy/8 M3VF3i3H/zLG9gILLPN7r6Wttz4wflwgWipiqeEz4r0+8XbD0eB2b1rSIsnzkcXn BZfPytALuZF4IQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:05:43 2025 by rpki-client