This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json) Hash identifier: qGQMiTSh16olCjfg+8Brt68HqqwIJYjk1qf7UEOhoEE= Subject key identifier: 34:E1:85:8D:34:CC:D8:54:95:1B:A6:E5:A3:6C:C4:A3:5C:83:9F:45 Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Certificate serial: 019B3569894B335944A59371594CCC714AD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft Manifest number: 1763 Signing time: Fri 19 Dec 2025 07:01:07 +0000 Manifest this update: Fri 19 Dec 2025 07:01:07 +0000 Manifest next update: Sat 20 Dec 2025 07:01:07 +0000 Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: LnAXBErz6iEqLuHCwe6QP/25I/JUGMxOB9ND2favlBU=) 2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:89:4b:33:59:44:a5:93:71:59:4c:cc:71:4a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Validity Not Before: Dec 19 07:01:07 2025 GMT Not After : Dec 20 07:01:07 2025 GMT Subject: CN=34e1858d34ccd854951ba6e5a36cc4a35c839f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:d5:7d:b6:2a:9e:3e:91:99:95:bb:14:cf: 74:00:19:26:0a:77:bb:06:b8:f9:7d:3b:ee:5c:43: 97:3a:e6:2b:e7:f9:0d:b9:fe:0f:56:8e:d4:2d:f7: 0d:8f:df:32:4e:d6:68:5e:72:91:c6:4f:17:4a:67: f3:e7:54:ba:31:57:89:4b:8a:d6:76:5a:02:37:b6: df:71:c7:57:bb:23:86:15:2a:bd:06:ba:44:f7:b1: ef:f9:8e:c9:43:a8:7d:17:37:94:38:53:a6:a4:aa: 32:2b:c2:7e:f1:ca:b4:ef:f1:6e:cd:ab:63:88:70: ab:90:47:aa:7a:38:84:25:4e:74:2f:98:74:4c:2a: 0b:bb:9a:18:1c:c2:6e:76:3e:78:ec:4b:87:66:09: d4:66:6e:4b:22:54:d0:31:47:50:ba:db:31:88:e2: ac:f4:15:fe:e4:ae:94:50:35:b6:9a:d9:fc:24:14: 5e:01:4b:36:6b:a9:e2:e9:bc:46:f6:e2:dc:52:8e: fa:aa:91:33:f8:46:6c:be:9d:1d:17:92:1f:e9:10: fe:c0:6e:88:90:bf:c5:5b:d8:91:65:e2:6a:0b:f2: f5:82:55:86:b0:00:71:44:6b:3c:f2:e2:e1:43:3b: 55:33:fe:90:3f:a4:b2:31:80:05:82:c6:8e:7b:40: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E1:85:8D:34:CC:D8:54:95:1B:A6:E5:A3:6C:C4:A3:5C:83:9F:45 X509v3 Authority Key Identifier: keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:92:b7:ab:3b:d3:6c:13:a2:2a:8c:fd:16:7f:10:a0:1e:5c: 94:0d:86:07:b8:b4:95:67:3e:32:ae:51:20:19:af:98:78:02: b8:63:88:fd:9f:00:c1:5f:11:73:e3:52:2a:29:6c:cf:8d:0e: 01:c9:7e:60:db:23:36:3e:f2:d1:98:c8:cb:46:1e:ec:db:d9: f1:d6:ed:27:15:8b:f7:0c:6c:1e:fe:c7:c3:db:f1:89:a7:f2: 70:12:83:28:60:32:c8:bd:2f:c3:3c:db:c7:3f:e5:55:f5:3c: f2:e0:2c:ec:7b:d8:1f:b2:3e:a2:26:cd:a7:98:b1:0c:65:41: 51:49:ce:51:b0:89:af:5e:81:c9:91:4b:31:77:a1:f8:16:2e: 7d:1b:3d:c1:86:28:f8:c9:cb:ce:dc:b3:af:9c:c8:fe:01:f3: 10:cb:49:d7:81:88:47:73:92:f5:42:8b:eb:47:40:9a:4e:92: 47:c4:b0:89:85:56:38:7d:54:95:39:da:52:ae:6c:09:1e:06: 33:b5:8b:c6:9e:ac:9e:f2:62:38:fe:71:d0:ae:0c:e6:1d:4e: d9:6b:cc:1f:d4:2d:21:dd:39:9b:99:40:36:58:74:5d:82:0b: 48:31:b1:b1:ab:7b:74:d4:c1:80:cc:41:0e:eb:c5:f6:57:07: 02:2c:bc:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYlLM1lEpZNxWUzMcUrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk NGExMmUwHhcNMjUxMjE5MDcwMTA3WhcNMjUxMjIwMDcwMTA3WjAzMTEwLwYDVQQD EygzNGUxODU4ZDM0Y2NkODU0OTUxYmE2ZTVhMzZjYzRhMzVjODM5ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBbVfbYqnj6RmZW7FM90ABkmCne7 Brj5fTvuXEOXOuYr5/kNuf4PVo7ULfcNj98yTtZoXnKRxk8XSmfz51S6MVeJS4rW dloCN7bfccdXuyOGFSq9BrpE97Hv+Y7JQ6h9FzeUOFOmpKoyK8J+8cq07/Fuzatj iHCrkEeqejiEJU50L5h0TCoLu5oYHMJudj547EuHZgnUZm5LIlTQMUdQutsxiOKs 9BX+5K6UUDW2mtn8JBReAUs2a6ni6bxG9uLcUo76qpEz+EZsvp0dF5If6RD+wG6I kL/FW9iRZeJqC/L1glWGsABxRGs88uLhQztVM/6QP6SyMYAFgsaOe0DQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDThhY00zNhUlRum5aNsxKNcg59FMB8GA1UdIwQY MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3 LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZK3qzvT bBOiKoz9Fn8QoB5clA2GB7i0lWc+Mq5RIBmvmHgCuGOI/Z8AwV8Rc+NSKilsz40O Acl+YNsjNj7y0ZjIy0Ye7NvZ8dbtJxWL9wxsHv7Hw9vxiafycBKDKGAyyL0vwzzb xz/lVfU88uAs7HvYH7I+oibNp5ixDGVBUUnOUbCJr16ByZFLMXeh+BYufRs9wYYo +MnLztyzr5zI/gHzEMtJ14GIR3OS9UKL60dAmk6SR8SwiYVWOH1UlTnaUq5sCR4G M7WLxp6snvJiOP5x0K4M5h1O2WvMH9QtId05m5lANlh0XYILSDGxsat7dNTBgMxB DuvF9lcHAiy8Qw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:18 2025 by rpki-client