This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: g1tWWAaTX/tC5Ihv8wd0ykWFkpCmC+Q8tNDq1WQfcFw= Subject key identifier: 63:B7:7D:19:5B:8F:5C:5D:87:FD:78:B0:C8:9B:AD:63:3A:D1:65:29 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019AAC152C1E1950228DDA3FE8113086301A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 0FC5 Signing time: Sat 22 Nov 2025 15:00:59 +0000 Manifest this update: Sat 22 Nov 2025 15:00:59 +0000 Manifest next update: Sun 23 Nov 2025 15:00:59 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: pjfJ/ik4616CoEtk0VBOHCPOKJlZOxg5pxtXks0+Ygk=) 2: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=) 3: n75oYsvunp6jHjfL-ssHC4CS13Q.roa (hash: 9gvfvSNJUcTeYb3d+ehtt3dMtnfULK46WMr4TAUtaE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:2c:1e:19:50:22:8d:da:3f:e8:11:30:86:30:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Nov 22 15:00:59 2025 GMT Not After : Nov 23 15:00:59 2025 GMT Subject: CN=63b77d195b8f5c5d87fd78b0c89bad633ad16529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:65:53:0e:0c:5d:a7:d4:86:dd:9e:d1:71: 14:e9:e0:b2:3b:5e:86:fc:79:de:12:e5:fd:63:ee: 20:0c:20:45:34:f5:8f:4c:3f:78:f3:c3:e2:3a:6f: 0d:55:ca:df:ea:99:a2:0b:e2:f1:00:4c:20:30:09: dd:3b:3d:4e:33:10:bf:27:b4:9c:ba:d5:e2:ce:e1: f3:13:e5:aa:f6:10:c6:87:b0:07:8d:a4:36:29:b9: 7c:7c:4f:d1:9c:ff:10:e3:45:69:e0:82:b9:cb:49: e9:31:96:95:04:fc:5a:7d:ac:69:75:a8:a7:79:ec: ac:b0:f8:2e:63:f5:ff:f3:3c:02:98:79:1b:9e:26: 4b:4e:e5:94:e9:02:5c:31:9b:d2:ba:9c:f4:d1:4e: 42:a1:0c:3d:86:51:80:07:c4:96:de:57:7c:8c:bf: 9e:cf:3e:ab:db:1a:c6:57:22:1f:de:98:6d:4e:b2: 55:38:fe:2f:b0:eb:fc:8f:f5:5c:e4:bd:b4:c2:b8: d1:20:ce:93:e3:cc:34:ff:85:ad:8c:74:d5:df:c1: c2:b5:e5:2e:0c:ca:56:62:ea:86:2a:de:d4:1b:5c: e1:a7:58:3b:d2:93:73:1c:83:68:50:39:53:c2:ac: 85:54:35:d5:b6:f2:ba:44:a4:d8:de:ee:aa:44:be: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:7D:19:5B:8F:5C:5D:87:FD:78:B0:C8:9B:AD:63:3A:D1:65:29 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9b:9f:55:9b:85:a1:d5:aa:4c:1a:e4:3e:f7:9e:6e:6e:11: ca:ca:39:bc:0a:7e:f9:e4:f1:37:46:23:4e:dc:c9:8e:4d:85: 34:74:59:88:f9:a6:25:39:b3:9f:c7:ea:68:3f:8a:0a:7d:20: 78:dd:98:ae:7c:5b:a4:f5:26:32:1e:ba:d3:88:ca:14:c5:70: c7:d3:04:d3:86:35:89:36:aa:42:2e:3c:ed:6b:44:29:9a:e0: ae:d5:45:e5:f2:6c:a6:98:c8:51:24:95:bb:eb:63:91:26:a8: a4:86:9d:b8:75:cf:8e:f1:38:14:8d:b3:be:0d:1d:14:92:0b: 78:32:a5:c9:19:6d:f7:d1:13:27:a6:68:ff:74:33:21:08:f2: cd:cd:ed:d9:23:1d:81:50:59:1c:c3:e6:ed:3f:bf:00:f4:a0: 3c:8d:ce:6c:23:ce:b1:a6:4c:51:51:5b:d4:d2:73:09:f0:f4: ab:8f:cd:a7:3e:50:23:a1:83:73:14:e0:0d:79:83:50:62:8f: 14:53:40:b7:94:00:b5:a2:1d:7b:85:d2:8c:90:eb:60:d3:ea: 2d:ad:a4:bd:05:09:b5:6b:f0:b2:45:30:da:1b:0a:b1:dd:58: 86:17:09:31:3d:d6:92:3b:6a:2e:b8:03:d7:0c:c0:59:7c:72: 17:1b:ae:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFSweGVAijdo/6BEwhjAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMTIyMTUwMDU5WhcNMjUxMTIzMTUwMDU5WjAzMTEwLwYDVQQD Eyg2M2I3N2QxOTViOGY1YzVkODdmZDc4YjBjODliYWQ2MzNhZDE2NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMtlUw4MXafUht2e0XEU6eCyO16G /HneEuX9Y+4gDCBFNPWPTD9488PiOm8NVcrf6pmiC+LxAEwgMAndOz1OMxC/J7Sc utXizuHzE+Wq9hDGh7AHjaQ2Kbl8fE/RnP8Q40Vp4IK5y0npMZaVBPxafaxpdain eeyssPguY/X/8zwCmHkbniZLTuWU6QJcMZvSupz00U5CoQw9hlGAB8SW3ld8jL+e zz6r2xrGVyIf3phtTrJVOP4vsOv8j/Vc5L20wrjRIM6T48w0/4WtjHTV38HCteUu DMpWYuqGKt7UG1zhp1g70pNzHINoUDlTwqyFVDXVtvK6RKTY3u6qRL7L+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO3fRlbj1xdh/14sMibrWM60WUpMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZufVZuF odWqTBrkPveebm4Ryso5vAp++eTxN0YjTtzJjk2FNHRZiPmmJTmzn8fqaD+KCn0g eN2YrnxbpPUmMh6604jKFMVwx9ME04Y1iTaqQi487WtEKZrgrtVF5fJsppjIUSSV u+tjkSaopIaduHXPjvE4FI2zvg0dFJILeDKlyRlt99ETJ6Zo/3QzIQjyzc3t2SMd gVBZHMPm7T+/APSgPI3ObCPOsaZMUVFb1NJzCfD0q4/Npz5QI6GDcxTgDXmDUGKP FFNAt5QAtaIde4XSjJDrYNPqLa2kvQUJtWvwskUw2hsKsd1YhhcJMT3WkjtqLrgD 1wzAWXxyFxuuqA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:33 2025 by rpki-client