This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: Ox+U0dKTsOuOR30rlEShYYkShbC+dkcsmcLNvTI4hEc= Subject key identifier: 37:BB:8E:82:72:51:A0:F0:E2:1D:4B:63:0A:17:A9:E1:97:C2:11:C1 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019B18DFAF81B65F89C90E9372EB0A625D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 0FFE Signing time: Sat 13 Dec 2025 18:01:11 +0000 Manifest this update: Sat 13 Dec 2025 18:01:11 +0000 Manifest next update: Sun 14 Dec 2025 18:01:11 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: fR/Eisao3lz0UIvuzcr3gz8mVv+PeBJ0m+8hsHqQ2CI=) 2: 7tcWpWZUfFjRAri1J6RRc98qQHs.roa (hash: UMCFQzzz1Y9tdAH7wk0WZ6bxV8IcxDs3YEnSy4ipSic=) 3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:af:81:b6:5f:89:c9:0e:93:72:eb:0a:62:5d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Dec 13 18:01:11 2025 GMT Not After : Dec 14 18:01:11 2025 GMT Subject: CN=37bb8e827251a0f0e21d4b630a17a9e197c211c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:98:01:5e:f0:e5:90:87:d1:6f:04:67:44: 07:1a:ac:8a:f3:06:0f:8c:15:d8:a4:0f:99:22:9f: 7a:c3:93:bf:ff:49:3e:5e:7a:61:57:61:be:7c:70: b1:96:10:2a:1a:0a:b3:76:36:2a:50:af:ef:1f:04: af:a3:65:22:34:a5:f9:81:de:ff:2f:be:79:b4:d3: 83:27:ec:e8:59:f3:04:7c:01:98:1d:c7:6d:ce:4a: ea:05:db:64:9c:42:42:39:c0:29:ee:7c:8a:a9:ae: a7:bd:6a:63:1d:0c:74:91:ee:5e:c3:47:fa:3a:65: 93:7b:30:4d:1c:e9:61:b4:54:62:14:ac:8d:ee:33: cd:06:f8:d5:1c:e0:e6:2e:8b:68:02:eb:60:1b:24: 5a:aa:3a:8b:8c:d9:a2:5f:34:fa:68:f3:6a:93:ba: d9:c4:45:93:62:5d:be:3e:56:be:c1:f1:72:d7:af: 26:a9:e5:67:f5:e9:44:09:b2:81:8c:30:75:12:2e: 69:ef:50:59:a8:6d:47:da:58:67:d9:3d:6a:c1:62: 65:68:98:40:f5:9b:4a:80:14:b5:db:5e:2a:22:ab: 20:31:32:af:d3:44:9a:11:3d:44:68:c2:ee:9b:23: 8a:90:f2:a5:65:fb:c0:f2:50:ed:ed:b5:23:87:d8: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BB:8E:82:72:51:A0:F0:E2:1D:4B:63:0A:17:A9:E1:97:C2:11:C1 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:18:ce:d3:72:e2:9f:f1:3d:64:d1:a8:e8:39:87:30:54:9b: a4:dc:a1:b0:2b:84:5d:57:18:db:a6:ef:13:5c:bb:ad:33:59: 8c:1a:00:79:54:4b:df:7d:1b:4d:d3:9d:d5:f3:af:ca:14:19: 84:a5:95:b3:90:52:c1:50:87:1f:b0:bb:bc:00:89:3d:f9:fd: f7:d6:87:7b:61:e8:f2:15:08:f9:ff:9e:56:42:51:f4:93:23: 87:2d:9d:36:74:dc:94:80:d5:96:5d:3c:ad:c3:6e:e4:64:d3: c2:55:3f:76:ec:be:f2:a3:9c:2e:a2:12:cb:d2:05:cc:ad:2e: fc:2c:9d:50:d7:fc:33:0b:60:78:b5:9d:01:82:f3:b5:ee:87: dc:cf:d1:b9:56:ce:02:d8:57:c1:75:ae:d3:36:1e:a8:a9:2b: 8f:86:09:bd:3a:c5:3d:c2:d9:34:89:ee:16:bd:c2:26:e8:13: c0:7c:8c:62:f9:57:5d:0b:4c:d2:19:74:b5:0c:ad:c6:9f:a7: 19:06:98:72:b8:07:f9:18:5e:7f:5f:68:d2:9c:4d:27:e8:a7: 2a:b2:5f:10:82:7b:61:4a:45:18:93:f6:0b:c9:4a:5d:d5:71: 8c:04:60:55:f1:a1:3e:15:9f:65:6a:bf:53:d4:08:ae:29:38: 32:eb:9f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY36+Btl+JyQ6TcusKYl1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMjEzMTgwMTExWhcNMjUxMjE0MTgwMTExWjAzMTEwLwYDVQQD EygzN2JiOGU4MjcyNTFhMGYwZTIxZDRiNjMwYTE3YTllMTk3YzIxMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxqYAV7w5ZCH0W8EZ0QHGqyK8wYP jBXYpA+ZIp96w5O//0k+XnphV2G+fHCxlhAqGgqzdjYqUK/vHwSvo2UiNKX5gd7/ L755tNODJ+zoWfMEfAGYHcdtzkrqBdtknEJCOcAp7nyKqa6nvWpjHQx0ke5ew0f6 OmWTezBNHOlhtFRiFKyN7jPNBvjVHODmLotoAutgGyRaqjqLjNmiXzT6aPNqk7rZ xEWTYl2+Pla+wfFy168mqeVn9elECbKBjDB1Ei5p71BZqG1H2lhn2T1qwWJlaJhA 9ZtKgBS1214qIqsgMTKv00SaET1EaMLumyOKkPKlZfvA8lDt7bUjh9hrzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe7joJyUaDw4h1LYwoXqeGXwhHBMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2BjO03Li n/E9ZNGo6DmHMFSbpNyhsCuEXVcY26bvE1y7rTNZjBoAeVRL330bTdOd1fOvyhQZ hKWVs5BSwVCHH7C7vACJPfn999aHe2Ho8hUI+f+eVkJR9JMjhy2dNnTclIDVll08 rcNu5GTTwlU/duy+8qOcLqISy9IFzK0u/CydUNf8MwtgeLWdAYLzte6H3M/RuVbO AthXwXWu0zYeqKkrj4YJvTrFPcLZNInuFr3CJugTwHyMYvlXXQtM0hl0tQytxp+n GQaYcrgH+Rhef19o0pxNJ+inKrJfEIJ7YUpFGJP2C8lKXdVxjARgVfGhPhWfZWq/ U9QIrik4Muufow== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:06 2025 by rpki-client