This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json) Hash identifier: ekjn8CaoNMirCuSv/84orHey08mkRTcCSt2+DXsjxSQ= Subject key identifier: BD:C7:E1:BB:4C:58:C1:50:29:A0:76:C1:CC:FF:AB:44:7B:04:6E:AD Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Certificate serial: 019B3BA274B56190AA79F634D449ABA2B911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft Manifest number: 16BE Signing time: Sat 20 Dec 2025 12:01:01 +0000 Manifest this update: Sat 20 Dec 2025 12:01:01 +0000 Manifest next update: Sun 21 Dec 2025 12:01:01 +0000 Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=) 2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: f3kFSZCD364Cg84OhOBLfkhrxMHkR7zr4lcCFZocJps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:74:b5:61:90:aa:79:f6:34:d4:49:ab:a2:b9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Validity Not Before: Dec 20 12:01:01 2025 GMT Not After : Dec 21 12:01:01 2025 GMT Subject: CN=bdc7e1bb4c58c15029a076c1ccffab447b046ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:e1:74:e7:1a:92:b5:f1:46:07:02:b2:de: ca:64:95:d7:6b:94:42:a9:1b:d9:17:bd:e0:7c:34: a4:25:67:0e:1a:b3:d0:56:69:98:16:52:0e:bf:a7: 51:1c:01:77:01:c9:9c:02:56:3f:95:6b:a6:49:b5: 55:c0:0c:c2:4c:21:91:cd:8f:97:d8:1b:0f:79:72: bc:d0:20:0a:42:c4:92:54:c1:66:15:52:91:90:c2: 31:fc:b7:69:b1:23:83:8a:8d:87:e0:7b:ad:b2:35: 70:24:52:25:47:8c:d6:2c:f3:87:d2:0e:01:32:8d: 87:15:52:2d:65:cb:5e:1a:13:66:6d:66:35:cb:b6: ab:f3:4b:0c:4f:b5:41:23:9e:8f:9d:dc:90:3f:b1: 41:87:53:d3:19:fc:6c:38:fe:3d:ab:b6:76:b3:b3: 2d:13:78:a4:29:36:28:6b:a9:21:df:1c:e6:b1:66: 28:30:45:b3:06:5a:71:f2:80:cf:24:69:09:89:dc: c1:37:0b:0e:85:62:52:dc:01:26:55:cf:e4:c9:be: f0:3d:f8:c2:f4:e6:bb:4e:12:ba:d2:03:11:d3:00: 31:3f:66:1b:9e:a2:1f:a7:ec:e7:be:3a:c2:f4:83: c5:93:5c:94:e3:07:c5:f1:ff:62:d3:6a:8f:54:62: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C7:E1:BB:4C:58:C1:50:29:A0:76:C1:CC:FF:AB:44:7B:04:6E:AD X509v3 Authority Key Identifier: keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:82:10:4c:f0:5c:88:be:a2:fd:84:87:4c:9e:91:55:4f: c7:80:f5:21:72:44:cc:9b:86:e3:97:df:fb:34:5b:af:41:07: 11:50:8d:f1:61:83:6e:e1:72:de:d2:dd:2b:46:e3:5b:d9:fd: bd:f0:ce:2f:0f:2e:24:19:68:00:ab:20:70:e9:ad:97:f7:8c: 7d:5a:82:44:85:36:f3:84:c5:80:f1:9d:14:38:ea:79:ec:98: b1:79:a7:4a:58:20:aa:cd:23:e4:5a:62:db:a3:0f:a9:b9:cc: 1f:f9:94:8b:f1:8e:77:cd:3d:a1:a9:a4:6e:26:3e:90:e0:01: c5:5a:a2:2b:e9:2b:c1:83:25:91:d3:5e:65:1f:fd:c9:8b:09: c9:0b:21:64:6c:40:ee:7c:37:57:3e:d5:58:55:8f:64:9b:41: f3:aa:2f:7d:5f:4f:c3:01:ee:be:91:01:54:db:40:b0:96:98: 0b:68:fd:87:f0:ac:ab:f2:48:c6:ad:09:88:ff:f7:52:0d:16: fc:54:34:52:e2:32:0c:2c:e3:a9:02:6d:08:24:65:ba:c0:9d: 3f:9e:ec:78:cf:f4:35:60:99:1a:89:bd:59:8e:22:ec:01:e9: 24:35:c0:41:e8:1c:17:2c:4c:b0:82:23:05:af:59:70:40:1d: 35:d4:d8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onS1YZCqefY01EmrorkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmJiODFkODIzMDY5ZGQ4MjRkOGQ4ZDgyYzhkYmZiMzA1 ZGI5OGYwHhcNMjUxMjIwMTIwMTAxWhcNMjUxMjIxMTIwMTAxWjAzMTEwLwYDVQQD EyhiZGM3ZTFiYjRjNThjMTUwMjlhMDc2YzFjY2ZmYWI0NDdiMDQ2ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYPhdOcakrXxRgcCst7KZJXXa5RC qRvZF73gfDSkJWcOGrPQVmmYFlIOv6dRHAF3AcmcAlY/lWumSbVVwAzCTCGRzY+X 2BsPeXK80CAKQsSSVMFmFVKRkMIx/LdpsSODio2H4HutsjVwJFIlR4zWLPOH0g4B Mo2HFVItZcteGhNmbWY1y7ar80sMT7VBI56PndyQP7FBh1PTGfxsOP49q7Z2s7Mt E3ikKTYoa6kh3xzmsWYoMEWzBlpx8oDPJGkJidzBNwsOhWJS3AEmVc/kyb7wPfjC 9Oa7ThK60gMR0wAxP2YbnqIfp+znvjrC9IPFk1yU4wfF8f9i02qPVGKgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3H4btMWMFQKaB2wcz/q0R7BG6tMB8GA1UdIwQY MBaAFGy7uB2CMGndgk2NjYLI2/swXbmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3Njkt OGQ2NWY0ZWU5MWRmLzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3NjktOGQ2NWY0ZWU5MWRm LzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/iCEEzw XIi+ov2Eh0yekVVPx4D1IXJEzJuG45ff+zRbr0EHEVCN8WGDbuFy3tLdK0bjW9n9 vfDOLw8uJBloAKsgcOmtl/eMfVqCRIU284TFgPGdFDjqeeyYsXmnSlggqs0j5Fpi 26MPqbnMH/mUi/GOd809oamkbiY+kOABxVqiK+krwYMlkdNeZR/9yYsJyQshZGxA 7nw3Vz7VWFWPZJtB86ovfV9PwwHuvpEBVNtAsJaYC2j9h/Csq/JIxq0JiP/3Ug0W /FQ0UuIyDCzjqQJtCCRlusCdP57seM/0NWCZGom9WY4i7AHpJDXAQegcFyxMsIIj Ba9ZcEAdNdTYiw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:03 2025 by rpki-client