This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json) Hash identifier: n7A0OwYh3jnoJca6EOXJS/8duneryAnRHNd96CMJWn8= Subject key identifier: 34:90:16:FF:BD:0D:43:1B:C1:9F:A1:1C:2D:7F:E5:D4:CE:B4:1E:FA Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Certificate serial: 019B2407F090FE5A7F4D684E50BC7273BE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft Manifest number: 0686 Signing time: Mon 15 Dec 2025 22:00:58 +0000 Manifest this update: Mon 15 Dec 2025 22:00:58 +0000 Manifest next update: Tue 16 Dec 2025 22:00:58 +0000 Files and hashes: 1: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (hash: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=) 2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: FAurugaR8CJH4ltP1e4dPNcw/A7kgXdD3f40l9bj5z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:f0:90:fe:5a:7f:4d:68:4e:50:bc:72:73:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Validity Not Before: Dec 15 22:00:58 2025 GMT Not After : Dec 16 22:00:58 2025 GMT Subject: CN=349016ffbd0d431bc19fa11c2d7fe5d4ceb41efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:90:a6:1b:48:7c:10:36:cc:32:2b:33:c0: f8:55:fe:40:f0:97:e1:6d:06:d7:c9:1a:25:f6:b7: 75:f4:7f:e5:19:61:58:84:f1:44:3e:4b:62:06:87: a6:d5:f5:20:29:fe:f2:e0:94:45:dd:b8:37:4a:3f: e0:7c:88:e8:fd:1c:2d:e6:bd:cb:81:06:24:86:a1: e6:fd:0d:4c:6e:a1:3e:b9:35:ae:3c:a6:c3:ae:42: d5:8b:19:1b:47:82:84:64:1c:b3:72:02:b7:8f:d2: db:c1:90:d1:ad:42:a9:35:b5:85:4f:ea:6b:c9:2f: 40:08:0e:7f:2c:6c:f4:e9:f2:72:56:38:dd:da:61: ea:ef:bc:40:7b:ef:bf:3d:e5:2d:23:51:71:dd:e5: 2e:8d:9d:46:a8:13:98:a9:ee:26:cf:55:37:fc:5a: fe:8f:a7:10:01:3c:2d:11:04:04:c1:4e:c3:2d:c2: 67:2a:0a:74:94:ce:9b:4b:45:72:e2:da:93:b7:03: 60:20:8c:dc:13:df:d9:ae:9a:b1:82:2b:db:54:b7: 33:8c:0c:91:06:2e:55:b4:cb:e4:0f:7e:ad:7a:a9: 58:94:6c:e4:b2:78:0c:7e:f9:22:4d:54:40:40:ec: e4:7d:e6:ef:d4:dd:27:61:a4:54:0b:ef:a9:3a:7c: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:90:16:FF:BD:0D:43:1B:C1:9F:A1:1C:2D:7F:E5:D4:CE:B4:1E:FA X509v3 Authority Key Identifier: keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:d1:90:f4:84:82:4c:ce:6b:fb:6e:ad:6d:c5:3e:d4:03: 71:20:dd:40:a4:47:de:e8:b0:a8:98:58:44:eb:40:a8:6a:3e: 38:54:48:03:9d:ea:99:1a:6a:63:36:d7:bf:12:6b:42:8b:ef: 0c:62:cc:40:6e:70:da:19:0e:6e:02:da:bd:be:f8:b5:4f:30: 36:6e:d6:74:93:78:bf:e5:95:b2:ba:1d:3c:0f:a4:1b:f3:63: fc:49:95:2b:be:f0:1b:0f:92:b3:e9:d5:d7:f4:f6:8d:b9:75: 9f:71:33:f3:7d:b2:ed:8d:a5:be:a2:25:b9:1d:9d:49:24:4c: ba:bd:72:d3:52:f6:73:91:0a:50:eb:12:2e:29:84:4e:44:ec: cc:27:62:5f:ae:5f:2b:12:3e:21:8c:84:d7:2a:29:6d:1d:ab: 32:7e:2a:00:7d:0c:82:d4:5d:76:01:11:93:bc:bc:a5:d9:cf: ee:d0:62:39:4d:f1:ff:4f:0b:2a:de:f1:1a:cf:df:f2:e8:27: 45:69:7a:bb:58:8b:10:ad:c2:dd:dd:28:ca:c7:b0:35:fa:b3: 63:07:f6:d9:6b:ca:38:94:8f:6b:0b:33:b6:2e:d1:a2:01:16: 4e:08:87:9f:59:5c:58:46:83:5f:91:0f:7b:ba:7d:eb:86:00: 2a:db:45:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB/CQ/lp/TWhOULxyc759MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWE0NzBkYmFiOWMxYzMzNGYwZjg1ZjQxN2NkMWFhNDI1 ZTlmMTMwHhcNMjUxMjE1MjIwMDU4WhcNMjUxMjE2MjIwMDU4WjAzMTEwLwYDVQQD EygzNDkwMTZmZmJkMGQ0MzFiYzE5ZmExMWMyZDdmZTVkNGNlYjQxZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LqQphtIfBA2zDIrM8D4Vf5A8Jfh bQbXyRol9rd19H/lGWFYhPFEPktiBoem1fUgKf7y4JRF3bg3Sj/gfIjo/Rwt5r3L gQYkhqHm/Q1MbqE+uTWuPKbDrkLVixkbR4KEZByzcgK3j9LbwZDRrUKpNbWFT+pr yS9ACA5/LGz06fJyVjjd2mHq77xAe++/PeUtI1Fx3eUujZ1GqBOYqe4mz1U3/Fr+ j6cQATwtEQQEwU7DLcJnKgp0lM6bS0Vy4tqTtwNgIIzcE9/ZrpqxgivbVLczjAyR Bi5VtMvkD36teqlYlGzksngMfvkiTVRAQOzkfebv1N0nYaRUC++pOnwmPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSQFv+9DUMbwZ+hHC1/5dTOtB76MB8GA1UdIwQY MBaAFAZaRw26ucHDNPD4X0F80apCXp8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2Mt NjUwNzhhN2Y2NWI4LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2MtNjUwNzhhN2Y2NWI4 LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOnRkPSE gkzOa/turW3FPtQDcSDdQKRH3uiwqJhYROtAqGo+OFRIA53qmRpqYzbXvxJrQovv DGLMQG5w2hkObgLavb74tU8wNm7WdJN4v+WVsrodPA+kG/Nj/EmVK77wGw+Ss+nV 1/T2jbl1n3Ez832y7Y2lvqIluR2dSSRMur1y01L2c5EKUOsSLimETkTszCdiX65f KxI+IYyE1yopbR2rMn4qAH0MgtRddgERk7y8pdnP7tBiOU3x/08LKt7xGs/f8ugn RWl6u1iLEK3C3d0oysewNfqzYwf22WvKOJSPawszti7RogEWTgiHn1lcWEaDX5EP e7p964YAKttFLw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:48 2025 by rpki-client