This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json) Hash identifier: X7wnVZEcAbAJmELEqadUT8OFMvUOhs+IQv/uHIDqBMk= Subject key identifier: 61:44:30:12:82:B3:64:CD:6F:D9:AD:87:C6:31:63:D1:FC:2F:F5:44 Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Certificate serial: 019B2DE6E71D195482C274EAA4844DDF777F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft Manifest number: 1565 Signing time: Wed 17 Dec 2025 20:01:05 +0000 Manifest this update: Wed 17 Dec 2025 20:01:05 +0000 Manifest next update: Thu 18 Dec 2025 20:01:05 +0000 Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=) 2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: rrKBORPtfvHfRJGv8J4cbBiBTeCKK1A3evYMwpm5xrY=) 3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:e7:1d:19:54:82:c2:74:ea:a4:84:4d:df:77:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Validity Not Before: Dec 17 20:01:05 2025 GMT Not After : Dec 18 20:01:05 2025 GMT Subject: CN=6144301282b364cd6fd9ad87c63163d1fc2ff544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:60:99:7f:c1:0b:a0:34:2f:5e:41:38:a3: 54:de:b9:9e:4a:77:e9:48:b3:03:c5:e5:55:df:ae: 2e:65:ff:99:87:08:95:39:df:e3:fc:c0:5c:b9:39: a3:04:db:9c:5e:1a:78:10:c7:f4:df:83:c5:e9:95: 7e:1e:ba:44:16:64:69:e4:61:ef:38:10:53:8c:f9: be:91:77:9d:52:bd:ab:75:8e:85:8f:bf:20:b1:21: 24:1e:f7:c1:a1:bf:c4:5a:eb:db:96:8e:96:42:d5: 55:05:1f:e1:23:c2:c7:75:45:25:5c:35:85:b6:69: d1:b1:59:24:9a:92:8a:26:4c:6f:45:23:2a:d3:09: 84:a4:d7:a4:1a:88:09:80:6a:d7:7a:10:fc:c0:0b: e4:ac:a9:8e:5a:3a:ff:42:cf:31:e6:53:8c:fe:07: c0:10:8e:28:5f:f3:8d:bd:ac:96:06:ab:15:33:e0: 79:54:2e:04:2a:37:32:4b:70:9d:6b:d3:cf:17:0e: 0b:fc:7e:ab:ca:f2:81:da:4c:56:e0:15:57:cf:2d: 5b:08:5a:2c:f2:49:c3:0e:27:55:7d:ab:10:dd:b2: ae:b5:cb:fd:af:2d:ec:4f:88:d2:7a:c0:b6:90:98: dd:ed:4d:21:81:a7:bd:fd:56:d3:a7:4c:fd:5f:33: 8a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:44:30:12:82:B3:64:CD:6F:D9:AD:87:C6:31:63:D1:FC:2F:F5:44 X509v3 Authority Key Identifier: keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:98:7a:5d:b9:39:fa:eb:e3:99:c5:2a:8b:4e:42:f8:a4:3e: 88:9c:35:36:98:d4:b5:b7:f9:fa:e8:d7:23:58:db:a1:26:67: 29:1c:80:28:22:04:49:7b:b5:be:4b:8b:9e:68:ba:d5:6b:e7: dc:4f:a2:1b:d5:27:88:58:8a:0d:34:e7:38:7a:3c:ca:ef:e5: ba:c8:c7:43:de:53:26:3f:1d:bb:fa:34:05:a2:d3:a3:01:0a: 3e:fe:4c:f9:59:1c:7d:d3:ef:ff:d0:f5:f0:16:6f:f4:07:3b: e2:a3:57:cd:cc:a7:34:3f:c0:1c:30:24:42:59:7e:7b:95:4d: 9f:f4:64:57:7a:06:82:ad:6e:0c:a4:76:c3:f9:ac:06:1c:93: 31:78:ce:4f:70:99:fc:c0:4c:9a:1e:4f:ba:06:b4:80:16:2d: 8e:61:1b:ee:a2:30:fe:f7:82:9a:19:b4:37:77:ef:5d:d6:7e: 9d:4a:e2:1a:f2:31:32:28:00:a3:a9:80:7c:b1:b4:75:56:7b: 0c:21:16:19:55:8a:c7:89:da:4f:8e:19:67:ab:90:62:da:84: e4:7f:e6:fc:ba:50:64:c2:e0:6d:eb:0b:71:65:a8:4f:78:f1: 29:37:a6:32:31:76:e5:0c:5c:c8:fd:3d:0a:d5:a7:44:25:f9: a6:6d:7d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5ucdGVSCwnTqpIRN33d/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw OWY0OTkwHhcNMjUxMjE3MjAwMTA1WhcNMjUxMjE4MjAwMTA1WjAzMTEwLwYDVQQD Eyg2MTQ0MzAxMjgyYjM2NGNkNmZkOWFkODdjNjMxNjNkMWZjMmZmNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL9gmX/BC6A0L15BOKNU3rmeSnfp SLMDxeVV364uZf+ZhwiVOd/j/MBcuTmjBNucXhp4EMf034PF6ZV+HrpEFmRp5GHv OBBTjPm+kXedUr2rdY6Fj78gsSEkHvfBob/EWuvblo6WQtVVBR/hI8LHdUUlXDWF tmnRsVkkmpKKJkxvRSMq0wmEpNekGogJgGrXehD8wAvkrKmOWjr/Qs8x5lOM/gfA EI4oX/ONvayWBqsVM+B5VC4EKjcyS3Cda9PPFw4L/H6ryvKB2kxW4BVXzy1bCFos 8knDDidVfasQ3bKutcv9ry3sT4jSesC2kJjd7U0hgae9/VbTp0z9XzOKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFEMBKCs2TNb9mth8YxY9H8L/VEMB8GA1UdIwQY MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJh6Xbk5 +uvjmcUqi05C+KQ+iJw1NpjUtbf5+ujXI1jboSZnKRyAKCIESXu1vkuLnmi61Wvn 3E+iG9UniFiKDTTnOHo8yu/lusjHQ95TJj8du/o0BaLTowEKPv5M+VkcfdPv/9D1 8BZv9Ac74qNXzcynND/AHDAkQll+e5VNn/RkV3oGgq1uDKR2w/msBhyTMXjOT3CZ /MBMmh5Puga0gBYtjmEb7qIw/veCmhm0N3fvXdZ+nUriGvIxMigAo6mAfLG0dVZ7 DCEWGVWKx4naT44ZZ6uQYtqE5H/m/LpQZMLgbesLcWWoT3jxKTemMjF25QxcyP09 CtWnRCX5pm19aw== -----END CERTIFICATE-----Generated at Thu Dec 18 03:49:06 2025 by rpki-client