This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json) Hash identifier: AOyXPHoJU6gPTdBM91tm38VUTPGd3D5dmpGPbXf5viY= Subject key identifier: D7:87:EA:71:60:6B:C7:B4:D2:CD:12:88:0B:CF:4F:B1:F6:54:9E:66 Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019B5A88839E6AD4B85EFEF3360B2EF94952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft Manifest number: 153E Signing time: Fri 26 Dec 2025 12:00:54 +0000 Manifest this update: Fri 26 Dec 2025 12:00:54 +0000 Manifest next update: Sat 27 Dec 2025 12:00:54 +0000 Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=) 2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: PEwh8whpjKyiA2Z7ujGUID6oMxT7A6SLNORf0AvqR2g=) 3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:83:9e:6a:d4:b8:5e:fe:f3:36:0b:2e:f9:49:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Dec 26 12:00:54 2025 GMT Not After : Dec 27 12:00:54 2025 GMT Subject: CN=d787ea71606bc7b4d2cd12880bcf4fb1f6549e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:e6:34:de:9c:3d:57:af:da:bd:e3:af:38: c0:9e:42:ce:46:aa:7c:4e:45:dc:3d:18:a3:86:cb: b0:02:9e:33:2c:34:94:aa:b0:5c:f0:b2:af:9e:10: 8f:97:4d:21:f1:aa:e5:ee:09:d6:2e:06:fd:ab:14: 69:07:39:3c:88:75:8a:a0:c0:57:01:91:cd:63:fb: 8b:b2:56:80:6a:a7:cd:eb:36:5e:30:2e:f0:41:c3: 4f:e7:35:53:f3:e7:14:d8:35:8e:26:1f:fb:2a:12: bc:87:9e:5b:d0:77:ae:85:c3:77:24:d6:f7:6f:05: 29:34:59:ae:a4:d7:c9:b3:e7:85:cc:ee:51:66:28: db:73:0c:d2:42:2b:8c:e6:cb:1a:82:ce:32:e3:e0: 26:65:db:1c:ea:29:17:a7:f0:68:ab:5e:b9:26:1e: 28:e6:32:a0:83:ea:1f:d3:39:37:1b:2f:6d:0d:ba: 01:61:65:08:7b:9b:ee:7f:52:fe:3e:86:87:ef:fc: 20:8a:8d:c3:a8:0c:5b:a0:44:1c:d1:7a:d7:e8:e1: 45:15:2e:cc:6c:15:00:55:7c:6b:5e:e8:05:d3:40: 3b:29:77:80:75:21:37:be:2f:fd:32:1f:04:47:2d: 22:3b:08:a2:a4:17:84:f3:1d:21:aa:3f:c8:35:77: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:EA:71:60:6B:C7:B4:D2:CD:12:88:0B:CF:4F:B1:F6:54:9E:66 X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:69:2e:d7:52:22:5d:ac:aa:86:92:dc:a6:79:33:db:e1:70: ea:84:9e:2b:e2:74:c0:c5:79:3c:94:34:54:3b:59:ad:0a:94: 76:53:86:c4:6c:1f:46:37:c7:b0:ae:9c:a2:98:a0:06:ef:7d: ce:8c:b8:71:55:c4:8d:b5:b5:74:63:0b:ea:02:1f:a8:d6:a0: df:79:43:69:90:23:cb:dd:ea:9a:8c:40:78:0e:6a:cf:26:08: 3b:82:c5:be:07:51:c2:64:6f:ca:55:6c:97:36:75:e7:05:73: a1:09:91:4b:8b:f8:6f:f0:95:09:b8:a8:a2:5a:98:92:5e:6f: c1:5b:44:28:43:5b:38:4b:01:25:16:da:42:75:a9:ea:2a:62: d3:d9:09:bf:0a:8f:19:60:49:1d:b1:5b:28:e6:80:6b:97:00: c0:2b:21:8d:e0:a7:fa:2a:a4:3b:66:7c:13:19:7f:e3:9e:2a: ef:4f:50:f8:6e:d3:36:a0:03:b4:d6:2a:3a:7c:9a:b5:78:e3: 21:23:ee:86:51:f9:8c:d1:df:19:31:10:73:de:f6:13:dd:2d: 2e:13:8a:54:4d:30:f9:91:ed:4b:9a:b9:a0:94:0f:95:06:02: 26:10:86:b9:90:75:b3:e2:07:54:48:a6:43:e7:7e:8b:5b:a0: 5c:e6:8b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIOeatS4Xv7zNgsu+UlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjUxMjI2MTIwMDU0WhcNMjUxMjI3MTIwMDU0WjAzMTEwLwYDVQQD EyhkNzg3ZWE3MTYwNmJjN2I0ZDJjZDEyODgwYmNmNGZiMWY2NTQ5ZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK/mNN6cPVev2r3jrzjAnkLORqp8 TkXcPRijhsuwAp4zLDSUqrBc8LKvnhCPl00h8arl7gnWLgb9qxRpBzk8iHWKoMBX AZHNY/uLslaAaqfN6zZeMC7wQcNP5zVT8+cU2DWOJh/7KhK8h55b0HeuhcN3JNb3 bwUpNFmupNfJs+eFzO5RZijbcwzSQiuM5ssags4y4+AmZdsc6ikXp/Boq165Jh4o 5jKgg+of0zk3Gy9tDboBYWUIe5vuf1L+PoaH7/wgio3DqAxboEQc0XrX6OFFFS7M bBUAVXxrXugF00A7KXeAdSE3vi/9Mh8ERy0iOwiipBeE8x0hqj/INXdBBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeH6nFga8e00s0SiAvPT7H2VJ5mMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmku11Ii XayqhpLcpnkz2+Fw6oSeK+J0wMV5PJQ0VDtZrQqUdlOGxGwfRjfHsK6copigBu99 zoy4cVXEjbW1dGML6gIfqNag33lDaZAjy93qmoxAeA5qzyYIO4LFvgdRwmRvylVs lzZ15wVzoQmRS4v4b/CVCbioolqYkl5vwVtEKENbOEsBJRbaQnWp6ipi09kJvwqP GWBJHbFbKOaAa5cAwCshjeCn+iqkO2Z8Exl/454q709Q+G7TNqADtNYqOnyatXjj ISPuhlH5jNHfGTEQc972E90tLhOKVE0w+ZHtS5q5oJQPlQYCJhCGuZB1s+IHVEim Q+d+i1ugXOaLAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:55 2025 by rpki-client