This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json) Hash identifier: AGSNnlUMr3iAn+Sn/IYG41ZbfLM3mtPRKKTlk2Uc2Do= Subject key identifier: F6:98:AE:05:DE:6B:49:C9:81:B0:5B:27:BA:FA:4C:62:94:1C:25:AD Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019B20623F344B1D685E1868545AEB5893D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft Manifest number: D1 Signing time: Mon 15 Dec 2025 05:01:08 +0000 Manifest this update: Mon 15 Dec 2025 05:01:08 +0000 Manifest next update: Tue 16 Dec 2025 05:01:08 +0000 Files and hashes: 1: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: iISQVD7kTgxHSawfgU6K+jGhHGCiSD1IAuT1fECMl50=) 2: Cch2VifmQnrl3ySCO9FpJWyP-jY.roa (hash: 2g5UoC4Ft4ADLPnKCU1ruihX3luMvHq35SeKVhY1no4=) 3: Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa (hash: FPbL8Lg90NHmUgvGvaONurl4W9W2qlIvpuWREBmyr5M=) 4: zH4uo7wZS9DthbMbIV3cUe0ok_c.roa (hash: HLzxWTEgetYO6uF6aHtVJHRcG+Z9PahsUBDMJkY5lPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:3f:34:4b:1d:68:5e:18:68:54:5a:eb:58:93:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Dec 15 05:01:08 2025 GMT Not After : Dec 16 05:01:08 2025 GMT Subject: CN=f698ae05de6b49c981b05b27bafa4c62941c25ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:47:04:55:05:0b:09:87:62:5a:c7:2e:a9: 95:cb:0b:ca:5b:53:0d:ff:ab:73:82:48:04:f0:78: c5:6a:fd:d9:45:e5:8d:27:ac:0c:a5:c4:ad:77:b6: 75:0c:01:9e:4d:df:3e:4f:24:cc:c0:e9:06:96:df: 9d:de:50:d7:a5:3d:1d:7c:a1:ae:4d:67:ac:99:9a: 05:93:cd:1a:0c:a5:bf:d8:90:3c:cd:55:a3:fb:d2: 64:29:d9:57:f1:c8:e5:00:b3:e7:ed:43:e2:bc:1b: d9:83:b8:0a:11:dd:af:d1:53:4b:11:89:1a:03:b0: 37:ee:b9:eb:95:d4:15:7e:2b:bc:9a:4e:3d:3c:74: d0:60:02:69:3b:d8:ad:0c:36:d3:e9:ad:d0:03:47: c2:12:0e:cc:76:a6:eb:6a:3f:dc:97:c0:bf:fd:98: 16:07:b5:e9:4b:65:3d:82:e9:b2:f4:27:c0:e2:34: 13:54:b5:d1:21:9f:dc:98:63:f0:82:ac:03:1f:50: 44:76:f4:0d:a9:14:f1:25:a8:52:21:8c:98:37:97: 10:61:bc:69:d8:06:04:46:5d:87:fb:48:33:ec:57: 05:47:ad:9b:5a:40:ec:2e:c9:21:b1:93:60:67:90: 4b:54:1b:c9:ce:c6:af:2c:7a:75:23:30:f8:69:63: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:98:AE:05:DE:6B:49:C9:81:B0:5B:27:BA:FA:4C:62:94:1C:25:AD X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:00:28:79:bc:93:e1:1f:8d:ea:5e:64:30:9c:cf:f3:2d:9c: 6b:cd:a2:3f:51:18:42:07:da:f3:4a:aa:0d:55:0d:81:70:3e: 68:8b:13:f9:a3:b8:bf:be:e8:ee:8d:30:c5:99:1f:e8:7f:a3: 2f:e3:f5:06:f0:30:c7:73:b9:79:b8:2c:99:8b:10:b5:19:37: 83:4b:aa:7f:1b:76:66:29:76:cc:6d:00:7d:d1:61:c3:0e:f6: be:98:b8:b5:33:ca:83:c8:1e:64:d6:dd:f6:ef:dc:f5:80:8b: 1a:c0:b0:41:28:88:f5:0e:61:bb:f6:05:af:de:80:61:55:62: bf:52:d2:bc:d5:d6:83:36:a4:e4:ba:2b:41:58:c0:14:ea:6b: ec:93:56:0a:f2:ca:0d:cd:97:41:9e:3f:9e:76:e7:90:22:dd: b9:32:f2:b6:4b:6b:d9:fb:cf:ea:87:45:e1:a2:41:45:e6:3b: ea:ce:7a:98:58:26:c9:68:1f:4b:c2:0d:f6:0d:96:1a:1b:a4: cb:97:06:de:55:c1:5b:30:26:fd:e2:ec:cc:e1:7f:4f:92:0c: bd:b1:8d:17:20:5f:20:b0:e8:32:27:00:57:e4:92:02:f5:da: 05:6c:8d:70:0a:b7:eb:52:16:c0:7b:6b:09:77:2e:11:16:15: 5c:b1:30:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYj80Sx1oXhhoVFrrWJPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjUxMjE1MDUwMTA4WhcNMjUxMjE2MDUwMTA4WjAzMTEwLwYDVQQD EyhmNjk4YWUwNWRlNmI0OWM5ODFiMDViMjdiYWZhNGM2Mjk0MWMyNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLpHBFUFCwmHYlrHLqmVywvKW1MN /6tzgkgE8HjFav3ZReWNJ6wMpcStd7Z1DAGeTd8+TyTMwOkGlt+d3lDXpT0dfKGu TWesmZoFk80aDKW/2JA8zVWj+9JkKdlX8cjlALPn7UPivBvZg7gKEd2v0VNLEYka A7A37rnrldQVfiu8mk49PHTQYAJpO9itDDbT6a3QA0fCEg7Mdqbraj/cl8C//ZgW B7XpS2U9gumy9CfA4jQTVLXRIZ/cmGPwgqwDH1BEdvQNqRTxJahSIYyYN5cQYbxp 2AYERl2H+0gz7FcFR62bWkDsLskhsZNgZ5BLVBvJzsavLHp1IzD4aWOkewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaYrgXea0nJgbBbJ7r6TGKUHCWtMB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwAoebyT 4R+N6l5kMJzP8y2ca82iP1EYQgfa80qqDVUNgXA+aIsT+aO4v77o7o0wxZkf6H+j L+P1BvAwx3O5ebgsmYsQtRk3g0uqfxt2Zil2zG0AfdFhww72vpi4tTPKg8geZNbd 9u/c9YCLGsCwQSiI9Q5hu/YFr96AYVViv1LSvNXWgzak5LorQVjAFOpr7JNWCvLK Dc2XQZ4/nnbnkCLduTLytktr2fvP6odF4aJBReY76s56mFgmyWgfS8IN9g2WGhuk y5cG3lXBWzAm/eLszOF/T5IMvbGNFyBfILDoMicAV+SSAvXaBWyNcAq361IWwHtr CXcuERYVXLEwEA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:30:51 2025 by rpki-client