This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json) Hash identifier: r5eH88aZJ409YIgVhAWxz3W0gKrpIThrPPaxrYYa3tU= Subject key identifier: F5:3F:3F:44:6E:EE:5E:16:7F:84:F3:96:C7:BB:08:DF:2E:CF:4C:B8 Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019AAC14DF23FB68C3638CE05B8B2CD87C51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft Manifest number: 0FA6 Signing time: Sat 22 Nov 2025 15:00:40 +0000 Manifest this update: Sat 22 Nov 2025 15:00:40 +0000 Manifest next update: Sun 23 Nov 2025 15:00:40 +0000 Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: P/bhJmFA39E7b4P53RP1TEVyav4iDDxi28qEgS/51TU=) 2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=) 3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:df:23:fb:68:c3:63:8c:e0:5b:8b:2c:d8:7c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Nov 22 15:00:40 2025 GMT Not After : Nov 23 15:00:40 2025 GMT Subject: CN=f53f3f446eee5e167f84f396c7bb08df2ecf4cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:fd:fe:f9:f2:49:f9:08:ff:a3:e0:63:2d: a4:c8:2f:23:fd:ca:68:42:8a:d4:8b:db:9d:61:27: 96:d4:17:30:e6:1f:a7:63:dc:86:21:3c:47:e3:00: 37:31:ce:94:a9:5f:2c:19:4f:e3:d3:b3:4f:61:ec: 7f:4c:e8:b2:7b:48:6a:37:70:82:84:06:f9:a7:74: 36:8d:b2:a1:78:e2:bc:b6:a8:fe:06:34:97:89:80: 8f:19:37:e9:7b:70:d0:68:f0:ba:2d:f7:94:c1:8a: 7c:75:6a:75:4b:f4:69:f4:8c:2e:ad:51:14:54:4d: b2:06:2e:1e:fc:d3:d4:6e:bc:10:4e:4c:84:17:79: e7:76:15:0e:23:85:9a:6d:62:d8:72:bd:0d:86:d5: 99:a8:29:e1:39:6a:e4:16:6e:d3:d9:39:0f:a6:f3: de:fa:80:3c:81:7a:b2:57:2e:51:46:22:cd:de:9a: 71:47:25:da:1b:2d:e1:27:45:c1:7d:7c:1b:9f:5b: 24:af:33:35:3d:e9:24:2b:ea:84:a5:f1:e5:c8:3c: de:dc:bf:c3:57:ab:9f:45:07:c8:06:ce:3f:ff:bf: b2:1d:4a:3d:1e:74:05:a8:18:45:55:47:b0:42:f2: d6:28:e5:89:d2:ab:4d:99:61:6e:b9:be:4d:55:1a: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:3F:44:6E:EE:5E:16:7F:84:F3:96:C7:BB:08:DF:2E:CF:4C:B8 X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9a:f9:88:74:6f:5d:ef:d3:ce:86:68:cd:d3:ec:c2:59:b6: f1:d5:ed:74:7b:01:ec:d3:7f:4a:ca:b4:35:2f:dc:d2:f5:06: 44:c8:26:1a:4b:0f:6f:cc:9d:85:69:d0:b3:fb:c6:7f:80:4c: af:f9:e6:a7:3e:64:d7:9a:71:3d:73:bf:fa:93:77:e7:c5:1e: 4c:72:5c:34:3a:93:de:7f:c5:79:dc:de:be:37:ce:44:f5:fc: 8f:ef:41:21:50:99:e1:ff:61:7a:33:84:7f:85:c1:2a:5b:11: 58:a1:28:29:18:72:2c:f4:e0:35:37:52:25:17:00:00:8e:da: b6:e0:74:1f:5d:6e:f5:13:e0:47:84:d6:69:40:f0:a9:61:3f: e5:06:fe:07:f1:4e:d6:3f:51:3a:f3:d8:b4:19:c9:b5:7a:40: 6f:98:17:d1:3e:47:4d:38:aa:8e:e0:6c:74:06:92:25:fb:05: c0:be:9d:e1:9b:aa:bb:8b:c7:eb:55:82:0d:04:11:4c:15:39: b2:a8:cb:e0:f9:fe:43:8c:e7:c4:85:4e:5b:36:ea:27:61:d7: 5b:b5:d6:5f:d6:2b:ac:20:ad:14:a5:d4:cd:37:8e:ec:d0:aa: 6d:96:23:1e:47:94:b6:cc:ca:cb:b2:5c:08:d0:0a:dc:49:c7: 83:68:71:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFN8j+2jDY4zgW4ss2HxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjUxMTIyMTUwMDQwWhcNMjUxMTIzMTUwMDQwWjAzMTEwLwYDVQQD EyhmNTNmM2Y0NDZlZWU1ZTE2N2Y4NGYzOTZjN2JiMDhkZjJlY2Y0Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kv9/vnySfkI/6PgYy2kyC8j/cpo QorUi9udYSeW1Bcw5h+nY9yGITxH4wA3Mc6UqV8sGU/j07NPYex/TOiye0hqN3CC hAb5p3Q2jbKheOK8tqj+BjSXiYCPGTfpe3DQaPC6LfeUwYp8dWp1S/Rp9IwurVEU VE2yBi4e/NPUbrwQTkyEF3nndhUOI4WabWLYcr0NhtWZqCnhOWrkFm7T2TkPpvPe +oA8gXqyVy5RRiLN3ppxRyXaGy3hJ0XBfXwbn1skrzM1PekkK+qEpfHlyDze3L/D V6ufRQfIBs4//7+yHUo9HnQFqBhFVUewQvLWKOWJ0qtNmWFuub5NVRqgpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU/P0Ru7l4Wf4Tzlse7CN8uz0y4MB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpr5iHRv Xe/TzoZozdPswlm28dXtdHsB7NN/Ssq0NS/c0vUGRMgmGksPb8ydhWnQs/vGf4BM r/nmpz5k15pxPXO/+pN358UeTHJcNDqT3n/FedzevjfORPX8j+9BIVCZ4f9hejOE f4XBKlsRWKEoKRhyLPTgNTdSJRcAAI7atuB0H11u9RPgR4TWaUDwqWE/5Qb+B/FO 1j9ROvPYtBnJtXpAb5gX0T5HTTiqjuBsdAaSJfsFwL6d4Zuqu4vH61WCDQQRTBU5 sqjL4Pn+Q4znxIVOWzbqJ2HXW7XWX9YrrCCtFKXUzTeO7NCqbZYjHkeUtszKy7Jc CNAK3EnHg2hxSQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:43:55 2025 by rpki-client