This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json) Hash identifier: 9+PE9JbJvZLAfZA/cvqCEY+Mc+1iL6GM6qnzzOdX/VA= Subject key identifier: 20:1F:ED:9E:3E:D3:8B:A5:86:07:DE:D9:C7:71:0A:48:BD:F3:FB:BE Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f Certificate serial: 019B22195F2B8D96AB6469E83D1FC19429CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft Manifest number: 1388 Signing time: Mon 15 Dec 2025 13:00:46 +0000 Manifest this update: Mon 15 Dec 2025 13:00:46 +0000 Manifest next update: Tue 16 Dec 2025 13:00:46 +0000 Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: DXxiLI5oS5pj5L410teRhrvT698MDgaFkkIZdkkcmcw=) 2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:5f:2b:8d:96:ab:64:69:e8:3d:1f:c1:94:29:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f Validity Not Before: Dec 15 13:00:46 2025 GMT Not After : Dec 16 13:00:46 2025 GMT Subject: CN=201fed9e3ed38ba58607ded9c7710a48bdf3fbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:6f:d2:c9:3c:87:e9:13:c0:0a:e0:21:3c: 66:fc:4c:b7:57:ea:1f:b5:07:ef:ff:42:f5:f2:03: 2d:16:c2:3a:53:e6:8b:a6:20:8b:08:07:2a:b9:e1: e6:74:7a:f9:7c:dd:9f:80:cd:88:41:7e:06:1f:cf: 53:6a:b5:91:b6:63:17:16:6c:0a:65:ed:d5:cf:8b: eb:10:9d:71:52:81:74:14:16:f0:78:11:90:f7:3a: 4e:be:d3:40:8c:96:4d:a5:19:83:d0:00:2d:0a:e4: d4:9e:4e:35:5d:43:e1:77:3d:92:4a:82:63:eb:24: 8c:d7:a4:c0:8a:ca:c6:8f:7a:6a:76:43:4c:6c:ea: 8b:53:f0:bd:21:15:90:3b:14:bc:9d:62:58:ca:7d: 05:90:1a:34:6f:dc:02:36:d4:20:08:17:8e:c5:14: 58:cc:3e:38:f0:bf:63:18:79:85:95:b2:d0:2b:4f: 85:3d:97:23:ce:fe:78:7b:8c:cd:c9:f6:a5:62:d4: a4:3b:d8:70:79:91:c7:36:12:fc:e7:1a:ab:e8:9f: 01:51:18:5c:67:2a:f5:02:33:e0:8b:e3:dd:82:8a: 78:cc:14:fd:93:e6:fa:7b:a2:f3:14:29:8d:a3:c0: e3:0b:64:0e:c3:1f:ae:3a:c1:fb:1c:51:22:7d:39: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:ED:9E:3E:D3:8B:A5:86:07:DE:D9:C7:71:0A:48:BD:F3:FB:BE X509v3 Authority Key Identifier: keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ef:56:df:fe:c6:dd:d7:91:7a:81:84:94:7d:5e:14:1e:88: d4:79:81:b5:9a:90:3c:3e:12:1e:dc:f2:cc:f0:46:c0:de:92: a9:4f:1d:b2:4b:c7:9a:9d:27:8b:be:9f:70:5a:c7:bc:81:18: 8f:ac:ee:7d:98:58:32:f4:e2:83:6a:20:a7:10:bc:d1:8a:ae: 92:36:88:6d:cd:69:94:fc:97:7a:18:a8:ae:82:fc:b7:a5:92: 51:99:19:12:25:9b:a7:2d:e9:fc:e0:b0:67:8c:98:4a:42:93: 93:64:f8:df:ce:4b:4d:28:5a:dd:1e:4b:28:9c:13:84:10:3f: 73:0f:16:44:e8:74:ea:e5:af:bc:5e:34:71:51:89:12:b3:59: fb:3e:5a:f5:20:4b:dd:10:ef:1f:27:42:00:87:97:bd:83:8c: ad:1f:0f:5f:6e:8e:22:15:6b:1f:82:da:85:90:a6:f9:7e:75: a4:cd:d8:20:f6:dd:f1:38:5f:ef:d4:38:c5:5a:35:48:5e:20: 94:ab:91:1d:29:21:28:4d:5e:a5:6d:5f:68:90:6c:5c:29:fc: d4:d5:fe:84:7e:36:9a:8a:5d:de:8d:96:44:47:03:de:6d:df: ec:a0:d6:08:30:ca:bc:e3:f6:ab:0f:21:ad:ec:be:38:00:6c: 2f:f6:74:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGV8rjZarZGnoPR/BlCnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5 MDYwMWYwHhcNMjUxMjE1MTMwMDQ2WhcNMjUxMjE2MTMwMDQ2WjAzMTEwLwYDVQQD EygyMDFmZWQ5ZTNlZDM4YmE1ODYwN2RlZDljNzcxMGE0OGJkZjNmYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhlv0sk8h+kTwArgITxm/Ey3V+of tQfv/0L18gMtFsI6U+aLpiCLCAcqueHmdHr5fN2fgM2IQX4GH89TarWRtmMXFmwK Ze3Vz4vrEJ1xUoF0FBbweBGQ9zpOvtNAjJZNpRmD0AAtCuTUnk41XUPhdz2SSoJj 6ySM16TAisrGj3pqdkNMbOqLU/C9IRWQOxS8nWJYyn0FkBo0b9wCNtQgCBeOxRRY zD448L9jGHmFlbLQK0+FPZcjzv54e4zNyfalYtSkO9hweZHHNhL85xqr6J8BURhc Zyr1AjPgi+Pdgop4zBT9k+b6e6LzFCmNo8DjC2QOwx+uOsH7HFEifTnG8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAf7Z4+04ulhgfe2cdxCki98/u+MB8GA1UdIwQY MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+9W3/7G 3deReoGElH1eFB6I1HmBtZqQPD4SHtzyzPBGwN6SqU8dskvHmp0ni76fcFrHvIEY j6zufZhYMvTig2ogpxC80YqukjaIbc1plPyXehioroL8t6WSUZkZEiWbpy3p/OCw Z4yYSkKTk2T4385LTSha3R5LKJwThBA/cw8WROh06uWvvF40cVGJErNZ+z5a9SBL 3RDvHydCAIeXvYOMrR8PX26OIhVrH4LahZCm+X51pM3YIPbd8Thf79Q4xVo1SF4g lKuRHSkhKE1epW1faJBsXCn81NX+hH42mopd3o2WREcD3m3f7KDWCDDKvOP2qw8h rey+OABsL/Z0nQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:39:00 2025 by rpki-client