This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json) Hash identifier: lP4uGBe9GVo0ESIOLNgih9rrOuSxzbfdQNkeT13FtsM= Subject key identifier: 3F:C1:14:D0:A8:B0:7A:1B:EC:F4:A4:2A:45:87:42:F9:5B:3F:B3:FE Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019B3D9069AE66AD2DCC4C865EC7A51C0B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft Manifest number: 031B Signing time: Sat 20 Dec 2025 21:00:32 +0000 Manifest this update: Sat 20 Dec 2025 21:00:32 +0000 Manifest next update: Sun 21 Dec 2025 21:00:32 +0000 Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=) 2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: HEWQqAWxm2w34VVQT3s0TUP8z/jVB7bVR6TPuB7gb8Y=) 3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:69:ae:66:ad:2d:cc:4c:86:5e:c7:a5:1c:0b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Dec 20 21:00:32 2025 GMT Not After : Dec 21 21:00:32 2025 GMT Subject: CN=3fc114d0a8b07a1becf4a42a458742f95b3fb3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:de:a0:45:36:ca:84:88:b2:3c:f3:66:01: d7:29:3a:db:2e:db:15:0c:51:8e:cc:55:74:ae:5f: 82:1c:6d:bf:ae:ac:05:a4:af:26:7a:d5:c1:1b:4c: 09:d3:3f:ad:61:bb:80:07:03:50:3e:34:09:c7:eb: 17:56:d6:6e:ee:ec:f9:74:ea:47:66:17:19:23:83: 35:ae:56:ac:6c:69:3a:7b:f4:98:db:9d:8e:83:7a: 82:2e:20:f3:c4:35:09:78:a6:2a:df:be:5e:c3:4d: 93:12:4d:57:fb:a9:22:21:c8:8a:21:22:78:98:1a: 21:6b:df:ea:b6:f8:d8:d2:c2:73:db:6c:39:83:2a: ef:4f:1f:70:c1:2d:59:d1:62:e2:1d:58:a5:b3:6a: 4b:e0:aa:c0:2c:09:82:7a:78:05:f1:84:b4:e3:66: f5:27:9b:e4:80:d6:a8:bb:0b:70:30:c9:a0:3e:58: 68:3f:ca:5e:76:22:75:3a:c5:3d:ca:d8:fa:c5:20: 65:29:38:7f:64:75:94:d4:94:8e:24:1f:3c:35:39: 5e:2a:d9:2f:0b:25:f3:3e:2b:bb:8c:7b:89:7f:d4: d0:e9:ac:42:72:96:38:94:c9:e9:18:96:be:f5:8b: ce:69:e0:dd:1d:71:bb:8a:7a:28:08:47:3e:7a:5b: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C1:14:D0:A8:B0:7A:1B:EC:F4:A4:2A:45:87:42:F9:5B:3F:B3:FE X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9b:0f:4a:b5:0b:b1:09:f4:02:f2:e6:e8:43:6e:3f:40:9e: 60:c5:90:92:ab:91:1b:23:fc:17:09:fa:25:a1:cc:68:c9:66: 35:20:69:5c:d9:60:12:28:84:fe:73:bf:a1:8d:02:eb:21:fc: 70:06:54:ca:fc:6b:5a:15:50:8f:28:8b:fb:5e:25:e5:fd:68: c8:cc:ae:e6:85:a1:11:0f:a0:eb:f6:63:14:2f:97:a9:f3:8a: 8a:c9:a2:17:79:4c:c1:30:da:12:6e:5c:fe:fd:0d:e3:fa:ea: 7a:5e:78:fb:b7:ce:b3:c4:6c:df:19:e1:a6:a5:24:0f:95:16: ef:bd:9b:ac:83:14:43:46:83:3d:cc:9d:5a:32:8a:a1:3b:b3: 00:f1:78:13:fa:5a:4a:fa:a3:a2:51:7f:ad:a0:6f:95:d5:14: 76:c2:4e:09:ca:ef:8a:0e:1b:7b:42:38:98:9a:23:6e:34:3f: df:29:6e:99:b6:bc:f3:23:42:8d:7f:c2:72:5a:60:ad:a4:40: cf:cf:82:e3:0c:8a:df:23:58:d3:3a:6b:f1:49:d3:f6:e5:85: ce:22:83:ed:af:42:6d:5c:ea:65:92:95:35:78:09:4b:04:84: 09:91:57:5d:7d:f3:e6:50:84:96:dc:f3:2b:43:3a:e4:c4:82: b0:0c:a3:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGmuZq0tzEyGXselHAsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjUxMjIwMjEwMDMyWhcNMjUxMjIxMjEwMDMyWjAzMTEwLwYDVQQD EygzZmMxMTRkMGE4YjA3YTFiZWNmNGE0MmE0NTg3NDJmOTViM2ZiM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTeoEU2yoSIsjzzZgHXKTrbLtsV DFGOzFV0rl+CHG2/rqwFpK8metXBG0wJ0z+tYbuABwNQPjQJx+sXVtZu7uz5dOpH ZhcZI4M1rlasbGk6e/SY252Og3qCLiDzxDUJeKYq375ew02TEk1X+6kiIciKISJ4 mBoha9/qtvjY0sJz22w5gyrvTx9wwS1Z0WLiHVils2pL4KrALAmCengF8YS042b1 J5vkgNaouwtwMMmgPlhoP8pediJ1OsU9ytj6xSBlKTh/ZHWU1JSOJB88NTleKtkv CyXzPiu7jHuJf9TQ6axCcpY4lMnpGJa+9YvOaeDdHXG7inooCEc+elu7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/BFNCosHob7PSkKkWHQvlbP7P+MB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJsPSrUL sQn0AvLm6ENuP0CeYMWQkquRGyP8Fwn6JaHMaMlmNSBpXNlgEiiE/nO/oY0C6yH8 cAZUyvxrWhVQjyiL+14l5f1oyMyu5oWhEQ+g6/ZjFC+XqfOKismiF3lMwTDaEm5c /v0N4/rqel54+7fOs8Rs3xnhpqUkD5UW772brIMUQ0aDPcydWjKKoTuzAPF4E/pa SvqjolF/raBvldUUdsJOCcrvig4be0I4mJojbjQ/3ylumba88yNCjX/CclpgraRA z8+C4wyK3yNY0zpr8UnT9uWFziKD7a9CbVzqZZKVNXgJSwSECZFXXX3z5lCEltzz K0M65MSCsAyjtg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:17:37 2025 by rpki-client