This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json) Hash identifier: ngz2ZIyoG+uslcJNB7Hx5DZ43nh+YUnEIcxwpw7IBnc= Subject key identifier: 95:41:DD:54:60:FC:BB:52:8E:F5:A7:1C:81:2A:E5:4F:3B:0F:5A:A4 Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Certificate serial: 019B0FA5DBC31F9E37A1B2743F10DD033C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 23:01:26 +0000 Manifest this update: Thu 11 Dec 2025 23:01:26 +0000 Manifest next update: Fri 12 Dec 2025 23:01:26 +0000 Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: HCig4IfxmbBQzDtnhBAlDVsoHLcTv4fZL7YpGkpY3aU=) 2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:db:c3:1f:9e:37:a1:b2:74:3f:10:dd:03:3c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Validity Not Before: Dec 11 23:01:26 2025 GMT Not After : Dec 12 23:01:26 2025 GMT Subject: CN=9541dd5460fcbb528ef5a71c812ae54f3b0f5aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:b7:de:71:67:a2:2e:7d:e1:b0:0f:e4:c0: 6d:b4:ed:7e:85:6d:73:4f:02:c5:12:5d:af:66:78: b9:d2:18:86:f3:50:20:04:e6:aa:87:9f:fe:2e:55: 08:a2:fe:16:34:5e:48:d8:fe:9d:18:35:9e:67:58: ef:cc:c4:aa:97:00:17:37:19:6a:58:a2:42:1d:66: e2:21:ab:8c:83:3d:16:1a:29:b5:72:86:c1:75:63: bd:33:30:1c:6f:5b:29:ea:e8:3c:36:51:d3:29:79: 12:a6:a2:4a:e2:0a:83:a9:22:38:c8:b2:90:39:bc: 79:5b:ee:c5:0d:4f:89:09:7d:5e:92:15:9e:f0:d8: cf:9d:59:cc:1e:bb:9b:17:a1:03:98:5a:b2:02:07: 51:e6:08:d1:3c:aa:12:63:ba:f9:be:c8:9e:c7:38: 86:64:72:aa:60:83:17:c0:2c:cf:b9:7a:69:88:c7: dd:99:ea:12:3b:a1:2f:f2:c0:d0:96:6e:1f:fd:71: 17:e6:45:d0:42:ff:e9:a3:ff:04:14:b9:ba:24:4a: c6:33:60:3b:a6:fc:21:b2:53:a7:f9:fa:72:08:ef: 05:cb:1c:5b:96:0d:fb:3e:a3:47:9b:42:d6:50:ac: ea:1b:c2:8c:12:31:9a:cb:1a:31:dd:02:e3:4a:8c: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:41:DD:54:60:FC:BB:52:8E:F5:A7:1C:81:2A:E5:4F:3B:0F:5A:A4 X509v3 Authority Key Identifier: keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b9:66:b9:fa:a0:c4:41:2d:ff:98:76:73:d4:81:db:50:ec: 9e:09:2c:e9:c0:8f:48:01:58:20:10:07:88:fc:f7:36:92:a8: d7:c8:84:48:63:f7:18:75:2c:cc:88:f7:ae:33:24:29:e0:0a: 13:b9:41:cf:85:7c:92:21:85:be:0f:e3:7f:d5:cf:99:e9:78: b1:78:68:28:b4:b9:9f:d8:93:84:bb:6c:d9:8e:76:70:a1:51: 44:90:3d:44:8c:6e:39:40:55:31:6e:de:15:90:39:b3:29:b4: 8f:4c:ae:0b:6c:a5:48:82:a3:eb:ae:2e:e8:94:57:d4:0b:9a: 88:f9:41:bf:81:53:ec:ce:08:dd:c8:4d:b7:0c:8b:e5:60:7f: f6:51:ba:c4:f0:ee:4c:7c:c0:1c:61:0d:0a:b4:6f:a1:e9:ba: e1:72:6f:72:15:8d:92:04:80:01:37:f2:86:bd:5f:7a:71:ce: 4b:91:83:41:1c:13:88:e3:22:af:aa:90:97:39:53:40:7b:ca: e1:37:5d:2b:d2:b6:a0:4a:fa:f0:a7:96:d1:70:00:20:4a:1c: dc:d3:25:1c:2a:9e:39:f2:07:03:61:5f:43:d4:a3:42:d2:c2: 2a:33:d2:70:5f:8b:20:7c:f3:e9:54:42:52:26:48:c1:bf:a6: d4:41:88:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpdvDH543obJ0PxDdAzwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4 ODljYTMwHhcNMjUxMjExMjMwMTI2WhcNMjUxMjEyMjMwMTI2WjAzMTEwLwYDVQQD Eyg5NTQxZGQ1NDYwZmNiYjUyOGVmNWE3MWM4MTJhZTU0ZjNiMGY1YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX633nFnoi594bAP5MBttO1+hW1z TwLFEl2vZni50hiG81AgBOaqh5/+LlUIov4WNF5I2P6dGDWeZ1jvzMSqlwAXNxlq WKJCHWbiIauMgz0WGim1cobBdWO9MzAcb1sp6ug8NlHTKXkSpqJK4gqDqSI4yLKQ Obx5W+7FDU+JCX1ekhWe8NjPnVnMHrubF6EDmFqyAgdR5gjRPKoSY7r5vsiexziG ZHKqYIMXwCzPuXppiMfdmeoSO6Ev8sDQlm4f/XEX5kXQQv/po/8EFLm6JErGM2A7 pvwhslOn+fpyCO8Fyxxblg37PqNHm0LWUKzqG8KMEjGayxox3QLjSoxCMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVB3VRg/LtSjvWnHIEq5U87D1qkMB8GA1UdIwQY MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt Y2ZkY2I1N2I1ZTFkLzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7lmufqg xEEt/5h2c9SB21Dsngks6cCPSAFYIBAHiPz3NpKo18iESGP3GHUszIj3rjMkKeAK E7lBz4V8kiGFvg/jf9XPmel4sXhoKLS5n9iThLts2Y52cKFRRJA9RIxuOUBVMW7e FZA5sym0j0yuC2ylSIKj664u6JRX1AuaiPlBv4FT7M4I3chNtwyL5WB/9lG6xPDu THzAHGENCrRvoem64XJvchWNkgSAATfyhr1fenHOS5GDQRwTiOMir6qQlzlTQHvK 4TddK9K2oEr68KeW0XAAIEoc3NMlHCqeOfIHA2FfQ9SjQtLCKjPScF+LIHzz6VRC UiZIwb+m1EGIzw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:14 2025 by rpki-client