This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json) Hash identifier: AWEXOG5hRHsGCkLGNAnsFV9ZFwLFuT93phSRLnnRfHE= Subject key identifier: FA:E4:2B:BC:52:C9:AC:0F:B3:C3:A1:F0:20:46:9F:A2:3F:A1:F6:C1 Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Certificate serial: 019B427FD54FB3F78717F2DB28121596143A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 20:00:32 +0000 Manifest this update: Sun 21 Dec 2025 20:00:32 +0000 Manifest next update: Mon 22 Dec 2025 20:00:32 +0000 Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: 1LsgnT9cxkt1Z04M+BsAJDr+e5S4J8OyEUa3D7qiPaE=) 2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:d5:4f:b3:f7:87:17:f2:db:28:12:15:96:14:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Validity Not Before: Dec 21 20:00:32 2025 GMT Not After : Dec 22 20:00:32 2025 GMT Subject: CN=fae42bbc52c9ac0fb3c3a1f020469fa23fa1f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:20:be:0e:19:38:43:38:6a:3e:0c:1c:5a: d3:82:c5:90:e5:fc:23:ef:26:05:0a:36:85:be:47: 25:3f:5a:bb:53:07:9d:f1:28:71:ff:6d:6f:11:17: c5:fd:53:90:14:f2:98:34:ed:f0:a2:1c:6a:26:f2: 3b:5a:0d:f1:13:a1:7e:9f:ce:0d:c4:8d:b1:9a:73: e8:e2:22:4a:d0:58:1b:15:10:5c:a8:6e:dd:4f:a7: 71:a0:1f:4d:32:ef:38:50:fe:62:c9:5b:6a:73:57: 55:1a:cb:0b:ce:ce:64:28:8c:b5:bc:bc:0f:45:e3: 69:21:86:76:36:e1:17:b9:95:8d:7f:75:93:7b:73: 5e:e1:05:7b:29:73:d0:99:3a:8e:f2:43:0b:82:02: 63:45:2e:5c:6b:21:71:3a:74:09:45:f5:f6:c8:8b: d1:23:40:e6:bc:ee:d5:5c:18:4e:43:8f:d6:6b:5c: cb:73:73:ac:9c:91:a2:c5:17:4b:21:78:ab:63:b7: 6c:ab:96:08:cd:da:43:7c:72:b3:6c:0a:0f:1c:eb: 5d:e6:e9:6a:81:87:d9:84:97:18:ac:b8:28:1e:a0: 40:2d:15:2f:ea:9f:13:d6:a4:69:f8:fc:c4:11:0c: 9e:f1:f3:38:8d:39:12:d3:fa:62:0a:78:05:79:bd: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:2B:BC:52:C9:AC:0F:B3:C3:A1:F0:20:46:9F:A2:3F:A1:F6:C1 X509v3 Authority Key Identifier: keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:c3:38:e6:fc:90:9d:01:6a:88:5a:c5:8e:55:7a:b7:e0: 89:bf:09:d9:24:59:65:57:a8:8a:bd:f1:51:53:fd:5c:ce:37: b1:03:ef:8c:b2:65:d7:3d:f9:33:89:14:b8:04:4f:ab:6d:09: c2:86:75:f2:48:d0:6c:a4:79:14:8d:78:d8:30:c8:95:ed:06: e4:c7:fa:72:f1:93:1c:f9:53:f8:33:46:cb:26:32:67:1b:1f: 3f:da:8f:cb:00:f1:88:e0:63:77:fb:2a:70:57:0b:f5:56:55: ea:cb:28:dd:49:9e:e5:9d:ca:dd:20:1c:72:32:06:f2:51:46: c6:18:54:38:d3:cb:6f:11:8f:d8:80:21:8b:57:a3:98:f3:99: 30:80:8a:0b:67:f3:39:d0:d9:d0:53:5f:59:c6:f9:d2:fa:a2: eb:57:0e:dd:23:91:8e:2e:c2:5f:7c:4c:10:42:8c:ff:28:ee: 95:0a:ab:4b:eb:76:46:85:73:ae:6f:27:fc:45:57:91:3f:bc: 66:2e:7a:25:78:a2:3f:7c:40:56:0d:74:53:d6:9b:5b:32:b9: 78:ce:a3:6c:05:fd:ba:f2:47:30:fb:ae:59:d1:b5:8f:10:34: da:4e:25:d4:2d:93:0f:e3:eb:1f:8a:ed:78:52:70:5e:3d:80: 3f:72:71:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9VPs/eHF/LbKBIVlhQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi MThmOTYwHhcNMjUxMjIxMjAwMDMyWhcNMjUxMjIyMjAwMDMyWjAzMTEwLwYDVQQD EyhmYWU0MmJiYzUyYzlhYzBmYjNjM2ExZjAyMDQ2OWZhMjNmYTFmNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld0gvg4ZOEM4aj4MHFrTgsWQ5fwj 7yYFCjaFvkclP1q7Uwed8Shx/21vERfF/VOQFPKYNO3wohxqJvI7Wg3xE6F+n84N xI2xmnPo4iJK0FgbFRBcqG7dT6dxoB9NMu84UP5iyVtqc1dVGssLzs5kKIy1vLwP ReNpIYZ2NuEXuZWNf3WTe3Ne4QV7KXPQmTqO8kMLggJjRS5cayFxOnQJRfX2yIvR I0DmvO7VXBhOQ4/Wa1zLc3OsnJGixRdLIXirY7dsq5YIzdpDfHKzbAoPHOtd5ulq gYfZhJcYrLgoHqBALRUv6p8T1qRp+PzEEQye8fM4jTkS0/piCngFeb0y4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrkK7xSyawPs8Oh8CBGn6I/ofbBMB8GA1UdIwQY MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3 LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO7DOOb8 kJ0BaohaxY5Verfgib8J2SRZZVeoir3xUVP9XM43sQPvjLJl1z35M4kUuARPq20J woZ18kjQbKR5FI142DDIle0G5Mf6cvGTHPlT+DNGyyYyZxsfP9qPywDxiOBjd/sq cFcL9VZV6sso3Ume5Z3K3SAccjIG8lFGxhhUONPLbxGP2IAhi1ejmPOZMICKC2fz OdDZ0FNfWcb50vqi61cO3SORji7CX3xMEEKM/yjulQqrS+t2RoVzrm8n/EVXkT+8 Zi56JXiiP3xAVg10U9abWzK5eM6jbAX9uvJHMPuuWdG1jxA02k4l1C2TD+PrH4rt eFJwXj2AP3JxjA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:04 2025 by rpki-client