This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft File: RmBLR38rZwno7JqWJ6Zixne619Y.mft (raw, json) Hash identifier: +byziaPxLfNk9ezMQ+AzNRd1mNado0VIPsUmTLKXQwU= Subject key identifier: 30:E7:68:15:8A:21:AB:05:19:39:C5:7D:8E:74:7D:5C:D0:17:BF:85 Authority key identifier: 46:60:4B:47:7F:2B:67:09:E8:EC:9A:96:27:A6:62:C6:77:BA:D7:D6 Certificate issuer: /CN=46604b477f2b6709e8ec9a9627a662c677bad7d6 Certificate serial: 019B593EDD59C098C2E0F597190CF63131FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft Manifest number: 36 Signing time: Fri 26 Dec 2025 06:00:50 +0000 Manifest this update: Fri 26 Dec 2025 06:00:50 +0000 Manifest next update: Sat 27 Dec 2025 06:00:50 +0000 Files and hashes: 1: RmBLR38rZwno7JqWJ6Zixne619Y.crl (hash: 7yJnF9OLy/F5fpwoQDahP1L+HwEX1FjBl6eSY4ZBA6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:dd:59:c0:98:c2:e0:f5:97:19:0c:f6:31:31:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46604b477f2b6709e8ec9a9627a662c677bad7d6 Validity Not Before: Dec 26 06:00:50 2025 GMT Not After : Dec 27 06:00:50 2025 GMT Subject: CN=30e768158a21ab051939c57d8e747d5cd017bf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:bd:2a:22:f7:1b:7c:fd:7b:e4:a3:8e:89: 44:85:5e:51:0a:ae:30:f0:13:52:f3:ca:5d:3a:d1: 59:2e:14:70:ea:71:88:e8:4d:58:dc:25:8c:8d:a5: 3b:ea:ac:fb:42:2c:a6:5f:f2:c1:23:45:f0:96:58: d9:84:0a:7a:e8:dc:9b:a6:a9:29:35:14:26:62:be: 5c:7b:60:6c:09:2d:4a:c1:ae:62:fc:a4:ff:9b:a5: 3f:7f:04:b3:8b:47:8c:4a:08:6a:47:64:3c:76:60: 2e:41:56:f4:5b:07:d5:e2:cc:8d:3e:94:72:5c:5a: c5:45:73:64:af:0c:c9:c0:75:5d:a7:17:c9:02:81: 69:4e:cb:df:c5:7e:91:5e:56:3f:2a:f3:eb:32:dc: 6e:ff:ae:79:9b:e3:88:a9:0a:77:9d:08:51:4c:20: 00:6e:6c:b5:50:56:15:92:9f:1b:db:02:f8:0e:88: fa:99:b9:88:0d:e8:0f:f3:9a:72:ae:c2:1d:8c:85: ec:4f:3f:bf:3b:0b:75:70:bb:f6:0c:62:7c:28:4c: 42:e1:65:52:1b:d6:c7:41:38:fd:bc:0d:20:15:ce: 4f:f0:3b:ed:d1:35:59:3e:b8:29:e3:c3:d1:31:13: e9:3c:62:54:c7:79:67:7b:80:2a:35:41:dd:ad:68: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E7:68:15:8A:21:AB:05:19:39:C5:7D:8E:74:7D:5C:D0:17:BF:85 X509v3 Authority Key Identifier: keyid:46:60:4B:47:7F:2B:67:09:E8:EC:9A:96:27:A6:62:C6:77:BA:D7:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d9:b6:a6:11:95:df:dc:3e:25:ef:ee:29:ce:cd:7c:ca:b5: 85:30:ea:71:35:f9:04:c6:ee:09:04:2a:22:44:e0:1e:3c:d9: dc:5a:68:95:b3:dd:7d:df:1f:45:fb:a7:a3:7d:41:8c:f5:6f: 32:35:9d:6d:cc:28:30:3b:94:5f:6d:ce:eb:84:26:c6:6a:48: a6:4b:7d:b7:14:62:89:50:dd:5d:d3:a9:35:c1:62:44:80:6a: f8:a1:c3:cf:ba:63:1c:0f:ae:86:77:0f:aa:a7:da:f5:f1:07: df:b4:3b:07:cb:c0:24:8a:6b:fa:aa:75:4d:cc:dc:54:22:90: d1:9d:77:9d:23:ad:1a:4b:4f:c9:07:d1:be:3c:62:38:d2:20: a7:14:41:0f:b1:8f:02:4d:cd:a9:00:9d:b2:8b:99:2d:ac:22: ab:eb:28:03:fc:b7:56:ea:34:39:6e:46:e3:81:41:eb:32:63: e7:cf:66:99:e5:88:18:b2:96:a5:f7:d3:b0:d2:3d:92:09:12: 8e:4d:ab:00:e1:f3:eb:ad:28:7e:48:3b:08:87:c7:f6:ce:10: 8b:e8:54:87:b0:b2:6b:f3:df:a7:f8:78:9a:3d:5c:1a:af:7d: a1:ea:22:e7:bf:5e:c0:6d:62:b2:e1:0f:25:6a:86:4e:95:50: 08:35:39:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPt1ZwJjC4PWXGQz2MTH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjA0YjQ3N2YyYjY3MDllOGVjOWE5NjI3YTY2MmM2Nzdi YWQ3ZDYwHhcNMjUxMjI2MDYwMDUwWhcNMjUxMjI3MDYwMDUwWjAzMTEwLwYDVQQD EygzMGU3NjgxNThhMjFhYjA1MTkzOWM1N2Q4ZTc0N2Q1Y2QwMTdiZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTq9KiL3G3z9e+SjjolEhV5RCq4w 8BNS88pdOtFZLhRw6nGI6E1Y3CWMjaU76qz7QiymX/LBI0XwlljZhAp66Nybpqkp NRQmYr5ce2BsCS1Kwa5i/KT/m6U/fwSzi0eMSghqR2Q8dmAuQVb0WwfV4syNPpRy XFrFRXNkrwzJwHVdpxfJAoFpTsvfxX6RXlY/KvPrMtxu/655m+OIqQp3nQhRTCAA bmy1UFYVkp8b2wL4Doj6mbmIDegP85pyrsIdjIXsTz+/Owt1cLv2DGJ8KExC4WVS G9bHQTj9vA0gFc5P8Dvt0TVZPrgp48PRMRPpPGJUx3lne4AqNUHdrWj6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDnaBWKIasFGTnFfY50fVzQF7+FMB8GA1UdIwQY MBaAFEZgS0d/K2cJ6OyaliemYsZ3utfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1CTFIzOHJad25vN0pxV0o2Wml4bmU2MTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZTA0ZTgtZTZhYi00YjUwLWJhNTAt OTMwNzkwZTYxOTMzLzEvUm1CTFIzOHJad25vN0pxV0o2Wml4bmU2MTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iZTA0ZTgtZTZhYi00YjUwLWJhNTAtOTMwNzkwZTYxOTMz LzEvUm1CTFIzOHJad25vN0pxV0o2Wml4bmU2MTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtm2phGV 39w+Je/uKc7NfMq1hTDqcTX5BMbuCQQqIkTgHjzZ3FpolbPdfd8fRfuno31BjPVv MjWdbcwoMDuUX23O64QmxmpIpkt9txRiiVDdXdOpNcFiRIBq+KHDz7pjHA+uhncP qqfa9fEH37Q7B8vAJIpr+qp1TczcVCKQ0Z13nSOtGktPyQfRvjxiONIgpxRBD7GP Ak3NqQCdsouZLawiq+soA/y3Vuo0OW5G44FB6zJj589mmeWIGLKWpffTsNI9kgkS jk2rAOHz660ofkg7CIfH9s4Qi+hUh7Cya/Pfp/h4mj1cGq99oeoi579ewG1isuEP JWqGTpVQCDU5DA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client