This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json) Hash identifier: JI9a5WBRleXIc9PMd1uNlNxZITa/w9ZPeXU6Q5RO/gk= Subject key identifier: 32:18:70:AD:84:9C:4B:B3:1E:63:55:F3:79:88:6D:4F:00:38:88:14 Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Certificate serial: 019B337B24A44525396B5BB3F86F799578DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft Manifest number: 1762 Signing time: Thu 18 Dec 2025 22:01:06 +0000 Manifest this update: Thu 18 Dec 2025 22:01:06 +0000 Manifest next update: Fri 19 Dec 2025 22:01:06 +0000 Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: 37gnHkYPc3TR9wBKFTrOygPbgVHIdJpcEVML5eRkxH8=) 2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:24:a4:45:25:39:6b:5b:b3:f8:6f:79:95:78:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Validity Not Before: Dec 18 22:01:06 2025 GMT Not After : Dec 19 22:01:06 2025 GMT Subject: CN=321870ad849c4bb31e6355f379886d4f00388814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:ec:92:5a:1e:ba:81:bf:bd:45:65:85:03: 9a:86:c9:4b:99:48:97:84:8a:b0:41:d7:f5:9b:be: f8:68:2e:e7:c4:7e:4a:06:d5:b5:e6:ae:31:48:36: f6:08:8c:91:f2:c6:46:09:e8:03:1e:da:04:86:d9: a3:57:aa:f0:1a:4d:c2:74:e9:10:78:6a:b0:f3:89: ed:a1:d9:3b:c1:c9:7c:b4:70:b9:f0:78:44:47:48: 12:4a:7f:1c:fd:ec:61:aa:2a:95:23:be:95:bd:e5: ed:52:43:be:74:ea:13:b1:07:12:1d:69:c8:09:cd: cf:82:52:78:f2:aa:5e:32:09:67:88:f2:1e:16:21: b8:35:4b:1e:a0:87:00:ba:24:86:8b:d2:f1:ab:bd: b7:9d:e9:05:4a:ce:57:99:31:87:16:1f:8f:fd:29: 39:2f:92:bf:2b:1d:4a:c2:4b:c6:6d:73:72:79:d8: 51:31:b1:a1:5d:b6:e1:cf:0e:6c:9f:ae:48:27:bb: ee:28:2b:16:e7:04:91:e1:94:1a:e1:4b:47:4e:bd: d5:53:92:32:56:e5:56:ad:13:2a:61:7e:1d:12:1e: 31:1c:fb:0d:78:1d:ef:46:72:64:82:6e:c7:17:ae: 67:0a:14:39:b8:52:79:bb:fe:06:18:d0:e9:7f:33: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:70:AD:84:9C:4B:B3:1E:63:55:F3:79:88:6D:4F:00:38:88:14 X509v3 Authority Key Identifier: keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bf:69:fb:25:9c:f8:ef:89:88:ed:82:bf:c2:c3:45:59:d5: 11:9b:12:72:55:9c:65:9f:2a:03:3e:30:48:a3:2c:fd:f7:c9: 49:8c:29:9c:8d:8c:86:01:dc:69:16:33:00:af:4b:d1:19:f5: b8:19:fd:2f:1c:fd:d7:fc:b7:b7:02:68:eb:cc:4c:de:f3:30: 46:a5:e4:e1:37:30:35:ff:c6:c9:71:c1:65:6a:47:7e:b8:57: 3d:dd:c0:ef:a6:63:de:8b:86:af:06:f1:33:85:23:0a:54:3e: 48:3e:45:a0:4f:46:83:ac:1d:48:5f:8e:95:19:4a:8e:d8:3c: 17:0f:57:5e:08:09:42:fb:16:3e:e8:27:15:48:e4:89:3f:93: cf:52:d3:07:b3:b6:fe:c9:41:bb:57:5d:e6:c6:82:b4:69:72: 23:93:96:d8:ed:32:a0:59:3c:e0:1a:a2:ec:72:eb:1b:c9:48: 9d:2f:a0:3c:81:56:45:36:89:58:d9:0c:67:24:45:44:c5:54: 00:49:65:e0:a8:41:79:fd:79:39:59:16:66:ae:4a:04:01:8c: 27:3b:eb:9d:22:0e:b2:e2:22:38:49:93:dc:67:89:b3:11:df: bb:f5:9e:a8:63:29:65:95:57:e0:9c:55:17:d0:ca:c4:4f:92: 09:46:2b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeySkRSU5a1uz+G95lXjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk NGExMmUwHhcNMjUxMjE4MjIwMTA2WhcNMjUxMjE5MjIwMTA2WjAzMTEwLwYDVQQD EygzMjE4NzBhZDg0OWM0YmIzMWU2MzU1ZjM3OTg4NmQ0ZjAwMzg4ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqXskloeuoG/vUVlhQOahslLmUiX hIqwQdf1m774aC7nxH5KBtW15q4xSDb2CIyR8sZGCegDHtoEhtmjV6rwGk3CdOkQ eGqw84ntodk7wcl8tHC58HhER0gSSn8c/exhqiqVI76VveXtUkO+dOoTsQcSHWnI Cc3PglJ48qpeMglniPIeFiG4NUseoIcAuiSGi9Lxq723nekFSs5XmTGHFh+P/Sk5 L5K/Kx1KwkvGbXNyedhRMbGhXbbhzw5sn65IJ7vuKCsW5wSR4ZQa4UtHTr3VU5Iy VuVWrRMqYX4dEh4xHPsNeB3vRnJkgm7HF65nChQ5uFJ5u/4GGNDpfzNeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIYcK2EnEuzHmNV83mIbU8AOIgUMB8GA1UdIwQY MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3 LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr9p+yWc +O+JiO2Cv8LDRVnVEZsSclWcZZ8qAz4wSKMs/ffJSYwpnI2MhgHcaRYzAK9L0Rn1 uBn9Lxz91/y3twJo68xM3vMwRqXk4TcwNf/GyXHBZWpHfrhXPd3A76Zj3ouGrwbx M4UjClQ+SD5FoE9Gg6wdSF+OlRlKjtg8Fw9XXggJQvsWPugnFUjkiT+Tz1LTB7O2 /slBu1dd5saCtGlyI5OW2O0yoFk84Bqi7HLrG8lInS+gPIFWRTaJWNkMZyRFRMVU AEll4KhBef15OVkWZq5KBAGMJzvrnSIOsuIiOEmT3GeJsxHfu/WeqGMpZZVX4JxV F9DKxE+SCUYrpw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:00:08 2025 by rpki-client