This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json) Hash identifier: sNT+Sms/9gQCuJLbe6SZc7piRrKdLEvkuDypwGlJ6+s= Subject key identifier: BC:66:67:F3:93:AF:83:6B:39:B1:EF:77:2D:87:57:07:22:34:BE:41 Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Certificate serial: 019B3FED4EC4BEF3B0F722CF2717CE382EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:01:15 +0000 Manifest this update: Sun 21 Dec 2025 08:01:15 +0000 Manifest next update: Mon 22 Dec 2025 08:01:15 +0000 Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: /rpKGiL1ikQSvUT7QhcyBOv29feKLmMyqaNf2oWKEkY=) 2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:4e:c4:be:f3:b0:f7:22:cf:27:17:ce:38:2e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Validity Not Before: Dec 21 08:01:15 2025 GMT Not After : Dec 22 08:01:15 2025 GMT Subject: CN=bc6667f393af836b39b1ef772d8757072234be41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:47:dd:99:83:f5:c6:5b:d1:de:a3:71:8a: d6:06:00:9b:6d:96:7a:ee:d0:09:d1:ac:91:35:52: ab:82:e1:70:28:b3:42:d0:13:8b:99:a1:0c:38:6c: 6a:df:6d:f4:1c:7e:02:ea:f3:75:9d:15:b4:ef:81: 42:49:72:f6:38:4e:47:59:35:34:4d:bc:fb:61:a4: a9:77:5a:d9:2f:3e:27:93:92:e3:45:ba:8b:7f:6e: d9:aa:90:f0:51:1e:7d:63:f1:02:c2:6a:50:4c:29: e1:31:94:9a:ae:71:7a:6b:48:4d:79:3a:5f:c2:9d: d8:ee:75:06:f6:b1:29:22:aa:83:0e:38:77:63:d6: bb:a6:0e:05:7c:b3:f3:cc:95:5e:01:a3:2c:46:06: e9:30:ac:70:1c:79:d5:b3:e5:7a:89:dd:bf:bb:26: 84:16:e5:15:9a:ac:77:b0:bc:2a:3c:aa:a0:1b:a3: de:3f:21:f1:23:d6:48:10:9c:e6:e0:b5:5c:39:d1: b6:aa:c5:e8:f5:09:4f:53:ec:f0:fe:84:0d:62:31: c2:1b:15:f2:2c:33:a4:e3:00:77:c2:e9:df:6e:22: 30:06:d7:96:06:50:dd:5f:69:93:81:bf:86:03:88: 23:2c:58:c4:18:dc:b8:0a:60:5d:6b:2e:41:b0:5c: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:66:67:F3:93:AF:83:6B:39:B1:EF:77:2D:87:57:07:22:34:BE:41 X509v3 Authority Key Identifier: keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:da:30:59:59:5d:e7:06:e6:44:53:29:54:e6:eb:c5:fe:7a: b7:92:a8:81:14:d5:fd:04:2a:0c:ad:d9:ef:c0:57:3c:41:27: 1f:be:3a:d3:f8:e1:a8:f3:db:d0:87:96:4b:90:17:6b:92:13: 91:e4:65:3c:cc:1b:df:cb:14:9f:6d:96:55:d2:5f:f5:b9:c3: 37:41:b9:c5:91:1d:15:b0:d0:0d:23:10:44:f8:09:2a:af:39: 8b:38:e4:63:bc:9f:d7:54:b0:ec:a0:18:88:64:3f:ad:ca:31: 1b:c5:ca:82:ea:ae:56:eb:82:39:09:61:90:7f:ce:44:f8:0d: fc:1a:bb:77:65:07:8b:28:42:fb:d2:1a:de:54:72:1a:b7:b3: d0:47:5b:02:43:63:ac:57:11:c8:bc:ee:07:db:b4:b2:b8:1e: 7d:e8:83:e8:e4:77:c9:81:60:8a:5f:9d:34:12:da:26:28:99: a4:1a:8b:ad:eb:08:11:59:ba:0e:ee:b9:28:60:e0:2d:ef:eb: 9b:90:f7:1b:a8:af:79:bc:72:8b:c8:ad:b6:08:ff:d6:0f:ba: 2a:59:a6:e1:bd:60:ed:4f:3d:88:a2:3c:83:0e:81:e5:9a:5d: de:de:ea:93:11:3f:95:ea:5c:eb:fb:55:11:81:e8:d0:81:bf: ba:4e:a8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7U7EvvOw9yLPJxfOOC6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk OTdhZjYwHhcNMjUxMjIxMDgwMTE1WhcNMjUxMjIyMDgwMTE1WjAzMTEwLwYDVQQD EyhiYzY2NjdmMzkzYWY4MzZiMzliMWVmNzcyZDg3NTcwNzIyMzRiZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9FH3ZmD9cZb0d6jcYrWBgCbbZZ6 7tAJ0ayRNVKrguFwKLNC0BOLmaEMOGxq3230HH4C6vN1nRW074FCSXL2OE5HWTU0 Tbz7YaSpd1rZLz4nk5LjRbqLf27ZqpDwUR59Y/ECwmpQTCnhMZSarnF6a0hNeTpf wp3Y7nUG9rEpIqqDDjh3Y9a7pg4FfLPzzJVeAaMsRgbpMKxwHHnVs+V6id2/uyaE FuUVmqx3sLwqPKqgG6PePyHxI9ZIEJzm4LVcOdG2qsXo9QlPU+zw/oQNYjHCGxXy LDOk4wB3wunfbiIwBteWBlDdX2mTgb+GA4gjLFjEGNy4CmBday5BsFzfjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxmZ/OTr4NrObHvdy2HVwciNL5BMB8GA1UdIwQY MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9owWVld 5wbmRFMpVObrxf56t5KogRTV/QQqDK3Z78BXPEEnH7460/jhqPPb0IeWS5AXa5IT keRlPMwb38sUn22WVdJf9bnDN0G5xZEdFbDQDSMQRPgJKq85izjkY7yf11Sw7KAY iGQ/rcoxG8XKguquVuuCOQlhkH/ORPgN/Bq7d2UHiyhC+9Ia3lRyGrez0EdbAkNj rFcRyLzuB9u0srgefeiD6OR3yYFgil+dNBLaJiiZpBqLresIEVm6Du65KGDgLe/r m5D3G6ivebxyi8ittgj/1g+6Klmm4b1g7U89iKI8gw6B5Zpd3t7qkxE/lepc6/tV EYHo0IG/uk6onQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:14 2025 by rpki-client