This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json) Hash identifier: eC5ZP/xcMSyMCKoo+Kdv9j81pHY0YOLMF0j/yQcJZH8= Subject key identifier: 8E:89:FD:32:35:49:FE:9C:FD:36:99:A4:14:6C:41:D0:C8:27:B9:D2 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019B3D90F575ACCA8F24F6FC5D2427A622E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft Manifest number: 1011 Signing time: Sat 20 Dec 2025 21:01:08 +0000 Manifest this update: Sat 20 Dec 2025 21:01:08 +0000 Manifest next update: Sun 21 Dec 2025 21:01:08 +0000 Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: QteJRy0JBYc0DV0EKrAHPDLbjGlCyDjn28bWQQY/N0Y=) 2: 7tcWpWZUfFjRAri1J6RRc98qQHs.roa (hash: UMCFQzzz1Y9tdAH7wk0WZ6bxV8IcxDs3YEnSy4ipSic=) 3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:f5:75:ac:ca:8f:24:f6:fc:5d:24:27:a6:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Dec 20 21:01:08 2025 GMT Not After : Dec 21 21:01:08 2025 GMT Subject: CN=8e89fd323549fe9cfd3699a4146c41d0c827b9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:cb:cb:ee:55:e3:93:a2:31:34:78:2d:54: 35:72:63:f8:b1:97:b2:e2:08:a5:3e:54:ce:52:6c: 4a:5d:d7:ab:04:06:30:30:05:13:ee:d8:64:db:f3: 9f:3b:d4:29:35:8c:00:0e:1e:65:0c:c8:1d:1f:38: 84:01:cf:9b:c6:18:a5:97:38:9b:dc:0b:8c:37:d6: a7:0d:10:1a:83:82:50:ce:c4:fc:6c:19:af:fd:ae: 3f:d3:ba:27:7d:40:ff:62:d6:98:07:62:05:b4:b7: 04:19:64:49:a5:5d:d1:af:11:bb:9b:a6:ac:94:a0: 88:88:85:ce:f9:cd:f7:d2:78:0d:06:4e:bd:d8:30: bb:b0:63:3c:3c:01:c3:99:0e:c5:25:be:7e:b7:0d: 71:90:00:4f:0c:5b:3e:64:4c:5d:64:94:55:7a:cd: fa:93:27:30:50:b8:cf:48:da:57:09:8f:68:d4:36: 1f:d0:e1:bb:61:b1:ff:c3:a5:4a:9c:fd:26:ba:a8: f6:68:d3:b5:f3:d8:ce:59:63:a5:04:e2:16:1c:d9: b5:3c:e2:5c:ce:b4:16:7e:6c:d0:6f:38:82:60:cc: 4e:c4:22:23:c4:c2:7a:88:74:f3:19:c6:2f:b4:ec: a7:98:54:99:b2:11:25:4f:09:fd:e6:1d:da:0e:d6: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:FD:32:35:49:FE:9C:FD:36:99:A4:14:6C:41:D0:C8:27:B9:D2 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:6b:0f:35:ac:7c:11:be:2b:3b:44:01:35:0c:b4:b4:bb: 0d:b7:02:82:19:a2:b6:39:bb:b9:f2:1c:82:74:4a:98:6d:1a: 89:39:00:78:62:46:ae:08:2a:8f:13:c7:ce:bd:0e:42:06:b1: fd:92:83:08:a8:19:1a:fb:67:2e:c4:0d:e1:c4:23:77:ee:45: 74:11:b9:15:b3:6a:88:d2:ba:32:74:81:a6:90:d0:a3:fd:28: 85:c6:69:7c:fb:b6:ee:f7:09:01:66:0d:84:b8:54:cc:1d:25: 6f:45:3d:58:0d:e4:0f:9c:7a:f2:52:06:5e:0e:e7:20:96:e7: dc:a8:31:8e:67:95:cf:22:a2:7a:e4:c3:73:20:af:22:04:e0: dd:76:30:40:f7:12:2a:bb:9a:8b:54:01:42:87:d4:58:60:a7: 52:cc:fc:71:60:8c:bb:46:95:81:e2:76:ef:c1:0a:1b:cd:fd: 4f:d9:6f:eb:12:be:54:88:c5:08:00:de:15:03:85:5a:f2:f8: 89:c5:4e:e8:03:15:2b:e5:13:a5:3a:34:95:36:49:0f:5e:63: 7b:47:fc:34:0c:f6:c2:4a:51:4e:93:3d:3f:4e:5a:d9:d0:1f: 91:a6:ab:41:7a:9c:ba:32:71:10:1a:4c:71:9a:38:11:cc:bf: 29:c3:d5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kPV1rMqPJPb8XSQnpiLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMjIwMjEwMTA4WhcNMjUxMjIxMjEwMTA4WjAzMTEwLwYDVQQD Eyg4ZTg5ZmQzMjM1NDlmZTljZmQzNjk5YTQxNDZjNDFkMGM4MjdiOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrrLy+5V45OiMTR4LVQ1cmP4sZey 4gilPlTOUmxKXderBAYwMAUT7thk2/OfO9QpNYwADh5lDMgdHziEAc+bxhillzib 3AuMN9anDRAag4JQzsT8bBmv/a4/07onfUD/YtaYB2IFtLcEGWRJpV3RrxG7m6as lKCIiIXO+c330ngNBk692DC7sGM8PAHDmQ7FJb5+tw1xkABPDFs+ZExdZJRVes36 kycwULjPSNpXCY9o1DYf0OG7YbH/w6VKnP0muqj2aNO189jOWWOlBOIWHNm1POJc zrQWfmzQbziCYMxOxCIjxMJ6iHTzGcYvtOynmFSZshElTwn95h3aDtYkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6J/TI1Sf6c/TaZpBRsQdDIJ7nSMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL5rDzWs fBG+KztEATUMtLS7DbcCghmitjm7ufIcgnRKmG0aiTkAeGJGrggqjxPHzr0OQgax /ZKDCKgZGvtnLsQN4cQjd+5FdBG5FbNqiNK6MnSBppDQo/0ohcZpfPu27vcJAWYN hLhUzB0lb0U9WA3kD5x68lIGXg7nIJbn3KgxjmeVzyKieuTDcyCvIgTg3XYwQPcS Kruai1QBQofUWGCnUsz8cWCMu0aVgeJ278EKG839T9lv6xK+VIjFCADeFQOFWvL4 icVO6AMVK+UTpTo0lTZJD15je0f8NAz2wkpRTpM9P05a2dAfkaarQXqcujJxEBpM cZo4Ecy/KcPVcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:32 2025 by rpki-client