This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json) Hash identifier: lapyqgAQLfT1/qVzBPfu0V2Sdu6hxON0RTXbgZLAAns= Subject key identifier: 2B:60:C0:8F:9D:56:21:29:DD:BA:76:E2:49:DD:61:DC:50:6E:20:C0 Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Certificate serial: 019B52CEFFF9E32C7A879F640B64CE2E3263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft Manifest number: 16CA Signing time: Thu 25 Dec 2025 00:00:56 +0000 Manifest this update: Thu 25 Dec 2025 00:00:56 +0000 Manifest next update: Fri 26 Dec 2025 00:00:56 +0000 Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=) 2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: 7nKvAxnh2ywDl3JM4++6xFeowULua7WYcem2LgUgfSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:ff:f9:e3:2c:7a:87:9f:64:0b:64:ce:2e:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Validity Not Before: Dec 25 00:00:56 2025 GMT Not After : Dec 26 00:00:56 2025 GMT Subject: CN=2b60c08f9d562129ddba76e249dd61dc506e20c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:85:3f:12:85:15:dc:d7:50:ea:0d:3c:a4: 01:08:ba:dc:f2:15:cb:e5:c1:c3:91:30:ee:6a:ee: cf:09:48:dd:fa:77:cd:fa:6d:22:0d:18:59:fd:d7: c9:ba:3e:48:a6:f1:ef:a3:7e:e5:25:b8:fd:8e:60: a6:b9:84:14:0a:d0:fb:ac:fa:5c:45:71:f2:18:9d: e2:34:a9:6f:5b:26:7d:b0:71:e5:e1:41:bc:67:7b: 58:2a:fd:77:2a:ff:eb:f7:5f:a9:f9:06:c8:fa:90: 61:11:e6:4d:e6:3f:4e:0d:26:fb:52:7b:08:51:01: a3:ea:19:cd:9a:e0:a6:5d:f6:a9:99:13:3e:4b:7a: 60:d5:64:5f:80:d4:37:c5:99:1b:ff:e5:6b:c9:65: 7b:60:17:07:1b:1c:c3:40:4a:37:f6:29:0e:7c:72: 4f:41:51:1d:eb:50:6e:a8:23:65:25:ac:c1:63:fa: 4c:43:27:bb:6c:21:31:ba:a9:a3:bd:f2:2b:d6:83: 4f:4f:e4:80:f9:0b:ab:f2:a1:43:d8:dc:bb:ce:8a: c3:07:36:6e:7d:ea:e3:36:d1:79:43:3d:25:22:d4: 81:9d:ea:93:2d:1a:6d:b4:ed:5c:e2:34:5b:d3:d9: dc:3c:f2:c6:11:1e:54:2e:ce:fc:ae:1c:d4:d0:4e: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:60:C0:8F:9D:56:21:29:DD:BA:76:E2:49:DD:61:DC:50:6E:20:C0 X509v3 Authority Key Identifier: keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:43:99:f7:a0:bf:3c:f9:96:71:01:26:fa:40:2d:78:6f:d9: e6:41:b6:b6:5e:3e:6e:bc:31:4b:44:bb:0a:54:c5:80:d0:38: 0e:5c:b3:06:1e:d5:69:f7:bb:ed:aa:56:e4:2e:e8:fa:5d:e8: a5:6e:b5:60:ed:e3:82:cd:5f:09:b7:5c:51:c5:ac:0a:fc:70: d6:e7:fd:9d:b1:05:0e:20:2a:61:83:2d:0a:6f:f1:ea:b3:35: e7:14:94:fa:85:f3:27:8a:3a:50:59:aa:58:dd:3c:56:0e:25: fb:9c:66:17:8f:64:a3:4b:d3:ed:68:ec:ee:47:af:79:05:74: 0d:72:fb:8e:86:f9:c3:6f:d1:f0:24:56:8c:60:88:28:e9:94: e8:76:46:bf:c8:51:1e:24:0a:dd:c2:05:b9:9a:7d:4e:3e:a9: 71:b7:0e:6d:8b:e3:cb:01:2d:9a:ec:a3:f2:50:78:e3:f8:21: aa:6b:15:2c:f5:41:bc:99:be:32:7a:be:18:89:3e:55:f5:b9: ac:90:25:76:2c:6f:ec:ff:fe:72:83:90:bb:93:8a:42:d8:82: 51:09:23:82:b0:d8:7a:b8:e7:95:17:35:7b:48:31:35:31:35: 87:96:9e:8a:59:c6:3d:25:d7:15:b4:ff:d3:ca:64:cc:9c:e8: bc:59:14:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzv/54yx6h59kC2TOLjJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmJiODFkODIzMDY5ZGQ4MjRkOGQ4ZDgyYzhkYmZiMzA1 ZGI5OGYwHhcNMjUxMjI1MDAwMDU2WhcNMjUxMjI2MDAwMDU2WjAzMTEwLwYDVQQD EygyYjYwYzA4ZjlkNTYyMTI5ZGRiYTc2ZTI0OWRkNjFkYzUwNmUyMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl+FPxKFFdzXUOoNPKQBCLrc8hXL 5cHDkTDuau7PCUjd+nfN+m0iDRhZ/dfJuj5IpvHvo37lJbj9jmCmuYQUCtD7rPpc RXHyGJ3iNKlvWyZ9sHHl4UG8Z3tYKv13Kv/r91+p+QbI+pBhEeZN5j9ODSb7UnsI UQGj6hnNmuCmXfapmRM+S3pg1WRfgNQ3xZkb/+VryWV7YBcHGxzDQEo39ikOfHJP QVEd61BuqCNlJazBY/pMQye7bCExuqmjvfIr1oNPT+SA+Qur8qFD2Ny7zorDBzZu ferjNtF5Qz0lItSBneqTLRpttO1c4jRb09ncPPLGER5ULs78rhzU0E7AZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtgwI+dViEp3bp24kndYdxQbiDAMB8GA1UdIwQY MBaAFGy7uB2CMGndgk2NjYLI2/swXbmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3Njkt OGQ2NWY0ZWU5MWRmLzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3NjktOGQ2NWY0ZWU5MWRm LzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0OZ96C/ PPmWcQEm+kAteG/Z5kG2tl4+brwxS0S7ClTFgNA4DlyzBh7Vafe77apW5C7o+l3o pW61YO3jgs1fCbdcUcWsCvxw1uf9nbEFDiAqYYMtCm/x6rM15xSU+oXzJ4o6UFmq WN08Vg4l+5xmF49ko0vT7Wjs7keveQV0DXL7job5w2/R8CRWjGCIKOmU6HZGv8hR HiQK3cIFuZp9Tj6pcbcObYvjywEtmuyj8lB44/ghqmsVLPVBvJm+Mnq+GIk+VfW5 rJAldixv7P/+coOQu5OKQtiCUQkjgrDYerjnlRc1e0gxNTE1h5aeilnGPSXXFbT/ 08pkzJzovFkUZQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:16:03 2025 by rpki-client