This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json) Hash identifier: s38/l4ncoF2ovfiNrQS9IHB2MceQCNQvGCUonMYaBig= Subject key identifier: 4C:13:26:A9:94:CF:08:31:8F:A2:03:7A:9E:E7:4D:C4:51:B9:3B:65 Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Certificate serial: 019B42493F8CA63B710AB360D681B94431C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:00:55 +0000 Manifest this update: Sun 21 Dec 2025 19:00:55 +0000 Manifest next update: Mon 22 Dec 2025 19:00:55 +0000 Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: D/zX84XixnpeD1Sd3r0zMm85NCG/0La1IAwBHo8TUIE=) 2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:3f:8c:a6:3b:71:0a:b3:60:d6:81:b9:44:31:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Validity Not Before: Dec 21 19:00:55 2025 GMT Not After : Dec 22 19:00:55 2025 GMT Subject: CN=4c1326a994cf08318fa2037a9ee74dc451b93b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:fa:8e:3c:51:e3:2a:ab:f0:5e:c0:86:66: 39:9f:23:b5:f9:d7:44:3d:8b:ef:41:91:4b:b3:74: 32:0e:e0:b9:4a:20:06:1e:40:f8:47:73:64:2f:80: eb:2a:b0:a8:4e:a4:5b:11:72:83:48:dd:1c:0a:2b: f8:5a:85:98:7c:e1:3c:ce:0d:49:3d:5c:45:57:3a: 8c:07:a7:a7:61:31:e0:9b:46:eb:e8:29:bf:02:b8: df:e9:4c:70:c4:73:66:cb:7e:23:1f:f8:f7:d9:aa: d0:71:c2:8e:bd:cb:88:76:eb:2c:ca:cb:cd:f2:51: 43:99:1b:fb:cd:ee:d8:0b:d2:fd:2f:4e:4d:9a:f6: 93:95:f6:bb:0d:9a:c2:46:3e:73:c0:fe:39:68:2c: 98:5e:80:f7:a2:7c:ed:70:07:ed:9a:b2:6c:3a:22: 7d:ec:a3:7e:cd:97:96:d3:55:60:78:69:9b:03:0f: 76:69:64:a5:d6:80:f3:84:2c:c0:91:22:61:22:11: cd:a0:65:21:ef:3e:f9:45:12:96:ef:87:f1:b7:09: ef:e3:36:6d:20:9d:b7:65:a4:4a:09:ce:df:69:89: 28:79:1d:ca:2c:1f:db:dd:55:dd:79:83:8e:1e:70: 2c:9e:d0:b9:bf:ef:49:b8:74:9c:26:23:cc:9b:d9: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:13:26:A9:94:CF:08:31:8F:A2:03:7A:9E:E7:4D:C4:51:B9:3B:65 X509v3 Authority Key Identifier: keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f8:38:ec:da:f4:e8:e4:40:70:cc:49:ee:8c:4f:dc:6f:93: ba:a6:a6:69:0f:8f:ee:4b:e0:8b:ef:57:c2:cc:bc:03:bd:a2: aa:2c:f3:11:ac:4c:05:5e:d1:09:fc:6b:a1:c2:d4:2c:05:30: cb:15:e1:a9:63:71:75:d5:46:68:3a:5a:d3:cb:4b:50:bf:29: 5c:25:f7:9d:32:f1:bd:a2:fd:6d:08:9a:e2:cc:88:3c:a7:66: 31:3c:5c:11:08:8a:d9:be:2f:1b:ab:c8:44:ec:b7:8f:88:71: 2f:d5:ec:b3:f9:08:24:03:71:1e:0a:16:c5:80:c1:35:a9:60: b3:e3:dc:7a:61:6c:6b:45:a2:b2:14:16:09:b2:aa:9e:f3:48: 3f:23:e0:99:e4:ed:e2:9c:20:24:db:c9:9b:5d:90:79:85:05: 7c:2d:68:d2:c5:4c:ba:c2:bf:bc:e2:43:d3:a2:81:67:5c:d4: 54:a8:cb:2c:9a:b1:a9:19:06:50:0b:d3:6b:42:af:46:da:08: e6:65:e9:0b:95:c2:31:3d:6e:2d:b3:91:f3:7d:11:f7:79:00: 7c:f6:3a:0c:d7:e1:57:cd:1e:cf:5c:72:b9:3e:b9:92:ba:74: 35:10:44:33:a0:cf:4d:57:c8:be:4d:97:1c:53:08:1b:4f:63: 16:4c:7e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCST+MpjtxCrNg1oG5RDHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx Zjg0OTMwHhcNMjUxMjIxMTkwMDU1WhcNMjUxMjIyMTkwMDU1WjAzMTEwLwYDVQQD Eyg0YzEzMjZhOTk0Y2YwODMxOGZhMjAzN2E5ZWU3NGRjNDUxYjkzYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqj6jjxR4yqr8F7AhmY5nyO1+ddE PYvvQZFLs3QyDuC5SiAGHkD4R3NkL4DrKrCoTqRbEXKDSN0cCiv4WoWYfOE8zg1J PVxFVzqMB6enYTHgm0br6Cm/Arjf6UxwxHNmy34jH/j32arQccKOvcuIdussysvN 8lFDmRv7ze7YC9L9L05NmvaTlfa7DZrCRj5zwP45aCyYXoD3onztcAftmrJsOiJ9 7KN+zZeW01VgeGmbAw92aWSl1oDzhCzAkSJhIhHNoGUh7z75RRKW74fxtwnv4zZt IJ23ZaRKCc7faYkoeR3KLB/b3VXdeYOOHnAsntC5v+9JuHScJiPMm9lnowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwTJqmUzwgxj6IDep7nTcRRuTtlMB8GA1UdIwQY MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfg47Nr0 6ORAcMxJ7oxP3G+TuqamaQ+P7kvgi+9Xwsy8A72iqizzEaxMBV7RCfxrocLULAUw yxXhqWNxddVGaDpa08tLUL8pXCX3nTLxvaL9bQia4syIPKdmMTxcEQiK2b4vG6vI ROy3j4hxL9Xss/kIJANxHgoWxYDBNalgs+PcemFsa0WishQWCbKqnvNIPyPgmeTt 4pwgJNvJm12QeYUFfC1o0sVMusK/vOJD06KBZ1zUVKjLLJqxqRkGUAvTa0KvRtoI 5mXpC5XCMT1uLbOR830R93kAfPY6DNfhV80ez1xyuT65krp0NRBEM6DPTVfIvk2X HFMIG09jFkx+Ag== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:33 2025 by rpki-client