This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json) Hash identifier: dGLkjd0Wk1bqG7fYsQgSsPwBtQSMvsoebb7VVEUYTBs= Subject key identifier: 26:02:B1:EB:BD:2A:AC:EC:A4:97:2F:4E:B1:B7:65:A6:EE:74:B2:72 Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Certificate serial: 019B3B34FFCD8ED7A9D7B451A1E5B1AD10C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft Manifest number: 0692 Signing time: Sat 20 Dec 2025 10:01:27 +0000 Manifest this update: Sat 20 Dec 2025 10:01:27 +0000 Manifest next update: Sun 21 Dec 2025 10:01:27 +0000 Files and hashes: 1: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (hash: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=) 2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: orVNQKgEgYOQuf6is6aBiHA7Wd+z5DV9WVVVyEIYbL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ff:cd:8e:d7:a9:d7:b4:51:a1:e5:b1:ad:10:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13 Validity Not Before: Dec 20 10:01:27 2025 GMT Not After : Dec 21 10:01:27 2025 GMT Subject: CN=2602b1ebbd2aaceca4972f4eb1b765a6ee74b272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:f0:2e:78:24:1b:d2:9d:ba:e4:4b:a1:a8: 0c:4d:5a:a4:c3:e1:b6:2d:3e:1f:c6:4e:88:45:e7: 46:11:28:15:e5:b8:e7:e7:68:09:7d:0e:74:e3:69: f0:3d:c9:d3:e8:f6:12:38:79:17:34:bf:b6:33:68: 7f:d6:e2:49:6e:23:6e:ae:2e:b3:bb:36:05:58:db: dc:37:96:11:d9:6c:62:80:8f:7f:ec:2e:12:46:f4: 9e:b6:ce:6c:48:22:9c:78:49:c2:16:1f:b5:99:96: e0:8b:56:13:56:b3:eb:c7:90:a3:c5:a6:25:32:15: a2:73:c1:68:07:d2:a9:ee:96:19:cf:c3:9f:e6:a9: aa:d9:85:70:e8:9e:dc:9e:d2:69:0a:83:3b:d6:af: f9:58:69:5a:a1:41:03:66:08:c0:e7:b6:46:a2:ba: a7:64:0a:e3:d8:9f:a3:08:91:2d:7e:06:4c:4a:df: a0:94:d9:cc:f4:b5:1d:1e:96:1d:f6:b4:82:e7:81: 03:52:d9:78:e0:15:23:36:e2:13:eb:6f:5d:c9:ec: a4:e6:11:47:d0:fd:ae:74:7c:7d:64:43:47:d5:22: 49:15:54:67:98:a7:64:e2:ee:56:bc:1b:9c:bd:8c: f5:5f:35:2c:a7:76:4b:24:3a:4c:39:fd:53:1b:10: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:B1:EB:BD:2A:AC:EC:A4:97:2F:4E:B1:B7:65:A6:EE:74:B2:72 X509v3 Authority Key Identifier: keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5c:e7:ce:05:3c:38:57:cc:6f:86:79:53:d8:2b:10:b4:15: c1:1a:2f:34:6b:3d:90:f0:11:45:10:16:40:42:ac:49:20:c8: 58:44:5e:bb:27:1a:dd:a0:d4:98:d4:cd:35:b2:be:54:b6:9b: 30:41:b1:94:4d:6f:35:cc:54:90:d6:b6:ef:33:8d:bd:4e:86: f0:b5:3d:33:0a:ca:89:39:45:a9:82:5b:51:44:92:79:a0:98: ae:1d:61:1c:3a:ed:0f:bd:4d:b4:7d:e6:69:20:f5:9d:b5:e5: 5a:85:ca:b8:ec:eb:ab:6c:87:06:93:aa:7a:b9:d7:5a:e3:62: c1:96:c3:88:b7:9d:c8:7a:1a:41:ec:7e:c0:80:0c:29:bc:04: 3b:6c:7f:3d:b7:6e:ae:31:a9:45:34:a9:ac:53:49:4d:41:b2: 4e:78:a5:b9:ce:41:b5:c8:04:c8:75:1b:41:02:21:47:d3:38: 3f:fd:59:df:50:1d:c3:e2:df:c1:61:a3:01:30:3f:74:ec:10: f2:dc:6b:17:30:96:04:00:98:39:74:ca:df:2a:0e:fc:41:4b: 4a:1a:cc:be:31:54:38:36:51:ab:78:14:39:34:13:02:b5:86: 1b:1c:98:b4:81:52:20:09:60:47:0e:6f:b5:90:fb:80:77:db: 85:a9:42:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NP/Njtep17RRoeWxrRDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWE0NzBkYmFiOWMxYzMzNGYwZjg1ZjQxN2NkMWFhNDI1 ZTlmMTMwHhcNMjUxMjIwMTAwMTI3WhcNMjUxMjIxMTAwMTI3WjAzMTEwLwYDVQQD EygyNjAyYjFlYmJkMmFhY2VjYTQ5NzJmNGViMWI3NjVhNmVlNzRiMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzPwLngkG9KduuRLoagMTVqkw+G2 LT4fxk6IRedGESgV5bjn52gJfQ5042nwPcnT6PYSOHkXNL+2M2h/1uJJbiNuri6z uzYFWNvcN5YR2WxigI9/7C4SRvSets5sSCKceEnCFh+1mZbgi1YTVrPrx5CjxaYl MhWic8FoB9Kp7pYZz8Of5qmq2YVw6J7cntJpCoM71q/5WGlaoUEDZgjA57ZGorqn ZArj2J+jCJEtfgZMSt+glNnM9LUdHpYd9rSC54EDUtl44BUjNuIT629dyeyk5hFH 0P2udHx9ZENH1SJJFVRnmKdk4u5WvBucvYz1XzUsp3ZLJDpMOf1TGxC3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYCseu9KqzspJcvTrG3ZabudLJyMB8GA1UdIwQY MBaAFAZaRw26ucHDNPD4X0F80apCXp8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2Mt NjUwNzhhN2Y2NWI4LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2MtNjUwNzhhN2Y2NWI4 LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlznzgU8 OFfMb4Z5U9grELQVwRovNGs9kPARRRAWQEKsSSDIWEReuyca3aDUmNTNNbK+VLab MEGxlE1vNcxUkNa27zONvU6G8LU9MwrKiTlFqYJbUUSSeaCYrh1hHDrtD71NtH3m aSD1nbXlWoXKuOzrq2yHBpOqernXWuNiwZbDiLedyHoaQex+wIAMKbwEO2x/Pbdu rjGpRTSprFNJTUGyTniluc5BtcgEyHUbQQIhR9M4P/1Z31Adw+LfwWGjATA/dOwQ 8txrFzCWBACYOXTK3yoO/EFLShrMvjFUODZRq3gUOTQTArWGGxyYtIFSIAlgRw5v tZD7gHfbhalC0A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:43 2025 by rpki-client