This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json) Hash identifier: kVsjgn0JoAB7NQuvAhTFbfE5M/dvkoBjaOOZvquIN1A= Subject key identifier: EE:7E:F4:65:FA:95:E4:ED:CA:84:02:C5:C1:28:06:F7:B2:2A:05:D7 Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52 Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452 Certificate serial: 019B337ADE8698C96B472F56B6878EF3A75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft Manifest number: 0510 Signing time: Thu 18 Dec 2025 22:00:48 +0000 Manifest this update: Thu 18 Dec 2025 22:00:48 +0000 Manifest next update: Fri 19 Dec 2025 22:00:48 +0000 Files and hashes: 1: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: /6+bTGu8SNJbjORxYTztERitRsU14IGQhiyFlKXVBQc=) 2: xfuYQjKIwNsH8n8qNl-5nn5swlA.roa (hash: EURGAPm/xAIC/hIpJIK0VPaCfzGhmdAUIaI/It3KKIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:de:86:98:c9:6b:47:2f:56:b6:87:8e:f3:a7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452 Validity Not Before: Dec 18 22:00:48 2025 GMT Not After : Dec 19 22:00:48 2025 GMT Subject: CN=ee7ef465fa95e4edca8402c5c12806f7b22a05d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:c8:ad:5b:6b:95:b9:84:db:93:2c:07:de: 6c:68:bd:4e:ff:60:07:56:3e:b0:56:f4:59:53:b9: ff:37:30:d5:2d:00:3e:2c:13:89:71:3c:98:cd:e1: b2:09:bc:3a:e3:00:27:53:22:ba:b3:4e:4a:cf:7c: a5:7e:69:8d:f1:ff:6d:ea:5a:70:cf:c9:87:be:8c: ba:44:6f:c8:07:a8:0e:df:03:ca:9d:e9:c4:0f:4c: 57:a0:b2:fe:b3:bd:76:00:24:72:88:42:c4:6e:55: 83:81:8e:7f:7d:87:a3:c3:ef:d6:32:61:1d:87:e8: 8e:07:04:66:0f:22:b1:cc:46:2e:cc:d7:9d:3d:1a: 74:b1:21:9b:d2:d6:47:ba:d7:a6:74:6c:c1:da:06: d0:a1:d1:df:71:ba:25:8c:01:57:fc:be:e3:8d:31: 1e:03:29:f1:dd:7a:bd:be:ee:e8:b2:53:76:50:22: 7b:02:4c:80:ba:63:9b:52:67:ab:ae:61:03:04:50: 94:91:0e:73:19:09:c9:3d:85:6c:59:d8:a3:e1:bc: 09:71:55:d9:03:1e:44:e0:30:86:ff:e5:6a:12:3a: 54:80:ce:3f:65:52:7d:35:28:cb:01:98:00:2d:42: 5c:fe:cb:f7:1e:ff:ea:03:d6:3d:13:99:6f:c4:86: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:F4:65:FA:95:E4:ED:CA:84:02:C5:C1:28:06:F7:B2:2A:05:D7 X509v3 Authority Key Identifier: keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:00:fb:f8:0d:da:af:68:1c:4f:5e:45:5c:e8:6b:97:e9:96: 0a:46:a7:fd:40:17:9d:87:fa:e9:1f:45:20:79:44:ff:8d:23: c0:5c:34:24:47:d7:43:ec:66:fa:03:c7:db:0b:a3:2e:cf:d1: 6d:2d:b3:dd:06:e7:e2:de:97:1c:6a:4a:5e:05:47:61:f8:54: 84:55:80:60:9e:cb:28:43:5c:dc:53:fa:89:b9:46:3d:3d:40: 9e:e5:af:6f:8c:94:02:71:69:5f:45:87:27:78:b6:51:5e:24: a6:17:69:f1:8a:cf:d9:27:29:97:d1:f6:36:1e:80:a8:39:ae: e9:e2:39:f2:7b:4d:39:4f:52:9f:c7:2c:74:28:a1:37:05:1e: f1:1a:6b:9e:a7:9d:80:8f:d9:4a:4c:73:1d:65:08:05:90:ba: 3f:13:36:34:18:ce:96:69:24:00:dc:33:83:02:6a:af:8c:69: 2f:02:56:54:7c:4e:1b:30:5d:e8:65:ea:7d:9a:9d:77:c1:c0: b0:8f:a7:7d:2c:7c:fd:2b:ea:6b:0f:63:70:7d:ec:22:0f:d2: 61:86:92:05:13:44:9c:2b:1d:ed:02:91:3c:35:ba:56:9b:65: 77:63:d1:ea:20:9e:58:bf:41:a5:9b:36:b0:4f:0f:59:15:9d: 4f:1f:1f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszet6GmMlrRy9WtoeO86dbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjg1MGRlYjI4YmRiMmY2NTVlMmYxYjAyZDM3YzEzYzZk NDM0NTIwHhcNMjUxMjE4MjIwMDQ4WhcNMjUxMjE5MjIwMDQ4WjAzMTEwLwYDVQQD EyhlZTdlZjQ2NWZhOTVlNGVkY2E4NDAyYzVjMTI4MDZmN2IyMmEwNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA023IrVtrlbmE25MsB95saL1O/2AH Vj6wVvRZU7n/NzDVLQA+LBOJcTyYzeGyCbw64wAnUyK6s05Kz3ylfmmN8f9t6lpw z8mHvoy6RG/IB6gO3wPKnenED0xXoLL+s712ACRyiELEblWDgY5/fYejw+/WMmEd h+iOBwRmDyKxzEYuzNedPRp0sSGb0tZHutemdGzB2gbQodHfcboljAFX/L7jjTEe Aynx3Xq9vu7oslN2UCJ7AkyAumObUmerrmEDBFCUkQ5zGQnJPYVsWdij4bwJcVXZ Ax5E4DCG/+VqEjpUgM4/ZVJ9NSjLAZgALUJc/sv3Hv/qA9Y9E5lvxIaDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5+9GX6leTtyoQCxcEoBveyKgXXMB8GA1UdIwQY MBaAFGy4UN6yi9svZV4vGwLTfBPG1DRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4Yzkt ODhiMmQyY2Y3YzMxLzEvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4YzktODhiMmQyY2Y3YzMx LzEvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQD7+A3a r2gcT15FXOhrl+mWCkan/UAXnYf66R9FIHlE/40jwFw0JEfXQ+xm+gPH2wujLs/R bS2z3Qbn4t6XHGpKXgVHYfhUhFWAYJ7LKENc3FP6iblGPT1AnuWvb4yUAnFpX0WH J3i2UV4kphdp8YrP2Scpl9H2Nh6AqDmu6eI58ntNOU9Sn8csdCihNwUe8Rprnqed gI/ZSkxzHWUIBZC6PxM2NBjOlmkkANwzgwJqr4xpLwJWVHxOGzBd6GXqfZqdd8HA sI+nfSx8/Svqaw9jcH3sIg/SYYaSBRNEnCsd7QKRPDW6Vptld2PR6iCeWL9BpZs2 sE8PWRWdTx8fBw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:20 2025 by rpki-client