This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json) Hash identifier: PvZPAF+D0wIJOJ+ksBEz2+9/uyjpCK5kK4jcV4vRHyY= Subject key identifier: F9:BB:BB:D4:C2:DA:CA:DE:47:CF:D7:69:28:C4:BF:14:8D:04:14:05 Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Certificate serial: 019B3A90FD46F498EA094DF675BB49B0C1AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft Manifest number: 1028 Signing time: Sat 20 Dec 2025 07:02:19 +0000 Manifest this update: Sat 20 Dec 2025 07:02:19 +0000 Manifest next update: Sun 21 Dec 2025 07:02:19 +0000 Files and hashes: 1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=) 2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=) 3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=) 4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: ltCJDEkUUD5hAD14nJgyRX1+psgskaAG3/X3/49ikMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:fd:46:f4:98:ea:09:4d:f6:75:bb:49:b0:c1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Validity Not Before: Dec 20 07:02:19 2025 GMT Not After : Dec 21 07:02:19 2025 GMT Subject: CN=f9bbbbd4c2dacade47cfd76928c4bf148d041405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:49:87:a7:d3:f5:21:c4:c6:55:7f:ed:11: 8a:3e:f0:81:f4:86:89:62:10:c9:e7:59:83:1d:4f: aa:00:49:10:dd:45:df:d8:61:56:dc:98:b2:99:3a: 47:6d:9f:dc:64:81:0a:3b:40:27:a3:ae:ef:44:4e: 0c:9d:89:5b:92:5f:e1:a5:07:5a:51:72:0f:2a:d2: 60:e4:12:d2:31:22:42:84:05:a0:bd:e6:f0:f1:88: 02:6e:8d:3f:9f:49:21:8c:4f:43:59:5c:aa:29:db: 9c:04:b8:ed:41:ac:45:aa:bd:6e:d5:cf:7f:ee:5c: 07:d0:6e:47:a6:18:3c:0b:35:2b:a7:4d:ea:31:2f: 4f:30:3f:9a:24:bb:f8:99:6b:66:f9:6b:14:ee:d0: 1c:30:be:0a:a1:22:3f:f6:52:05:1b:7c:02:f0:bc: ac:38:f8:7e:df:4e:37:4e:21:3e:15:77:ed:01:ed: 22:30:97:8f:89:4d:3c:15:76:fe:fd:27:ec:96:fb: d3:2c:df:2d:13:c2:e8:6f:d8:09:99:1b:e1:f9:cc: 6b:9d:96:36:51:51:2a:25:74:47:46:73:a6:db:85: af:4d:a5:ba:47:9a:6f:2d:3d:69:f2:19:0a:8b:61: fc:b6:7b:ab:ca:6a:65:68:ee:20:2d:7e:be:17:cf: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BB:BB:D4:C2:DA:CA:DE:47:CF:D7:69:28:C4:BF:14:8D:04:14:05 X509v3 Authority Key Identifier: keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7f:66:1d:a4:de:66:6b:de:a6:81:ab:86:1f:6e:64:8c:4b: cd:1d:15:62:1f:20:a9:ef:86:dd:37:2c:4f:63:dc:b2:7f:7d: f3:3f:d6:47:54:d0:5d:b5:3f:20:4f:f1:70:ae:a5:e8:fc:4b: 5f:70:22:8c:db:63:53:9d:d0:83:ed:08:05:6d:68:11:92:fb: 4e:bb:ea:5f:8d:c1:d3:26:de:56:24:4a:1a:77:02:10:61:33: 71:d4:4b:20:fe:92:e3:e1:81:b0:01:1b:14:fb:ac:e7:61:c3: 6f:22:c1:50:66:99:96:9e:d0:fd:29:20:10:fc:59:bc:03:1c: ca:39:5c:e6:2c:61:b4:6b:d6:62:4a:a7:e8:ea:70:b0:fd:e8: cd:9a:06:6f:fd:29:24:12:ba:8f:bb:1b:7f:98:7e:66:4b:a8: fd:5f:8a:d9:a3:c4:6c:84:f8:50:0e:af:18:cd:5b:f2:3d:49: e6:8f:cd:55:0e:b4:0e:80:42:cb:5c:3a:00:63:ca:ab:b7:ab: 9b:23:50:b9:61:1f:48:31:b8:46:61:80:06:2d:ff:c6:9e:60: 58:37:d4:fb:ef:70:94:a5:93:11:03:fe:e1:35:3e:b6:d1:9a: 10:af:75:21:4e:29:61:38:c6:c0:a8:37:5f:6f:bb:ea:d8:55: d1:9a:78:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kP1G9JjqCU32dbtJsMGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw ZjE4NjUwHhcNMjUxMjIwMDcwMjE5WhcNMjUxMjIxMDcwMjE5WjAzMTEwLwYDVQQD EyhmOWJiYmJkNGMyZGFjYWRlNDdjZmQ3NjkyOGM0YmYxNDhkMDQxNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ5Jh6fT9SHExlV/7RGKPvCB9IaJ YhDJ51mDHU+qAEkQ3UXf2GFW3JiymTpHbZ/cZIEKO0Ano67vRE4MnYlbkl/hpQda UXIPKtJg5BLSMSJChAWgvebw8YgCbo0/n0khjE9DWVyqKducBLjtQaxFqr1u1c9/ 7lwH0G5Hphg8CzUrp03qMS9PMD+aJLv4mWtm+WsU7tAcML4KoSI/9lIFG3wC8Lys OPh+3043TiE+FXftAe0iMJePiU08FXb+/SfslvvTLN8tE8Lob9gJmRvh+cxrnZY2 UVEqJXRHRnOm24WvTaW6R5pvLT1p8hkKi2H8tnurymplaO4gLX6+F8808wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm7u9TC2sreR8/XaSjEvxSNBBQFMB8GA1UdIwQY MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX9mHaTe ZmvepoGrhh9uZIxLzR0VYh8gqe+G3TcsT2Pcsn998z/WR1TQXbU/IE/xcK6l6PxL X3AijNtjU53Qg+0IBW1oEZL7TrvqX43B0ybeViRKGncCEGEzcdRLIP6S4+GBsAEb FPus52HDbyLBUGaZlp7Q/SkgEPxZvAMcyjlc5ixhtGvWYkqn6OpwsP3ozZoGb/0p JBK6j7sbf5h+Zkuo/V+K2aPEbIT4UA6vGM1b8j1J5o/NVQ60DoBCy1w6AGPKq7er myNQuWEfSDG4RmGABi3/xp5gWDfU++9wlKWTEQP+4TU+ttGaEK91IU4pYTjGwKg3 X2+76thV0Zp4lQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:53 2025 by rpki-client