This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json) Hash identifier: oEMd6gdzpZMaXqmOtV/YsOxAC4wRl79OWXRUyRv2DqY= Subject key identifier: 16:31:86:95:58:D5:DA:15:FC:F8:95:57:B1:BC:FF:76:C8:A4:03:CA Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Certificate serial: 019B405C497070307DBAA6CC56CF74E8C269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft Manifest number: 102B Signing time: Sun 21 Dec 2025 10:02:28 +0000 Manifest this update: Sun 21 Dec 2025 10:02:28 +0000 Manifest next update: Mon 22 Dec 2025 10:02:28 +0000 Files and hashes: 1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=) 2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=) 3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=) 4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: KD7o2nITnCiJUKEnBsXEapAwTnSbq8KprTjvCankeeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:49:70:70:30:7d:ba:a6:cc:56:cf:74:e8:c2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Validity Not Before: Dec 21 10:02:28 2025 GMT Not After : Dec 22 10:02:28 2025 GMT Subject: CN=1631869558d5da15fcf89557b1bcff76c8a403ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:b1:b7:38:c9:39:77:03:5f:11:32:5c:ff: 3b:80:ae:b7:9e:82:2c:8d:b1:67:db:0e:b6:f5:7d: f8:11:46:1e:fe:62:cc:ae:b8:5c:dc:22:d3:58:f3: 89:b1:33:a3:d8:5a:68:a8:e6:83:52:87:0f:bb:c0: 6b:04:54:c1:9c:d3:2d:4f:6c:24:2e:b3:a5:e0:67: cb:fb:23:4f:16:eb:bf:ea:78:d4:ef:29:b7:02:4b: f5:ab:49:6a:bf:a2:fb:a5:c2:08:1d:58:69:85:ee: 3b:73:e1:27:7d:8a:67:22:53:1c:89:60:f8:1a:b4: de:68:8d:f5:91:50:8c:a8:b0:01:42:71:fe:ec:56: 56:c0:c6:55:a6:7b:27:51:76:3d:7a:28:bf:5c:e0: 7e:e5:b7:c8:a2:ee:fb:47:01:6d:81:3a:c5:36:c1: c0:94:2c:34:dc:05:c7:e3:ab:c2:6a:4f:0e:ea:29: 85:a5:0c:e3:2a:2c:38:88:98:c1:32:ce:00:ef:25: 04:0a:6e:8b:e9:cf:bd:df:d5:b8:60:3b:33:b1:aa: fb:7e:a9:b1:79:4b:28:75:71:8e:61:43:a7:23:08: f1:43:1f:7f:14:9e:d8:d6:f1:f5:0a:59:36:93:15: 79:56:9c:fd:94:2d:fb:bd:47:c7:76:7f:ad:2c:12: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:86:95:58:D5:DA:15:FC:F8:95:57:B1:BC:FF:76:C8:A4:03:CA X509v3 Authority Key Identifier: keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:69:5b:43:eb:6a:0d:95:7c:0e:0e:b5:db:1f:28:e3:41:62: 7e:03:d7:53:eb:e5:a2:09:01:89:06:e8:03:c7:41:44:7b:c7: 4e:b2:98:db:74:89:b5:c9:b5:52:66:ec:ea:ea:01:ab:81:91: 3f:6c:01:ad:ac:97:8f:6f:60:e3:a2:27:f2:f3:b2:fa:21:79: e7:f9:2b:bb:18:72:7a:46:5d:4f:ad:32:0e:60:15:20:35:f0: a8:68:db:aa:c9:ba:85:35:b2:ec:67:ef:29:13:f1:00:a4:cf: 41:6e:6d:9f:88:24:86:d0:4c:66:e3:36:31:81:50:36:93:42: 2f:2a:a8:94:3d:9b:fb:8d:7c:23:09:a9:51:51:45:42:8f:83: 8f:de:81:da:55:97:c5:cb:3a:09:7c:c5:2d:ec:3b:71:9c:ee: ab:80:d2:80:2f:aa:f5:1d:f9:fe:7a:19:25:f4:f2:71:43:1d: cf:00:9e:60:bf:2d:84:a8:a6:4d:0d:c9:22:80:46:f0:cf:2e: d1:2d:74:a9:b5:29:26:75:ff:1d:37:7a:87:e7:cf:30:09:67: 1a:bf:e4:26:54:46:01:30:75:85:fb:5f:2c:41:9d:ab:07:d1: 13:e5:8d:5d:9d:59:f0:dc:6e:bd:34:9b:62:05:54:d0:ee:61: 81:d9:88:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXElwcDB9uqbMVs906MJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw ZjE4NjUwHhcNMjUxMjIxMTAwMjI4WhcNMjUxMjIyMTAwMjI4WjAzMTEwLwYDVQQD EygxNjMxODY5NTU4ZDVkYTE1ZmNmODk1NTdiMWJjZmY3NmM4YTQwM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDixtzjJOXcDXxEyXP87gK63noIs jbFn2w629X34EUYe/mLMrrhc3CLTWPOJsTOj2FpoqOaDUocPu8BrBFTBnNMtT2wk LrOl4GfL+yNPFuu/6njU7ym3Akv1q0lqv6L7pcIIHVhphe47c+EnfYpnIlMciWD4 GrTeaI31kVCMqLABQnH+7FZWwMZVpnsnUXY9eii/XOB+5bfIou77RwFtgTrFNsHA lCw03AXH46vCak8O6imFpQzjKiw4iJjBMs4A7yUECm6L6c+939W4YDszsar7fqmx eUsodXGOYUOnIwjxQx9/FJ7Y1vH1Clk2kxV5Vpz9lC37vUfHdn+tLBJ3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYxhpVY1doV/PiVV7G8/3bIpAPKMB8GA1UdIwQY MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGlbQ+tq DZV8Dg612x8o40FifgPXU+vlogkBiQboA8dBRHvHTrKY23SJtcm1Umbs6uoBq4GR P2wBrayXj29g46In8vOy+iF55/kruxhyekZdT60yDmAVIDXwqGjbqsm6hTWy7Gfv KRPxAKTPQW5tn4gkhtBMZuM2MYFQNpNCLyqolD2b+418IwmpUVFFQo+Dj96B2lWX xcs6CXzFLew7cZzuq4DSgC+q9R35/noZJfTycUMdzwCeYL8thKimTQ3JIoBG8M8u 0S10qbUpJnX/HTd6h+fPMAlnGr/kJlRGATB1hftfLEGdqwfRE+WNXZ1Z8NxuvTSb YgVU0O5hgdmI3A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:44:58 2025 by rpki-client