This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json) Hash identifier: NiQrnXom+BY3konCdIOSqyss5YQLzaTuFU817MpZQSs= Subject key identifier: C9:07:89:30:CC:37:0E:EB:35:38:C9:CD:38:2D:1F:41:41:82:E3:43 Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Certificate serial: 019B3D5A069F7628981C88270D7764D9C7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft Manifest number: 156D Signing time: Sat 20 Dec 2025 20:01:08 +0000 Manifest this update: Sat 20 Dec 2025 20:01:08 +0000 Manifest next update: Sun 21 Dec 2025 20:01:08 +0000 Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=) 2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 2clKbYIeaag5ziV8AYrYZgqm6BL6m97t4Q0Q7ezjPK4=) 3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:06:9f:76:28:98:1c:88:27:0d:77:64:d9:c7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Validity Not Before: Dec 20 20:01:08 2025 GMT Not After : Dec 21 20:01:08 2025 GMT Subject: CN=c9078930cc370eeb3538c9cd382d1f414182e343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fa:26:ee:a1:08:90:88:7b:68:ac:d0:45:a1: c6:96:69:f9:25:4e:22:60:94:9d:3e:31:cf:ec:00: 22:8b:2e:35:fb:2d:28:42:c3:9f:70:26:2b:79:89: 77:48:58:8f:16:7a:0b:71:60:11:07:f0:87:1a:40: 7b:6d:7c:ae:ba:15:c7:1f:1e:c0:f3:52:39:a3:1f: d5:f8:40:a6:80:6b:33:34:0d:2f:99:6b:73:e3:e2: e8:0f:74:50:e8:72:17:5c:73:fe:c9:51:80:b1:40: 8b:64:5d:3d:49:dc:5e:72:ac:a4:b7:ea:de:ba:94: b8:d2:32:e8:18:cb:99:54:82:a9:b1:47:70:b1:03: 2d:f7:e8:c4:20:60:82:c3:51:06:b5:cd:3c:b7:e5: 23:ca:14:6f:56:f7:c0:51:1d:56:44:43:10:5f:b0: 98:a6:96:3f:42:a5:ab:00:4d:ba:84:53:24:e5:ac: d5:43:45:ca:3b:4d:7f:78:24:cd:18:13:83:e0:06: 79:06:cd:ee:a4:be:00:6b:a7:bd:34:f9:92:c9:60: 61:de:1b:87:65:fc:0b:93:a0:da:c0:56:c2:97:34: 84:31:2c:48:5d:37:2c:ad:a8:92:c0:92:e7:63:f8: 81:7b:a6:b8:b2:98:d1:3d:5f:fa:32:26:5e:24:11: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:07:89:30:CC:37:0E:EB:35:38:C9:CD:38:2D:1F:41:41:82:E3:43 X509v3 Authority Key Identifier: keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:16:b5:2c:22:3d:5d:e5:d5:10:34:29:05:a3:04:11:6d:63: 30:8f:f4:3f:8a:ad:ae:ed:aa:88:65:72:21:a8:8b:19:93:ec: a7:3b:d2:7b:a2:46:5b:f7:43:dc:fb:c0:d9:e8:ca:fc:6e:77: 4e:2e:89:dd:5c:c7:40:d3:d3:84:8d:47:8a:0f:94:f9:b3:81: 05:d4:85:c5:fc:ac:62:a5:65:71:c3:ac:5e:84:74:84:a9:ca: 9d:75:9b:66:af:40:83:5f:f7:2a:da:c7:fb:31:c0:cb:e2:d6: bf:12:5d:b0:54:b7:b1:be:be:84:e6:5c:d9:73:20:25:4f:f4: fb:2e:7a:be:42:c0:72:88:35:34:6f:74:ef:13:30:bf:88:07: 62:b1:4a:9e:c5:9f:c1:60:27:8d:79:e9:36:78:35:e2:ae:6e: 64:79:fb:94:9f:5a:94:ed:70:fd:a3:c3:02:1f:86:d6:95:37: 7e:f5:86:02:8c:7b:65:f7:33:3f:18:67:4d:0a:69:a0:47:a1: 24:18:f2:d2:65:3a:a5:88:94:d1:d9:12:dc:5a:76:9b:ca:e7: ca:5f:e5:45:fb:ce:07:e0:5c:61:0a:66:bb:3b:0f:e5:31:fc: d8:ac:13:b8:85:3c:18:35:6b:9a:c6:eb:65:ee:39:d2:87:e9: 29:75:cd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgafdiiYHIgnDXdk2ce/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw OWY0OTkwHhcNMjUxMjIwMjAwMTA4WhcNMjUxMjIxMjAwMTA4WjAzMTEwLwYDVQQD EyhjOTA3ODkzMGNjMzcwZWViMzUzOGM5Y2QzODJkMWY0MTQxODJlMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Pom7qEIkIh7aKzQRaHGlmn5JU4i YJSdPjHP7AAiiy41+y0oQsOfcCYreYl3SFiPFnoLcWARB/CHGkB7bXyuuhXHHx7A 81I5ox/V+ECmgGszNA0vmWtz4+LoD3RQ6HIXXHP+yVGAsUCLZF09Sdxecqykt+re upS40jLoGMuZVIKpsUdwsQMt9+jEIGCCw1EGtc08t+UjyhRvVvfAUR1WREMQX7CY ppY/QqWrAE26hFMk5azVQ0XKO01/eCTNGBOD4AZ5Bs3upL4Aa6e9NPmSyWBh3huH ZfwLk6DawFbClzSEMSxIXTcsraiSwJLnY/iBe6a4spjRPV/6MiZeJBE47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkHiTDMNw7rNTjJzTgtH0FBguNDMB8GA1UdIwQY MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRa1LCI9 XeXVEDQpBaMEEW1jMI/0P4qtru2qiGVyIaiLGZPspzvSe6JGW/dD3PvA2ejK/G53 Ti6J3VzHQNPThI1Hig+U+bOBBdSFxfysYqVlccOsXoR0hKnKnXWbZq9Ag1/3KtrH +zHAy+LWvxJdsFS3sb6+hOZc2XMgJU/0+y56vkLAcog1NG907xMwv4gHYrFKnsWf wWAnjXnpNng14q5uZHn7lJ9alO1w/aPDAh+G1pU3fvWGAox7ZfczPxhnTQppoEeh JBjy0mU6pYiU0dkS3Fp2m8rnyl/lRfvOB+BcYQpmuzsP5TH82KwTuIU8GDVrmsbr Ze450ofpKXXNHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:42 2025 by rpki-client