This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json) Hash identifier: X9pHJjCmH2arofqyfrsPwVxVrOSqZ+H0yDoFFt7Ggxk= Subject key identifier: E8:62:09:11:8E:DE:74:ED:58:3E:3F:27:66:54:53:5E:52:EC:81:54 Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019B39B3BF15017701A7BCED4918B7B65E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft Manifest number: 152D Signing time: Sat 20 Dec 2025 03:00:39 +0000 Manifest this update: Sat 20 Dec 2025 03:00:39 +0000 Manifest next update: Sun 21 Dec 2025 03:00:39 +0000 Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=) 2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: hBypph7n6S8QDhmXlZxy+os1qCHEzx6afSLzh3QM3y8=) 3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:bf:15:01:77:01:a7:bc:ed:49:18:b7:b6:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Dec 20 03:00:39 2025 GMT Not After : Dec 21 03:00:39 2025 GMT Subject: CN=e86209118ede74ed583e3f276654535e52ec8154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:17:eb:39:69:65:97:a1:cd:e4:f2:65:e6: 72:a3:f9:50:48:11:70:78:f5:a1:10:e3:cf:e6:ab: e0:f2:b2:7d:15:96:b7:18:e6:23:6e:54:ad:15:1b: fd:e1:f4:c4:22:80:68:e0:dc:f5:68:e9:c3:82:a1: c7:bb:39:60:c6:bf:ba:cb:6e:32:fb:69:1d:e3:99: 45:50:36:f9:6c:35:20:14:ed:12:9f:98:e1:9a:9e: 11:6a:18:f5:e2:1f:e8:1f:22:35:4b:72:90:22:93: fa:c5:e5:04:fb:6f:74:e2:ab:72:cf:18:0f:7f:1c: b2:ff:86:76:fd:e1:c0:76:ff:59:75:d0:ec:5a:83: 72:e0:b4:5e:0c:6f:74:92:8a:76:d4:a8:88:61:1d: a9:a9:9a:4b:70:76:b3:eb:09:37:89:51:a0:cb:f9: b4:f3:db:24:e7:02:b7:3d:97:db:8e:3a:07:74:2f: 38:78:b8:20:ae:ab:98:51:87:a1:b6:e4:7a:2f:18: b4:6c:e5:a4:68:18:95:2e:cf:f0:84:ab:b1:57:c8: 76:83:c8:56:e8:6a:bb:56:6b:51:d2:4a:92:b2:37: 7a:d3:92:ae:d7:25:a0:c4:3e:17:74:59:a0:2a:ba: 9c:b4:b0:5a:a7:c0:56:1f:2f:30:aa:81:ad:eb:58: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:62:09:11:8E:DE:74:ED:58:3E:3F:27:66:54:53:5E:52:EC:81:54 X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:af:7e:dc:4b:34:f7:dc:af:be:1b:fe:83:9f:81:9f:39: d0:9a:c8:93:90:cd:8d:90:79:51:0e:f9:d3:d8:b4:ba:52:b3: 46:62:82:a9:9e:92:83:8f:b2:a8:d4:09:29:3a:f9:da:34:d5: 5b:2b:25:4a:94:95:e8:fe:f7:4b:aa:ba:40:57:31:8f:72:6a: a7:a9:5f:8d:34:78:26:53:f0:49:14:08:4e:40:3c:e8:65:c7: f5:8f:88:ad:af:cc:99:fe:64:f0:aa:93:cd:35:cc:a4:2f:84: e9:ed:b5:90:7a:5c:56:38:2d:0c:57:19:a3:bb:36:d1:7a:69: f9:3e:60:3a:18:ca:33:61:21:86:b9:c2:8b:93:8f:9f:ab:ab: ab:29:fc:a7:d5:7f:c7:9e:c4:69:a3:04:3e:ff:14:a2:94:e8: 9a:2f:e7:85:09:a0:f9:3c:10:23:b4:64:fe:50:8e:da:48:7f: a9:63:ed:fb:e1:0c:b1:8e:1f:2a:e4:1d:b3:0b:0e:45:76:5c: 4a:63:c9:da:25:d9:52:88:e0:80:31:87:eb:e7:2d:84:c7:70: e0:12:92:9b:ca:ca:3b:b9:ba:b9:5b:1f:84:fa:c3:4a:8b:58: 1c:9e:64:70:50:16:db:17:51:5b:6d:62:a7:bf:cb:f4:c2:e4: 0a:a1:a0:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s78VAXcBp7ztSRi3tl6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjUxMjIwMDMwMDM5WhcNMjUxMjIxMDMwMDM5WjAzMTEwLwYDVQQD EyhlODYyMDkxMThlZGU3NGVkNTgzZTNmMjc2NjU0NTM1ZTUyZWM4MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgQX6zlpZZehzeTyZeZyo/lQSBFw ePWhEOPP5qvg8rJ9FZa3GOYjblStFRv94fTEIoBo4Nz1aOnDgqHHuzlgxr+6y24y +2kd45lFUDb5bDUgFO0Sn5jhmp4Rahj14h/oHyI1S3KQIpP6xeUE+2904qtyzxgP fxyy/4Z2/eHAdv9ZddDsWoNy4LReDG90kop21KiIYR2pqZpLcHaz6wk3iVGgy/m0 89sk5wK3PZfbjjoHdC84eLggrquYUYehtuR6Lxi0bOWkaBiVLs/whKuxV8h2g8hW 6Gq7VmtR0kqSsjd605Ku1yWgxD4XdFmgKrqctLBap8BWHy8wqoGt61jblQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhiCRGO3nTtWD4/J2ZUU15S7IFUMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNKvftxL NPfcr74b/oOfgZ850JrIk5DNjZB5UQ7509i0ulKzRmKCqZ6Sg4+yqNQJKTr52jTV WyslSpSV6P73S6q6QFcxj3Jqp6lfjTR4JlPwSRQITkA86GXH9Y+Ira/Mmf5k8KqT zTXMpC+E6e21kHpcVjgtDFcZo7s20Xpp+T5gOhjKM2EhhrnCi5OPn6urqyn8p9V/ x57EaaMEPv8UopTomi/nhQmg+TwQI7Rk/lCO2kh/qWPt++EMsY4fKuQdswsORXZc SmPJ2iXZUojggDGH6+cthMdw4BKSm8rKO7m6uVsfhPrDSotYHJ5kcFAW2xdRW21i p7/L9MLkCqGgfQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:35:35 2025 by rpki-client