This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json) Hash identifier: iYWCfrw3dUZDNMkiX8wtPbhNE8AYQ/Op6Ug/aB5oJ+w= Subject key identifier: 54:01:15:93:0E:15:E9:AB:1F:7C:57:2E:4F:B3:06:2E:FF:59:2C:B0 Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94 Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594 Certificate serial: 019B5CADBA29F91DA09211D001731FF96D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft Manifest number: 0629 Signing time: Fri 26 Dec 2025 22:00:47 +0000 Manifest this update: Fri 26 Dec 2025 22:00:47 +0000 Manifest next update: Sat 27 Dec 2025 22:00:47 +0000 Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: HBKge8HQpEZzEiSOCKR49mg7stpsuCFYJC2iZ6RRmek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:ba:29:f9:1d:a0:92:11:d0:01:73:1f:f9:6d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594 Validity Not Before: Dec 26 22:00:47 2025 GMT Not After : Dec 27 22:00:47 2025 GMT Subject: CN=540115930e15e9ab1f7c572e4fb3062eff592cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:80:c6:be:46:d1:a6:12:96:16:c3:af:cf: af:b8:51:07:ab:72:fb:27:69:21:c3:2c:59:5b:7f: de:33:ec:a2:a2:35:33:ef:6a:0e:fd:cd:bf:76:fe: 36:79:41:6c:6e:bb:06:e5:e3:7c:93:76:5b:d9:d8: 3d:d5:ff:46:57:c3:78:be:38:22:27:99:8c:e4:e6: c4:17:f7:58:f3:fd:bf:3f:46:fc:7d:8d:d2:47:ab: 61:db:52:68:a5:d2:5d:8d:08:92:e3:42:5e:a1:4c: ae:9f:78:03:e8:b3:53:b8:93:35:05:43:0d:67:78: 61:23:ca:12:b5:91:73:5b:d6:4d:70:c5:9e:b7:86: f9:1a:c8:f0:9e:45:03:38:5f:9a:ab:09:87:c9:c5: 16:71:2b:20:e0:a0:f8:ea:10:8b:c7:5e:f3:80:1a: 57:83:1d:cf:a9:f7:c6:84:33:98:5b:78:4b:55:79: 6f:13:74:bc:c4:d0:4d:e1:50:16:29:de:43:f8:4e: 70:d6:80:23:7a:15:0f:a6:d6:c5:90:e8:d9:ab:6a: 3b:e7:34:f2:16:09:f8:61:d7:e4:3d:d8:9f:cc:91: 4e:d9:23:52:0a:8a:f2:b5:90:2b:9b:78:33:a9:50: d1:6f:a7:4e:f3:2d:4c:e0:82:16:6b:9f:ba:69:11: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:15:93:0E:15:E9:AB:1F:7C:57:2E:4F:B3:06:2E:FF:59:2C:B0 X509v3 Authority Key Identifier: keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:11:c8:18:6b:4b:53:14:24:14:2c:3a:d9:33:b8:dd:c7: 62:c4:49:0d:61:aa:f9:1c:15:08:3c:f1:c3:32:eb:0e:15:40: 31:b7:ec:83:f3:93:7d:26:2f:b1:30:5b:63:d6:c6:7e:cf:fe: fd:ff:50:8e:67:fe:27:8d:8c:18:44:cd:be:69:18:c2:84:aa: c1:ac:d9:ba:0c:f0:e0:41:f3:6d:9e:7c:6b:83:44:08:76:83: e9:bd:b7:a4:f1:02:cc:bc:6d:2a:f0:79:9b:f8:f3:8e:74:6d: 7d:a0:7d:f9:31:8f:75:12:8b:a3:f4:3b:e0:65:f2:f3:c1:6b: b3:48:09:3a:66:27:7c:ef:c3:d1:17:f1:ae:cc:23:d6:c9:bb: 99:0d:f9:8f:64:d9:45:b0:ba:5d:22:50:77:27:f4:d6:1b:1c: 29:2c:15:fa:47:10:77:40:09:58:ba:8e:1f:31:7c:a9:fd:ab: 0d:9b:92:13:9e:02:51:dc:d9:d3:b0:93:cc:31:37:d0:cb:2f: 16:5d:4a:16:8c:05:9f:34:ab:aa:da:9d:9e:5b:c4:c2:80:07: 1d:7b:36:b4:e3:d3:d2:5d:bc:f5:26:d5:0f:9a:01:44:eb:02: 26:bf:bd:f1:c7:46:eb:b9:f1:c9:89:99:2c:ef:05:32:be:9c: fb:ab:83:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrbop+R2gkhHQAXMf+W08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVkYjYxNTRhODc5NWRjNGNlZWZhNjdhMThmZWRmYzY1 MjE1OTQwHhcNMjUxMjI2MjIwMDQ3WhcNMjUxMjI3MjIwMDQ3WjAzMTEwLwYDVQQD Eyg1NDAxMTU5MzBlMTVlOWFiMWY3YzU3MmU0ZmIzMDYyZWZmNTkyY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU+Axr5G0aYSlhbDr8+vuFEHq3L7 J2khwyxZW3/eM+yiojUz72oO/c2/dv42eUFsbrsG5eN8k3Zb2dg91f9GV8N4vjgi J5mM5ObEF/dY8/2/P0b8fY3SR6th21JopdJdjQiS40JeoUyun3gD6LNTuJM1BUMN Z3hhI8oStZFzW9ZNcMWet4b5GsjwnkUDOF+aqwmHycUWcSsg4KD46hCLx17zgBpX gx3PqffGhDOYW3hLVXlvE3S8xNBN4VAWKd5D+E5w1oAjehUPptbFkOjZq2o75zTy Fgn4YdfkPdifzJFO2SNSCorytZArm3gzqVDRb6dO8y1M4IIWa5+6aREtxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQBFZMOFemrH3xXLk+zBi7/WSywMB8GA1UdIwQY MBaAFAS+22FUqHldxM7vpnoY/t/GUhWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQt M2M4NzA4ODczNGY2LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQtM2M4NzA4ODczNGY2 LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD20RyBhr S1MUJBQsOtkzuN3HYsRJDWGq+RwVCDzxwzLrDhVAMbfsg/OTfSYvsTBbY9bGfs/+ /f9Qjmf+J42MGETNvmkYwoSqwazZugzw4EHzbZ58a4NECHaD6b23pPECzLxtKvB5 m/jzjnRtfaB9+TGPdRKLo/Q74GXy88Frs0gJOmYnfO/D0Rfxrswj1sm7mQ35j2TZ RbC6XSJQdyf01hscKSwV+kcQd0AJWLqOHzF8qf2rDZuSE54CUdzZ07CTzDE30Msv Fl1KFowFnzSrqtqdnlvEwoAHHXs2tOPT0l289SbVD5oBROsCJr+98cdG67nxyYmZ LO8FMr6c+6uD/A== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:18 2025 by rpki-client