This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json) Hash identifier: 6OpMF1ozTik8h4To7XGqBHHp8fJzWbsHg58eJ0kEnQ4= Subject key identifier: EC:4B:50:28:A6:9F:F7:B9:A4:C8:9E:51:66:AD:87:B5:DD:6F:E9:9B Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94 Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694 Certificate serial: 019B619DA28B230DCD8A550B4AA71B7E98DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft Manifest number: 0E40 Signing time: Sat 27 Dec 2025 21:01:19 +0000 Manifest this update: Sat 27 Dec 2025 21:01:19 +0000 Manifest next update: Sun 28 Dec 2025 21:01:19 +0000 Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: 4LMQV0QcYFY++jEjsPl4OqVdNqcVU+nhBBNSQCGbQU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:a2:8b:23:0d:cd:8a:55:0b:4a:a7:1b:7e:98:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694 Validity Not Before: Dec 27 21:01:19 2025 GMT Not After : Dec 28 21:01:19 2025 GMT Subject: CN=ec4b5028a69ff7b9a4c89e5166ad87b5dd6fe99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:ea:6a:bd:5f:f9:8d:76:7b:d2:b5:27:a7: 95:98:73:d6:ab:b6:39:43:7f:f2:47:11:99:18:a6: 30:67:66:15:e3:84:00:47:97:98:fd:cd:bd:09:6d: 33:c6:41:30:34:4d:d0:8b:98:25:0d:34:32:11:7e: 9b:8c:a8:e4:98:c0:8e:3d:5d:ed:18:c0:6c:f4:21: dc:98:89:0f:4c:50:27:45:47:47:d2:25:db:64:70: f0:4a:85:e8:d2:b5:49:2a:fc:e8:c4:4b:22:c4:98: 54:48:5b:92:d5:7d:2f:95:b8:13:80:07:1e:2d:6b: 2f:c4:cd:95:29:98:af:74:a3:62:31:50:14:b8:e9: 90:92:5a:51:cd:3f:82:0f:b3:bf:02:4c:4c:c1:7d: 7e:17:72:f2:84:64:75:d6:be:72:45:2a:21:99:b2: c4:df:72:5b:b6:67:92:a4:a0:a0:b8:1f:42:ff:2a: 68:7d:73:08:8b:e4:32:df:ac:b3:8a:0c:c8:24:3b: 3a:86:7b:4f:69:66:38:33:c3:bc:ed:2e:72:0c:00: 1f:33:40:e0:a5:63:12:70:70:69:02:67:77:07:da: 16:05:9c:f9:87:fa:b4:77:88:04:04:35:ca:7b:ea: 9f:6d:84:8f:f7:8e:f9:5c:a2:cb:81:85:15:dd:2e: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:50:28:A6:9F:F7:B9:A4:C8:9E:51:66:AD:87:B5:DD:6F:E9:9B X509v3 Authority Key Identifier: keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:80:cc:61:63:26:50:d0:76:a9:0f:97:46:8a:bb:7b:99: db:34:f7:23:9f:43:a1:3b:36:c1:d8:bc:cb:a2:c9:42:59:73: 77:93:08:94:21:e6:1e:ce:10:d0:d6:8a:8b:27:79:97:3b:d1: b3:94:26:43:3b:0d:3f:d5:43:11:98:d1:22:03:fb:6d:08:c7: 64:07:0d:d5:46:08:ff:c4:29:7f:18:61:77:75:76:6f:bb:0b: db:62:6c:f5:a9:70:92:3a:ce:ee:1a:ee:dc:4a:20:4e:b1:6c: a6:4a:f4:b4:0b:07:1e:04:f3:5c:a2:7d:11:f4:ec:d4:5c:11: 7b:2e:b4:3c:90:34:96:c8:0c:8c:04:f6:39:93:e1:e8:d5:fe: 84:87:a7:55:d8:45:b8:b7:8d:2c:4b:6e:35:cd:28:7c:df:8f: 28:7c:61:00:81:b4:df:76:36:26:d0:01:f8:30:e4:12:72:a0: 09:a5:3d:af:16:5f:fe:ef:5e:a6:34:84:01:16:b9:8a:71:7f: ed:cf:f8:72:07:91:a2:5a:ec:00:5c:9a:43:33:d4:1d:6d:ea: c3:08:c7:0b:68:30:c0:a7:50:f7:cd:f5:ce:ec:85:44:9f:00: e5:3a:a4:06:89:dd:9c:22:e5:08:55:db:6f:80:ff:21:18:b9: d3:12:13:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnaKLIw3NilULSqcbfpjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjliZmU5MzM2ZGEwNTU3OTA2MDhhNzdhNThjY2FiYzQ5 Njg2OTQwHhcNMjUxMjI3MjEwMTE5WhcNMjUxMjI4MjEwMTE5WjAzMTEwLwYDVQQD EyhlYzRiNTAyOGE2OWZmN2I5YTRjODllNTE2NmFkODdiNWRkNmZlOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA037qar1f+Y12e9K1J6eVmHPWq7Y5 Q3/yRxGZGKYwZ2YV44QAR5eY/c29CW0zxkEwNE3Qi5glDTQyEX6bjKjkmMCOPV3t GMBs9CHcmIkPTFAnRUdH0iXbZHDwSoXo0rVJKvzoxEsixJhUSFuS1X0vlbgTgAce LWsvxM2VKZivdKNiMVAUuOmQklpRzT+CD7O/AkxMwX1+F3LyhGR11r5yRSohmbLE 33JbtmeSpKCguB9C/ypofXMIi+Qy36yzigzIJDs6hntPaWY4M8O87S5yDAAfM0Dg pWMScHBpAmd3B9oWBZz5h/q0d4gEBDXKe+qfbYSP9475XKLLgYUV3S5dxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxLUCimn/e5pMieUWath7Xdb+mbMB8GA1UdIwQY MBaAFGy5v+kzbaBVeQYIp3pYzKvEloaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzIt Y2ZkMDBkZDgyN2VlLzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzItY2ZkMDBkZDgyN2Vl LzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyaAzGFj JlDQdqkPl0aKu3uZ2zT3I59DoTs2wdi8y6LJQllzd5MIlCHmHs4Q0NaKiyd5lzvR s5QmQzsNP9VDEZjRIgP7bQjHZAcN1UYI/8Qpfxhhd3V2b7sL22Js9alwkjrO7hru 3EogTrFspkr0tAsHHgTzXKJ9EfTs1FwRey60PJA0lsgMjAT2OZPh6NX+hIenVdhF uLeNLEtuNc0ofN+PKHxhAIG033Y2JtAB+DDkEnKgCaU9rxZf/u9epjSEARa5inF/ 7c/4cgeRolrsAFyaQzPUHW3qwwjHC2gwwKdQ9831zuyFRJ8A5TqkBondnCLlCFXb b4D/IRi50xITyQ== -----END CERTIFICATE-----Generated at Sun Dec 28 03:17:20 2025 by rpki-client