This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json) Hash identifier: DGqbZHlu1cK2rW/zqU6GjLo5p3Md9057c80NmyKZ7h0= Subject key identifier: CE:F8:09:8C:1A:F9:E4:DF:83:BF:22:E3:B4:8F:CE:B1:37:42:89:0E Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019B3F48B9CD08025BD3E7CDA960A9AFEF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft Manifest number: E1 Signing time: Sun 21 Dec 2025 05:01:29 +0000 Manifest this update: Sun 21 Dec 2025 05:01:29 +0000 Manifest next update: Mon 22 Dec 2025 05:01:29 +0000 Files and hashes: 1: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: CRkz4Q21t22ev8ohZFnTUvcwyx5RGHw5CbhgGREZLcA=) 2: Cch2VifmQnrl3ySCO9FpJWyP-jY.roa (hash: 2g5UoC4Ft4ADLPnKCU1ruihX3luMvHq35SeKVhY1no4=) 3: Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa (hash: FPbL8Lg90NHmUgvGvaONurl4W9W2qlIvpuWREBmyr5M=) 4: zH4uo7wZS9DthbMbIV3cUe0ok_c.roa (hash: HLzxWTEgetYO6uF6aHtVJHRcG+Z9PahsUBDMJkY5lPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b9:cd:08:02:5b:d3:e7:cd:a9:60:a9:af:ef:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Dec 21 05:01:29 2025 GMT Not After : Dec 22 05:01:29 2025 GMT Subject: CN=cef8098c1af9e4df83bf22e3b48fceb13742890e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:ef:44:e0:1d:c1:2f:b1:d6:cf:25:13:49: 60:9d:4e:91:9d:cd:0c:f4:e8:60:81:7c:7b:d6:4e: 86:bd:3c:0c:d1:00:09:ae:9d:3f:bd:32:36:08:1a: 66:34:61:19:8f:7a:bd:be:69:f3:87:0a:48:ba:f4: 84:ee:ca:0d:0e:00:fd:b5:35:f9:dc:8c:e3:ee:ed: c9:7e:bb:07:21:e9:af:62:c7:4a:db:bf:7f:4b:f2: 9d:d7:a7:af:3e:2a:b7:70:ee:92:43:f2:c7:08:81: 58:2d:0b:d3:9e:57:c9:42:a9:61:59:b8:f7:9e:7c: 4c:45:cb:35:e8:fb:08:07:b2:74:a0:8f:37:34:aa: f8:cf:a2:0b:23:7f:8c:f4:1f:78:26:cd:89:02:2a: bd:40:3e:89:5d:97:7d:07:8d:a6:de:7b:39:95:18: 9a:18:1e:2a:ea:fb:08:d7:31:0c:30:cb:17:1a:20: 09:81:f3:d5:97:d7:2c:ae:cd:8f:76:ad:9c:ad:b4: 3a:9e:a6:da:72:fc:1b:48:db:61:88:2d:94:df:df: 53:9d:dd:aa:e8:27:47:bd:2d:7e:74:0a:52:a0:67: 2a:cc:c8:62:97:18:95:14:e9:2b:21:32:a7:ff:95: 51:e0:b8:2e:36:ba:a6:58:91:7f:f5:00:d8:a1:f8: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F8:09:8C:1A:F9:E4:DF:83:BF:22:E3:B4:8F:CE:B1:37:42:89:0E X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:64:e4:83:35:b3:e6:38:0f:ae:a6:c4:a4:c5:ca:e5:54:96: 18:ed:77:73:8d:ec:56:6b:c3:8c:9c:8c:93:f1:84:db:dd:6f: 62:11:b7:02:0b:c0:5f:f1:b5:df:e3:75:69:79:9f:31:34:d9: 75:ca:db:e7:5d:f0:60:9b:22:24:ad:dc:52:35:6b:9b:7d:cb: 9a:44:cd:a3:43:af:26:46:5c:62:21:46:10:65:d6:95:e2:11: a2:1e:78:a5:88:15:e7:c9:f6:ef:63:c7:57:b2:3c:27:8f:3f: a0:22:a3:66:d8:17:e5:9c:7d:d9:20:52:8b:d1:fe:a2:62:48: fa:1e:44:26:08:bb:cd:45:ff:34:ba:0f:9e:b7:8d:18:1b:7d: de:4b:5c:52:bb:78:cf:42:3c:43:ba:43:bc:5c:35:9f:d9:aa: 95:e3:d9:20:f3:ce:50:64:8a:3a:bc:37:a2:2d:e1:60:3c:55: 0a:c1:ca:17:a6:7e:f0:3f:d8:58:21:64:0e:a0:96:e1:39:96: ef:98:c5:7e:e6:b3:d0:76:ab:27:e8:f7:e7:37:da:b9:f4:2d: a5:06:c1:49:51:da:23:04:79:1d:69:09:73:55:fd:9e:cf:f6: 0b:d4:e3:57:e8:5d:02:0f:0c:73:22:e7:5d:90:ea:22:fd:68: 62:ea:e4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLnNCAJb0+fNqWCpr+8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjUxMjIxMDUwMTI5WhcNMjUxMjIyMDUwMTI5WjAzMTEwLwYDVQQD EyhjZWY4MDk4YzFhZjllNGRmODNiZjIyZTNiNDhmY2ViMTM3NDI4OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoInvROAdwS+x1s8lE0lgnU6Rnc0M 9OhggXx71k6GvTwM0QAJrp0/vTI2CBpmNGEZj3q9vmnzhwpIuvSE7soNDgD9tTX5 3Izj7u3JfrsHIemvYsdK279/S/Kd16evPiq3cO6SQ/LHCIFYLQvTnlfJQqlhWbj3 nnxMRcs16PsIB7J0oI83NKr4z6ILI3+M9B94Js2JAiq9QD6JXZd9B42m3ns5lRia GB4q6vsI1zEMMMsXGiAJgfPVl9csrs2Pdq2crbQ6nqbacvwbSNthiC2U399Tnd2q 6CdHvS1+dApSoGcqzMhilxiVFOkrITKn/5VR4LguNrqmWJF/9QDYofh6XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM74CYwa+eTfg78i47SPzrE3QokOMB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2TkgzWz 5jgPrqbEpMXK5VSWGO13c43sVmvDjJyMk/GE291vYhG3AgvAX/G13+N1aXmfMTTZ dcrb513wYJsiJK3cUjVrm33LmkTNo0OvJkZcYiFGEGXWleIRoh54pYgV58n272PH V7I8J48/oCKjZtgX5Zx92SBSi9H+omJI+h5EJgi7zUX/NLoPnreNGBt93ktcUrt4 z0I8Q7pDvFw1n9mqlePZIPPOUGSKOrw3oi3hYDxVCsHKF6Z+8D/YWCFkDqCW4TmW 75jFfuaz0HarJ+j35zfaufQtpQbBSVHaIwR5HWkJc1X9ns/2C9TjV+hdAg8McyLn XZDqIv1oYurkeA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:12 2025 by rpki-client