This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json) Hash identifier: 5ggZh92l5+qaQXBPWBvCQFpgOfTpwMKRS5vFDZ2SmpM= Subject key identifier: 71:09:8E:05:A0:E3:A1:31:51:3A:F8:DA:07:3D:6B:91:98:9A:31:B8 Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f Certificate serial: 019B3569575E11EE68F0F12CE72E21F1C43B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft Manifest number: 1392 Signing time: Fri 19 Dec 2025 07:00:54 +0000 Manifest this update: Fri 19 Dec 2025 07:00:54 +0000 Manifest next update: Sat 20 Dec 2025 07:00:54 +0000 Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: ER5dZJPthbMRpivsnYmFoKp9uw42npjVx8qU46rYmYc=) 2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:57:5e:11:ee:68:f0:f1:2c:e7:2e:21:f1:c4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f Validity Not Before: Dec 19 07:00:54 2025 GMT Not After : Dec 20 07:00:54 2025 GMT Subject: CN=71098e05a0e3a131513af8da073d6b91989a31b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:af:1a:e5:d5:93:d2:c8:7b:77:13:3f:8f: ec:ed:19:8f:4e:21:7b:d4:35:64:61:3e:1e:ce:fc: 8b:a3:09:5a:0c:13:23:62:f7:b5:67:da:17:49:90: f0:c1:fd:17:7f:e6:5a:00:70:ea:c0:d0:4d:44:88: dd:54:99:44:b2:61:fe:d5:ea:34:fe:9d:dc:13:ad: fb:aa:89:c3:07:38:ab:78:d1:97:69:ca:9a:12:ec: d1:c4:93:92:35:80:f9:e6:4a:9f:cb:02:ec:26:87: 5e:a9:ac:dc:cc:27:6e:ae:25:65:0b:26:74:47:95: 67:7b:9c:2c:25:06:5d:f7:29:78:ee:45:b3:04:ab: f3:d3:3f:2b:c2:75:3b:84:14:12:f6:3d:d7:ee:9c: c0:5f:6c:57:30:f6:cf:00:eb:1e:6b:96:51:5a:3c: e0:ae:21:d7:45:22:7c:08:4c:da:78:03:b3:71:f6: 4e:5d:0d:68:60:0e:26:9b:f7:46:47:3d:ae:c0:0c: 45:bc:d0:25:76:da:3a:a2:a1:8a:fa:3f:66:89:43: 79:55:8c:db:e2:1b:e9:14:4a:4a:94:8f:0d:c0:51: 4c:7f:f0:ec:72:9e:28:26:2e:7e:2a:a8:bf:3b:9a: 0f:ce:58:8d:cf:9b:2e:24:01:63:63:b6:41:9e:f6: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:09:8E:05:A0:E3:A1:31:51:3A:F8:DA:07:3D:6B:91:98:9A:31:B8 X509v3 Authority Key Identifier: keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:45:49:c4:83:68:c3:f0:b7:22:6e:e9:f1:a3:e9:3e:8e: e4:e3:ad:f0:24:dc:47:36:72:74:d3:33:01:68:a1:6e:ca:29: 56:bc:bb:e0:65:f1:08:6d:07:94:5c:02:76:89:09:bd:74:8b: 0f:9e:03:b5:8e:44:0b:8a:94:79:d6:3a:9d:a2:dc:5e:b1:d0: 78:66:d8:14:d4:99:de:04:4e:6b:ea:59:64:a1:07:ad:99:99: a2:0c:bc:7a:a8:e9:6a:fc:f6:ae:26:b3:91:e7:32:bd:de:70: d3:ba:f2:c3:89:5d:98:5b:38:05:cb:b5:98:3a:a8:bc:d1:e1: 50:23:91:68:3c:64:c9:3e:12:0e:a8:ba:7d:74:ca:77:b3:54: 44:7b:2d:bb:aa:5d:24:8e:b1:bc:be:50:1d:75:28:d2:3f:b6: be:23:7a:3b:7d:dd:d6:1a:05:9a:bd:b2:54:13:c2:bb:4f:30: ff:2c:ee:9c:b4:91:31:48:56:df:ef:fa:8d:71:56:8b:cb:5f: e1:14:4f:30:88:04:7c:64:af:66:52:fd:31:2a:cd:8c:3c:af: f5:f3:91:b2:62:3e:71:1c:e2:e8:5b:b4:0d:86:8e:3a:5b:d1: 3f:b3:84:a4:51:4b:d3:7e:73:ba:a6:1e:6b:11:de:8a:41:57: 14:fd:8c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aVdeEe5o8PEs5y4h8cQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5 MDYwMWYwHhcNMjUxMjE5MDcwMDU0WhcNMjUxMjIwMDcwMDU0WjAzMTEwLwYDVQQD Eyg3MTA5OGUwNWEwZTNhMTMxNTEzYWY4ZGEwNzNkNmI5MTk4OWEzMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOvGuXVk9LIe3cTP4/s7RmPTiF7 1DVkYT4ezvyLowlaDBMjYve1Z9oXSZDwwf0Xf+ZaAHDqwNBNRIjdVJlEsmH+1eo0 /p3cE637qonDBzireNGXacqaEuzRxJOSNYD55kqfywLsJodeqazczCduriVlCyZ0 R5Vne5wsJQZd9yl47kWzBKvz0z8rwnU7hBQS9j3X7pzAX2xXMPbPAOsea5ZRWjzg riHXRSJ8CEzaeAOzcfZOXQ1oYA4mm/dGRz2uwAxFvNAldto6oqGK+j9miUN5VYzb 4hvpFEpKlI8NwFFMf/Dscp4oJi5+Kqi/O5oPzliNz5suJAFjY7ZBnvb9gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEJjgWg46ExUTr42gc9a5GYmjG4MB8GA1UdIwQY MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAck1FScSD aMPwtyJu6fGj6T6O5OOt8CTcRzZydNMzAWihbsopVry74GXxCG0HlFwCdokJvXSL D54DtY5EC4qUedY6naLcXrHQeGbYFNSZ3gROa+pZZKEHrZmZogy8eqjpavz2riaz kecyvd5w07ryw4ldmFs4Bcu1mDqovNHhUCORaDxkyT4SDqi6fXTKd7NURHstu6pd JI6xvL5QHXUo0j+2viN6O33d1hoFmr2yVBPCu08w/yzunLSRMUhW3+/6jXFWi8tf 4RRPMIgEfGSvZlL9MSrNjDyv9fORsmI+cRzi6Fu0DYaOOlvRP7OEpFFL035zuqYe axHeikFXFP2MZw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:31 2025 by rpki-client