This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json) Hash identifier: CkKfoZH+sxDPn8PfFe5dkY/NvR95PO1hyEL6KGF5SGM= Subject key identifier: D1:C3:DF:03:D2:3A:E5:4A:02:D8:F0:A9:1F:96:3B:E2:62:93:D8:B1 Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Certificate serial: 019B49951678FE2DE461152721A7EC588648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft Manifest number: 1722 Signing time: Tue 23 Dec 2025 05:01:05 +0000 Manifest this update: Tue 23 Dec 2025 05:01:05 +0000 Manifest next update: Wed 24 Dec 2025 05:01:05 +0000 Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: VqV+vlcKGtsvsevk370N4v+CcnV63fWrC4V0nLcMHf8=) 2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:16:78:fe:2d:e4:61:15:27:21:a7:ec:58:86:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Validity Not Before: Dec 23 05:01:05 2025 GMT Not After : Dec 24 05:01:05 2025 GMT Subject: CN=d1c3df03d23ae54a02d8f0a91f963be26293d8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:72:2f:81:b7:45:7a:86:f8:51:53:c6:fa: 25:29:fe:52:81:58:7c:ca:f7:25:39:aa:29:90:7e: 2a:2a:0f:27:82:ff:fb:7c:54:de:c6:fd:2e:b7:70: 30:ab:57:5a:d8:98:d5:cb:b9:7a:47:0d:92:81:ea: 30:5a:34:f6:14:0a:aa:d7:19:8f:ac:e6:69:2c:93: b6:69:40:95:c8:9a:2d:f2:24:a0:e1:f7:26:e7:2d: 09:4b:b6:27:98:c0:de:b7:db:89:22:16:7b:34:66: ba:e9:64:3e:d2:20:f6:10:3c:c1:89:4b:7c:fd:a3: b9:6e:ef:a8:c0:91:ff:ba:a8:92:67:4c:92:4d:85: 72:86:31:3a:a1:1a:4d:dd:cc:74:f7:fc:f2:5b:0c: 80:37:35:a3:03:21:2e:e5:46:d7:fb:49:9a:ce:ee: 4e:37:9d:97:a8:21:bf:05:70:4b:a9:2a:9f:46:e4: ba:62:06:ef:80:2d:37:d3:26:2f:26:39:57:7d:b3: 60:cc:59:27:83:c6:61:2e:96:4e:02:21:33:eb:2f: f8:92:50:c3:ab:36:66:81:d2:02:35:44:12:ba:61: 13:e7:17:3a:4b:0d:c9:47:63:34:46:93:74:95:dd: f5:54:01:b9:28:d6:29:5f:4a:cb:53:08:b1:d2:61: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:DF:03:D2:3A:E5:4A:02:D8:F0:A9:1F:96:3B:E2:62:93:D8:B1 X509v3 Authority Key Identifier: keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:e9:6c:30:fc:bc:53:05:ab:ea:da:3d:65:39:1b:32:9e:aa: 66:6e:69:74:41:13:8e:92:49:94:f0:77:83:a9:fd:dd:4f:b9: eb:a4:f7:16:2a:1a:a5:75:1e:b4:df:49:c5:8e:23:86:30:35: 1c:4d:8f:44:bc:78:b4:ba:bd:3e:c7:0d:be:f7:05:f3:e2:bb: da:5d:72:b9:32:17:73:ec:75:69:b2:c0:00:14:4d:c6:a6:62: cf:33:da:bb:04:7f:5d:7f:b6:53:4b:d6:bb:ed:71:3c:b2:42: f7:a7:c1:8b:ef:a7:4f:63:1b:be:70:0c:be:cd:42:db:7d:2c: de:de:d9:f8:8f:a9:d0:04:61:e1:0b:04:49:dc:5d:a4:e3:a8: 50:f7:3e:be:ab:48:ba:d3:d7:eb:b0:7f:ca:5f:7c:8b:f3:76: 0e:35:2b:80:a9:12:6d:2b:44:59:a9:d1:e0:c0:60:4d:5b:73: d0:e7:fd:40:33:b9:8e:9a:9e:e9:39:81:4c:b6:97:f0:42:95: 17:c4:6b:71:0b:59:8c:5d:65:ed:91:08:33:88:5f:2d:30:87: 1d:18:d8:cd:5d:be:e9:41:4a:e2:dd:3e:29:16:ae:ef:c5:9c: e5:a8:16:b5:9a:f7:1b:73:b1:26:df:96:87:a8:22:98:29:82: 8d:8d:c2:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlRZ4/i3kYRUnIafsWIZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4 ODljYTMwHhcNMjUxMjIzMDUwMTA1WhcNMjUxMjI0MDUwMTA1WjAzMTEwLwYDVQQD EyhkMWMzZGYwM2QyM2FlNTRhMDJkOGYwYTkxZjk2M2JlMjYyOTNkOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bFyL4G3RXqG+FFTxvolKf5SgVh8 yvclOaopkH4qKg8ngv/7fFTexv0ut3Awq1da2JjVy7l6Rw2SgeowWjT2FAqq1xmP rOZpLJO2aUCVyJot8iSg4fcm5y0JS7YnmMDet9uJIhZ7NGa66WQ+0iD2EDzBiUt8 /aO5bu+owJH/uqiSZ0ySTYVyhjE6oRpN3cx09/zyWwyANzWjAyEu5UbX+0mazu5O N52XqCG/BXBLqSqfRuS6YgbvgC030yYvJjlXfbNgzFkng8ZhLpZOAiEz6y/4klDD qzZmgdICNUQSumET5xc6Sw3JR2M0RpN0ld31VAG5KNYpX0rLUwix0mFUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHD3wPSOuVKAtjwqR+WO+Jik9ixMB8GA1UdIwQY MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt Y2ZkY2I1N2I1ZTFkLzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0elsMPy8 UwWr6to9ZTkbMp6qZm5pdEETjpJJlPB3g6n93U+566T3FioapXUetN9JxY4jhjA1 HE2PRLx4tLq9PscNvvcF8+K72l1yuTIXc+x1abLAABRNxqZizzPauwR/XX+2U0vW u+1xPLJC96fBi++nT2MbvnAMvs1C230s3t7Z+I+p0ARh4QsESdxdpOOoUPc+vqtI utPX67B/yl98i/N2DjUrgKkSbStEWanR4MBgTVtz0Of9QDO5jpqe6TmBTLaX8EKV F8RrcQtZjF1l7ZEIM4hfLTCHHRjYzV2+6UFK4t0+KRau78Wc5agWtZr3G3OxJt+W h6gimCmCjY3C/A== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:37 2025 by rpki-client