This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json) Hash identifier: bpQN03yp8q5SE9PhIimIjN0/0q7DBGYH7Jl6E/fZbpM= Subject key identifier: 02:C7:38:BC:8B:19:63:0B:C0:10:B9:AC:B6:81:F7:1C:E9:A2:19:84 Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Certificate serial: 019B70D8DFC0EAD33D9AF6AD510CBF6E65A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft Manifest number: 074E Signing time: Tue 30 Dec 2025 20:00:19 +0000 Manifest this update: Tue 30 Dec 2025 20:00:19 +0000 Manifest next update: Wed 31 Dec 2025 20:00:19 +0000 Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: q0+xzazVaPtbiLhC7qaY7Ko5SRuWNDjWWJIF53wPPxo=) 2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d8:df:c0:ea:d3:3d:9a:f6:ad:51:0c:bf:6e:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Validity Not Before: Dec 30 20:00:19 2025 GMT Not After : Dec 31 20:00:19 2025 GMT Subject: CN=02c738bc8b19630bc010b9acb681f71ce9a21984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:85:ab:80:c0:41:6c:a1:12:26:24:42:c3: ef:30:29:27:a3:26:d4:4f:d7:5e:12:9f:ab:2d:d9: 40:91:08:24:e5:ee:65:c4:fd:02:76:b5:b6:a2:d7: 3e:21:d5:18:96:77:a3:44:d4:f8:9b:0f:e9:6d:86: d8:f6:3b:c0:b9:78:e7:9f:3d:4b:43:98:5f:3d:97: db:a0:f1:17:01:ce:3d:06:b5:7f:64:07:69:a8:92: fe:f2:b0:d1:4d:af:e6:c5:61:19:53:81:25:10:f2: 6a:8b:cb:27:e5:c7:85:88:f4:be:17:8e:14:cb:aa: c7:74:ab:47:ba:f2:65:a2:0c:ec:ee:65:23:e4:ca: 07:cd:b7:a0:9b:e5:65:f9:b8:18:39:a0:53:35:fb: 93:81:ed:cd:13:c8:c0:5e:fb:ac:54:ca:16:9b:2c: 92:c7:7c:87:e7:f4:e9:5f:ab:fd:33:c2:f0:40:27: 96:7c:55:73:bb:12:95:02:bc:ad:04:0a:e0:5f:e6: fe:0c:ff:36:e0:60:08:60:62:b2:c3:15:18:03:0d: 48:47:d9:5c:5b:63:bc:1c:00:b6:6b:dc:e1:dc:8e: 53:55:8d:9c:d2:e4:86:15:5d:44:c9:58:b6:60:76: 64:17:7b:59:85:7a:1b:9f:6b:ae:63:14:b7:f2:70: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:38:BC:8B:19:63:0B:C0:10:B9:AC:B6:81:F7:1C:E9:A2:19:84 X509v3 Authority Key Identifier: keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:d1:f4:91:d3:1c:64:9f:0f:c5:33:32:b3:5c:f0:8e:0d: d3:88:ab:9f:3c:1f:1a:95:4d:4c:f4:57:a7:ef:6e:9f:a4:70: 0c:9c:fe:71:e3:09:f1:d4:c0:3e:e8:12:31:18:96:69:b5:97: a5:f2:e8:e8:44:06:5c:61:a4:c8:a1:d4:c0:ac:13:d5:9f:66: 09:a7:75:e5:6d:49:31:de:c6:97:e5:95:96:30:c5:5c:43:9c: 30:56:6b:cd:5a:31:e2:cb:60:43:70:6f:13:1e:93:ff:f6:f9: 16:45:c2:31:72:d0:58:7f:d5:ac:08:98:75:c2:cf:33:9d:c0: b1:02:94:ee:e7:94:a9:42:30:ce:2d:d9:ee:41:2e:f4:aa:3b: 28:7f:32:ac:32:60:a4:04:e0:15:0e:e4:5d:1a:6a:a1:4d:02: cf:bc:fc:40:a6:8d:2c:af:77:dd:16:13:85:99:dc:aa:1a:dc: e2:7e:b3:ee:a2:c0:50:71:52:ee:d5:2c:1f:2a:4e:d7:9c:06: ce:f6:3a:38:57:70:e2:ac:2d:d8:58:85:4f:be:16:58:9b:be: c7:7e:ad:a7:1c:aa:04:be:08:ad:95:af:72:66:97:26:5a:8f: cf:78:6d:59:c1:9e:cf:04:52:ad:68:ab:a3:ec:c0:74:57:d8: 61:62:44:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2N/A6tM9mvatUQy/bmWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi MThmOTYwHhcNMjUxMjMwMjAwMDE5WhcNMjUxMjMxMjAwMDE5WjAzMTEwLwYDVQQD EygwMmM3MzhiYzhiMTk2MzBiYzAxMGI5YWNiNjgxZjcxY2U5YTIxOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+eFq4DAQWyhEiYkQsPvMCknoybU T9deEp+rLdlAkQgk5e5lxP0CdrW2otc+IdUYlnejRNT4mw/pbYbY9jvAuXjnnz1L Q5hfPZfboPEXAc49BrV/ZAdpqJL+8rDRTa/mxWEZU4ElEPJqi8sn5ceFiPS+F44U y6rHdKtHuvJlogzs7mUj5MoHzbegm+Vl+bgYOaBTNfuTge3NE8jAXvusVMoWmyyS x3yH5/TpX6v9M8LwQCeWfFVzuxKVArytBArgX+b+DP824GAIYGKywxUYAw1IR9lc W2O8HAC2a9zh3I5TVY2c0uSGFV1EyVi2YHZkF3tZhXobn2uuYxS38nC3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALHOLyLGWMLwBC5rLaB9xzpohmEMB8GA1UdIwQY MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3 LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsDR9JHT HGSfD8UzMrNc8I4N04irnzwfGpVNTPRXp+9un6RwDJz+ceMJ8dTAPugSMRiWabWX pfLo6EQGXGGkyKHUwKwT1Z9mCad15W1JMd7Gl+WVljDFXEOcMFZrzVox4stgQ3Bv Ex6T//b5FkXCMXLQWH/VrAiYdcLPM53AsQKU7ueUqUIwzi3Z7kEu9Ko7KH8yrDJg pATgFQ7kXRpqoU0Cz7z8QKaNLK933RYThZncqhrc4n6z7qLAUHFS7tUsHypO15wG zvY6OFdw4qwt2FiFT74WWJu+x36tpxyqBL4IrZWvcmaXJlqPz3htWcGezwRSrWir o+zAdFfYYWJELQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:26 2025 by rpki-client