This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json) Hash identifier: rxNXWj75lUwKahlLB2fdEBfTPzfOxTOBRz9IiSD8V14= Subject key identifier: 6A:90:9F:32:3A:5C:A9:1A:27:6B:9A:38:D5:06:9F:4B:65:8A:32:0B Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8 Certificate serial: 019B3042DD9747061AF7D3666ACEE9F1FE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft Manifest number: 1717 Signing time: Thu 18 Dec 2025 07:00:46 +0000 Manifest this update: Thu 18 Dec 2025 07:00:46 +0000 Manifest next update: Fri 19 Dec 2025 07:00:46 +0000 Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: bnk8pIVWSV3Gp6lxlhP5fXY6QKfYC5CcgmIzmT08yxU=) 2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:dd:97:47:06:1a:f7:d3:66:6a:ce:e9:f1:fe:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8 Validity Not Before: Dec 18 07:00:46 2025 GMT Not After : Dec 19 07:00:46 2025 GMT Subject: CN=6a909f323a5ca91a276b9a38d5069f4b658a320b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:25:d0:a8:8e:67:a8:12:01:e9:b4:6f:d7: 52:e7:ca:00:e7:55:93:95:3e:9d:1c:04:b6:b6:22: 23:f7:54:b5:0a:fc:52:65:ca:be:82:3f:fd:17:74: 47:3f:16:3a:68:a7:f1:2b:90:51:92:d6:ae:4c:cb: 32:7b:77:22:37:ef:85:c8:92:1a:5d:11:37:d5:92: 5a:29:ef:12:d0:6f:b9:74:43:f4:93:ef:49:0c:60: fc:73:38:45:d0:ea:8a:70:e8:ad:88:9e:2d:16:e9: e5:16:40:f8:2a:2d:63:b7:3f:24:2b:98:1f:3f:5f: c9:35:16:75:09:d4:8d:b4:1c:62:68:07:a6:3b:5d: 5c:27:8a:ff:7a:47:9f:fc:11:cb:c1:86:09:53:fa: 87:06:be:e3:8b:aa:2c:b3:bf:80:5a:95:15:fc:7b: f2:1a:59:68:41:06:8f:f8:44:85:06:0c:2e:0f:84: 6e:e1:82:dd:53:dc:b2:f9:c6:e1:55:a9:f1:f4:8d: 7f:3b:66:b2:9e:d5:20:4d:d9:cf:1e:1f:d2:14:f9: 4e:cb:10:93:1f:26:f3:43:ec:9b:e7:71:19:df:fb: a3:9f:a3:83:e6:f9:c4:12:40:30:42:08:c2:0f:7c: 8d:2f:43:d1:ef:68:bf:b9:c5:41:0f:f3:ef:77:68: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:90:9F:32:3A:5C:A9:1A:27:6B:9A:38:D5:06:9F:4B:65:8A:32:0B X509v3 Authority Key Identifier: keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:29:a3:6b:74:dd:db:19:3a:dc:1b:19:90:43:bb:49:02: 05:5b:85:d3:71:2c:3b:b6:9e:d8:2c:52:f3:32:4f:7e:82:0c: 2c:e9:f3:49:ce:89:59:b7:fa:8c:b2:49:bb:33:3f:21:95:36: 76:4e:2f:80:61:2e:44:92:bb:96:62:e8:48:0d:90:82:9b:ff: b2:7b:95:96:79:b6:7d:b8:06:e3:44:cd:23:a3:58:5f:f6:da: ff:33:5f:f3:f5:cb:d2:89:fe:75:0d:ab:aa:72:9b:18:c1:8f: ed:ef:f6:c0:3f:75:0c:a8:40:54:9a:eb:26:89:8b:f6:19:18: bc:37:8a:2d:86:e3:ac:dc:40:cf:6a:ca:9e:1b:6c:2c:29:08: 70:9f:ce:97:0c:f4:fa:1a:9e:25:1a:a7:ec:53:51:29:a3:dc: 77:9b:9b:9e:79:0e:17:f6:73:38:79:7f:a0:d6:66:0e:b6:25: 9f:d9:52:dc:7e:17:31:c7:d2:f8:0e:e9:14:b0:cc:45:f1:9a: 3f:13:d6:c4:67:6d:5e:76:af:10:5c:65:58:75:5f:06:e8:33: df:f4:5d:af:fc:e9:0c:47:1d:d4:f9:00:f6:c2:6b:4e:b8:fc: df:1a:0e:32:95:71:27:0c:90:fb:75:93:86:cf:8c:6c:72:7a: de:88:6d:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQt2XRwYa99Nmas7p8f5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx NzQyYzgwHhcNMjUxMjE4MDcwMDQ2WhcNMjUxMjE5MDcwMDQ2WjAzMTEwLwYDVQQD Eyg2YTkwOWYzMjNhNWNhOTFhMjc2YjlhMzhkNTA2OWY0YjY1OGEzMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Il0KiOZ6gSAem0b9dS58oA51WT lT6dHAS2tiIj91S1CvxSZcq+gj/9F3RHPxY6aKfxK5BRktauTMsye3ciN++FyJIa XRE31ZJaKe8S0G+5dEP0k+9JDGD8czhF0OqKcOitiJ4tFunlFkD4Ki1jtz8kK5gf P1/JNRZ1CdSNtBxiaAemO11cJ4r/ekef/BHLwYYJU/qHBr7ji6oss7+AWpUV/Hvy GlloQQaP+ESFBgwuD4Ru4YLdU9yy+cbhVanx9I1/O2ayntUgTdnPHh/SFPlOyxCT HybzQ+yb53EZ3/ujn6OD5vnEEkAwQgjCD3yNL0PR72i/ucVBD/Pvd2g3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqQnzI6XKkaJ2uaONUGn0tlijILMB8GA1UdIwQY MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0 LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRopo2t0 3dsZOtwbGZBDu0kCBVuF03EsO7ae2CxS8zJPfoIMLOnzSc6JWbf6jLJJuzM/IZU2 dk4vgGEuRJK7lmLoSA2Qgpv/snuVlnm2fbgG40TNI6NYX/ba/zNf8/XL0on+dQ2r qnKbGMGP7e/2wD91DKhAVJrrJomL9hkYvDeKLYbjrNxAz2rKnhtsLCkIcJ/Olwz0 +hqeJRqn7FNRKaPcd5ubnnkOF/ZzOHl/oNZmDrYln9lS3H4XMcfS+A7pFLDMRfGa PxPWxGdtXnavEFxlWHVfBugz3/Rdr/zpDEcd1PkA9sJrTrj83xoOMpVxJwyQ+3WT hs+MbHJ63ohtcA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:05:58 2025 by rpki-client