This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json) Hash identifier: kkJPHiCaiUTMAoFPbchF8e3FZqkd/U3vHdURSYzTlI0= Subject key identifier: 17:D3:C5:2F:02:FD:74:79:13:D2:A1:E1:8C:DF:63:6C:4E:AE:67:0C Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Certificate serial: 019B3CEC03ADB7309E63D95B871600E7AE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft Manifest number: 0481 Signing time: Sat 20 Dec 2025 18:00:58 +0000 Manifest this update: Sat 20 Dec 2025 18:00:58 +0000 Manifest next update: Sun 21 Dec 2025 18:00:58 +0000 Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: HhT2gnN0wNWXo8UrFS7kpd02SNpoHNMzDFaBmbiFhE4=) 2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:03:ad:b7:30:9e:63:d9:5b:87:16:00:e7:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Validity Not Before: Dec 20 18:00:58 2025 GMT Not After : Dec 21 18:00:58 2025 GMT Subject: CN=17d3c52f02fd747913d2a1e18cdf636c4eae670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:a6:4b:3b:4e:c9:44:56:f1:13:b5:c5:4c: 4f:3c:f7:ce:88:56:0f:42:ec:8d:97:55:d1:5d:89: 24:bb:3c:16:27:6e:ee:72:9a:ff:0c:5e:1e:03:9e: 46:3a:f8:de:71:1e:94:7f:d0:f5:41:d2:48:98:94: a0:a1:17:3e:53:8f:be:d3:10:7f:52:83:51:8e:10: c6:f2:a8:e0:22:58:6b:f4:58:63:a0:fd:e4:f1:f9: ce:85:2d:2d:df:88:58:10:6a:56:33:da:90:aa:7e: 2c:84:24:34:6a:01:fc:59:61:a4:58:b2:9f:e4:11: 4a:c4:21:a9:44:13:5a:26:f3:36:7b:be:95:71:1f: 77:8a:90:93:4f:69:c2:ca:75:ab:15:76:8d:e4:e0: 1e:a4:08:62:9d:30:5a:dc:da:f0:12:b8:1c:59:33: 3e:2a:ab:a9:72:2c:ef:a5:31:45:94:3f:f1:6a:dc: f8:ce:04:30:db:29:6a:86:5a:49:34:b9:a5:56:bd: bc:61:ac:33:c5:1d:54:4e:76:ae:9a:ed:55:d6:91: 52:b9:b3:a3:00:58:bf:fd:94:9d:e0:fd:60:6a:1a: 31:69:a8:35:3d:c1:59:50:37:e1:66:df:9c:04:aa: c9:01:e1:8f:a3:3f:b2:40:0a:8d:57:48:bd:fb:08: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:C5:2F:02:FD:74:79:13:D2:A1:E1:8C:DF:63:6C:4E:AE:67:0C X509v3 Authority Key Identifier: keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:e1:6c:13:ff:78:f9:d5:e2:27:5f:6a:be:e0:1c:f4:80: 12:eb:eb:58:5d:60:3f:4f:24:2a:7f:ff:13:c1:9a:01:f5:02: ed:ee:f4:ae:bf:aa:62:e2:9e:f8:31:6e:ed:66:f9:0c:53:f1: 74:f4:5f:94:50:ec:26:36:42:ed:5c:22:49:03:b9:de:6e:1d: a5:51:ee:a0:75:15:af:6b:38:ae:01:29:10:62:a4:f8:ca:5b: a2:52:58:ae:52:49:9b:51:9a:3e:c9:8e:f4:1f:0a:ad:3e:19: 8e:08:cb:8f:b2:04:e5:29:37:24:d1:0f:ef:49:42:6a:2e:01: e5:50:5e:f7:bd:37:4b:9c:5d:73:99:da:69:a5:9c:d1:6a:53: 1e:1f:a9:4b:c7:0a:3f:7b:2f:24:5a:3d:d5:1c:e9:99:41:37: e3:59:c7:f4:56:2e:3b:dd:20:97:eb:5a:1b:08:63:ad:26:15: e9:a6:90:60:c5:33:29:69:a3:a1:0b:f7:b7:02:48:f9:ef:d8: ae:38:bc:8c:d9:44:ae:00:e9:c7:66:39:a8:d3:aa:e3:21:e3: a2:49:e6:ab:9a:44:c9:5f:66:b2:b6:8e:5a:16:84:20:12:3d: d2:6b:2f:7d:91:cb:64:31:86:82:47:ac:18:03:c7:57:44:c6: a8:34:e6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AOttzCeY9lbhxYA564HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw Y2YwNGEwHhcNMjUxMjIwMTgwMDU4WhcNMjUxMjIxMTgwMDU4WjAzMTEwLwYDVQQD EygxN2QzYzUyZjAyZmQ3NDc5MTNkMmExZTE4Y2RmNjM2YzRlYWU2NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHCmSztOyURW8RO1xUxPPPfOiFYP QuyNl1XRXYkkuzwWJ27ucpr/DF4eA55GOvjecR6Uf9D1QdJImJSgoRc+U4++0xB/ UoNRjhDG8qjgIlhr9FhjoP3k8fnOhS0t34hYEGpWM9qQqn4shCQ0agH8WWGkWLKf 5BFKxCGpRBNaJvM2e76VcR93ipCTT2nCynWrFXaN5OAepAhinTBa3NrwErgcWTM+ KqupcizvpTFFlD/xatz4zgQw2ylqhlpJNLmlVr28YawzxR1UTnaumu1V1pFSubOj AFi//ZSd4P1gahoxaag1PcFZUDfhZt+cBKrJAeGPoz+yQAqNV0i9+wijgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfTxS8C/XR5E9Kh4YzfY2xOrmcMMB8GA1UdIwQY MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt Njk1ZDgyOTk5MjZlLzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIczhbBP/ ePnV4idfar7gHPSAEuvrWF1gP08kKn//E8GaAfUC7e70rr+qYuKe+DFu7Wb5DFPx dPRflFDsJjZC7VwiSQO53m4dpVHuoHUVr2s4rgEpEGKk+MpbolJYrlJJm1GaPsmO 9B8KrT4ZjgjLj7IE5Sk3JNEP70lCai4B5VBe9703S5xdc5naaaWc0WpTHh+pS8cK P3svJFo91RzpmUE341nH9FYuO90gl+taGwhjrSYV6aaQYMUzKWmjoQv3twJI+e/Y rji8jNlErgDpx2Y5qNOq4yHjoknmq5pEyV9msraOWhaEIBI90msvfZHLZDGGgkes GAPHV0TGqDTmQA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:38 2025 by rpki-client