This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: Xz8HoxLNsOaJFjEm6VLfuI5vGmm2dD13zR3yZudqmjs= Subject key identifier: DF:FA:31:42:CF:BA:34:56:20:E9:2C:E4:40:01:D9:3A:8F:03:40:ED Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019B495DA906FE973FDBF2BCB611170A1A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 06C0 Signing time: Tue 23 Dec 2025 04:00:33 +0000 Manifest this update: Tue 23 Dec 2025 04:00:33 +0000 Manifest next update: Wed 24 Dec 2025 04:00:33 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: 8apD61d0QblFJb15tNiu4Ri3j0YL72lOWU+HNk9HMFo=) 2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=) 3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:a9:06:fe:97:3f:db:f2:bc:b6:11:17:0a:1a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Dec 23 04:00:33 2025 GMT Not After : Dec 24 04:00:33 2025 GMT Subject: CN=dffa3142cfba345620e92ce44001d93a8f0340ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:78:cf:a6:41:53:da:8a:b5:da:58:11:00: 62:5d:58:38:59:06:e7:17:a7:2e:3b:66:f5:da:58: f5:62:42:e5:93:41:17:f3:bf:02:c1:80:78:a8:42: b6:a3:5a:a0:c8:b1:56:f6:20:ad:b2:09:54:60:b5: 54:ff:5c:9f:53:96:d3:d6:97:fe:24:72:d8:ab:18: 34:5a:58:7d:ee:88:ec:f9:1b:c2:48:f8:64:a2:3a: d8:a1:63:87:d2:68:1c:62:90:69:98:68:d5:ae:48: 59:60:71:02:fd:89:10:5c:44:de:c4:64:a6:20:11: c0:7e:63:75:db:71:8c:ad:22:8d:bb:fb:82:bb:fb: ea:04:20:70:c2:96:70:fa:81:6b:a0:6b:d0:42:76: 4e:8e:f5:2d:18:4f:47:cd:f8:4d:93:ba:25:8e:8a: 1c:3d:f9:3d:9c:9d:0b:d0:9a:f3:88:fe:de:d1:c2: da:e7:20:64:ae:74:4c:c4:a6:90:15:cc:f5:4a:51: bf:34:0c:ce:69:8b:21:3c:1d:2d:a4:eb:fd:bb:c2: 87:89:c5:7f:97:7b:bc:ed:99:92:28:73:7e:9f:fd: 4a:41:f7:1e:ee:c0:75:2e:69:21:db:b2:0d:cb:b9: 34:9a:c2:6a:2b:13:50:7d:58:19:51:3e:0e:f8:5c: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FA:31:42:CF:BA:34:56:20:E9:2C:E4:40:01:D9:3A:8F:03:40:ED X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:72:7f:f5:63:a1:93:78:6f:25:17:ee:da:1e:3e:b2:27:9c: 2a:a6:3f:df:c9:31:1e:c0:ab:eb:fc:1f:81:d0:de:a7:d6:ff: 41:97:6f:11:d5:5e:be:ca:56:24:e9:31:b6:47:03:38:f7:db: 9d:d1:08:9c:5e:e1:55:2f:56:74:da:87:0a:81:ed:ba:4f:6c: 50:30:f1:1f:b5:a6:b2:eb:0f:f7:6f:58:df:e5:04:45:5a:f1: 14:de:ac:e4:c9:ec:ff:c9:b5:45:f4:3b:80:97:78:67:08:59: 58:a2:93:18:74:03:1c:41:c8:85:53:5c:aa:48:dc:36:58:f8: 8b:63:51:72:fd:bb:52:83:17:56:12:74:10:bb:30:e7:ff:29: 27:98:86:6d:68:e2:2b:f2:28:83:d6:c2:6e:d1:0a:0b:fc:35: 9c:40:0c:fc:65:61:c7:1f:f2:f3:39:7a:f3:09:0b:56:89:0b: b5:45:2a:82:c9:8f:f1:b2:0a:82:e6:b3:f3:4c:e6:14:f4:16: 6e:e1:ce:7e:d8:b8:22:92:5a:34:aa:0e:19:ed:4d:a8:fa:f9: 73:f1:26:78:4c:3e:2f:c6:ed:6f:3b:97:f8:4e:98:96:f1:e4: 99:6f:7a:fd:eb:03:e9:36:60:a9:a9:ca:80:08:b1:e3:74:58: b6:fa:f5:c5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtJXakG/pc/2/K8thEXChqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjUxMjIzMDQwMDMzWhcNMjUxMjI0MDQwMDMzWjAzMTEwLwYDVQQD EyhkZmZhMzE0MmNmYmEzNDU2MjBlOTJjZTQ0MDAxZDkzYThmMDM0MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocd4z6ZBU9qKtdpYEQBiXVg4WQbn F6cuO2b12lj1YkLlk0EX878CwYB4qEK2o1qgyLFW9iCtsglUYLVU/1yfU5bT1pf+ JHLYqxg0Wlh97ojs+RvCSPhkojrYoWOH0mgcYpBpmGjVrkhZYHEC/YkQXETexGSm IBHAfmN123GMrSKNu/uCu/vqBCBwwpZw+oFroGvQQnZOjvUtGE9HzfhNk7oljooc Pfk9nJ0L0JrziP7e0cLa5yBkrnRMxKaQFcz1SlG/NAzOaYshPB0tpOv9u8KHicV/ l3u87ZmSKHN+n/1KQfce7sB1Lmkh27INy7k0msJqKxNQfVgZUT4O+Fw9nwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN/6MULPujRWIOks5EAB2TqPA0DtMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHJ/ 9WOhk3hvJRfu2h4+siecKqY/38kxHsCr6/wfgdDep9b/QZdvEdVevspWJOkxtkcD OPfbndEInF7hVS9WdNqHCoHtuk9sUDDxH7WmsusP929Y3+UERVrxFN6s5Mns/8m1 RfQ7gJd4ZwhZWKKTGHQDHEHIhVNcqkjcNlj4i2NRcv27UoMXVhJ0ELsw5/8pJ5iG bWjiK/Iog9bCbtEKC/w1nEAM/GVhxx/y8zl68wkLVokLtUUqgsmP8bIKguaz80zm FPQWbuHOfti4IpJaNKoOGe1NqPr5c/EmeEw+L8btbzuX+E6YlvHkmW96/esD6TZg qanKgAix43RYtvr1xQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:49 2025 by rpki-client