This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: vjUcjso3lgB6VNJJSJDW0rBpe0FMBhbptHHeuCO3ldw= Subject key identifier: D0:01:56:7C:CE:E9:59:B2:8B:A0:42:19:F0:96:E7:BB:7A:1E:AA:13 Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019B2E544D5F0CE42ACE434FEF7EFB8ED8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 06B2 Signing time: Wed 17 Dec 2025 22:00:35 +0000 Manifest this update: Wed 17 Dec 2025 22:00:35 +0000 Manifest next update: Thu 18 Dec 2025 22:00:35 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: MjyzBeyExqBgGK2rIpvYOXQ9mM5ovS+Z1JgxPHFiLTU=) 2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=) 3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:4d:5f:0c:e4:2a:ce:43:4f:ef:7e:fb:8e:d8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Dec 17 22:00:35 2025 GMT Not After : Dec 18 22:00:35 2025 GMT Subject: CN=d001567ccee959b28ba04219f096e7bb7a1eaa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:0f:fe:2a:3a:4d:fc:49:3e:d4:49:c2:bb: 71:07:d2:13:92:4f:71:b1:59:1e:f8:72:1b:92:b7: 8e:16:ad:cd:27:ba:43:f3:5e:a6:84:f9:bb:e7:b0: 3e:00:c8:34:31:08:cb:94:12:e2:56:1e:80:6a:96: a3:4c:19:ad:f0:0f:ee:49:4d:20:c6:2e:41:cc:c3: 78:9b:85:07:0c:83:82:ae:9c:a2:af:5d:f0:9a:d3: c1:d7:10:2b:15:07:32:98:80:33:ac:80:c9:d9:b3: cc:81:9f:45:aa:f2:e6:97:b5:9a:eb:46:95:38:af: 6b:63:67:a5:18:b5:11:70:82:cd:f8:39:f8:eb:bb: 10:84:9f:de:2b:e9:52:b1:53:ea:36:dc:e8:6f:b0: 10:00:4b:ae:6f:97:1c:1d:b3:80:b8:f4:f1:05:ce: 4d:22:73:a7:ea:14:cb:c5:a9:4e:23:c9:bb:31:a5: f5:96:91:8e:57:55:3a:33:6a:ee:de:72:5a:cf:ce: da:ed:09:f1:5c:da:ad:7c:60:d3:e0:7e:ba:4a:3f: 19:0a:a2:17:1e:f6:33:b9:9f:da:86:66:a7:5e:b5: 02:ab:13:29:ce:d0:a7:48:9c:83:ad:79:ae:37:38: b8:32:f0:ff:c3:9b:73:d6:27:80:f4:8d:ef:c2:9d: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:01:56:7C:CE:E9:59:B2:8B:A0:42:19:F0:96:E7:BB:7A:1E:AA:13 X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3b:82:76:91:b0:d1:55:e5:8f:60:77:6c:87:00:3b:4d:e0: 66:f6:1d:e7:9b:37:d6:c2:2d:96:b4:50:52:a6:f3:22:74:4f: d7:6f:aa:ca:13:dd:01:51:b4:c0:86:87:ea:5b:a6:8f:b4:b8: 3d:21:dd:3e:91:d8:37:3a:e1:c6:88:9e:12:64:95:07:3f:a3: 81:c3:03:d2:ba:4b:ee:3f:82:b7:f1:1b:be:d4:6e:6f:3a:54: 43:2d:d6:fd:6f:bb:e9:60:12:05:76:1a:f2:62:de:12:9a:2d: bf:6e:e2:1b:af:d8:ea:7a:1f:ec:f7:30:ef:47:75:40:fe:1f: ab:fa:0f:27:56:b0:b7:5c:11:1d:55:2a:b4:ea:a9:a4:0a:6e: 45:08:a2:e1:57:fe:c6:5c:e3:5d:ac:cb:6a:6a:b3:64:bf:3d: c4:07:1c:68:7f:b3:67:01:10:0a:a6:35:93:35:ad:f8:95:30: 21:91:74:66:a1:eb:c3:bf:6d:ea:1a:ba:0a:e3:2f:16:d8:a5: 9c:de:13:e5:0f:2e:56:43:eb:c6:9a:be:26:f1:9a:8f:d3:3e: 90:64:65:5d:07:79:ce:7e:cb:e5:7c:50:74:88:49:8e:91:8a: 1f:7b:a7:90:91:b6:83:4d:92:ff:4a:ab:4d:1a:53:ed:6d:8b: c3:d9:af:1f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsuVE1fDOQqzkNP7377jtiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjUxMjE3MjIwMDM1WhcNMjUxMjE4MjIwMDM1WjAzMTEwLwYDVQQD EyhkMDAxNTY3Y2NlZTk1OWIyOGJhMDQyMTlmMDk2ZTdiYjdhMWVhYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdMP/io6TfxJPtRJwrtxB9ITkk9x sVke+HIbkreOFq3NJ7pD816mhPm757A+AMg0MQjLlBLiVh6AapajTBmt8A/uSU0g xi5BzMN4m4UHDIOCrpyir13wmtPB1xArFQcymIAzrIDJ2bPMgZ9FqvLml7Wa60aV OK9rY2elGLURcILN+Dn467sQhJ/eK+lSsVPqNtzob7AQAEuub5ccHbOAuPTxBc5N InOn6hTLxalOI8m7MaX1lpGOV1U6M2ru3nJaz87a7QnxXNqtfGDT4H66Sj8ZCqIX HvYzuZ/ahmanXrUCqxMpztCnSJyDrXmuNzi4MvD/w5tz1ieA9I3vwp1p8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNABVnzO6Vmyi6BCGfCW57t6HqoTMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzuC dpGw0VXlj2B3bIcAO03gZvYd55s31sItlrRQUqbzInRP12+qyhPdAVG0wIaH6lum j7S4PSHdPpHYNzrhxoieEmSVBz+jgcMD0rpL7j+Ct/EbvtRubzpUQy3W/W+76WAS BXYa8mLeEpotv27iG6/Y6nof7Pcw70d1QP4fq/oPJ1awt1wRHVUqtOqppApuRQii 4Vf+xlzjXazLamqzZL89xAccaH+zZwEQCqY1kzWt+JUwIZF0ZqHrw79t6hq6CuMv FtilnN4T5Q8uVkPrxpq+JvGaj9M+kGRlXQd5zn7L5XxQdIhJjpGKH3unkJG2g02S /0qrTRpT7W2Lw9mvHw== -----END CERTIFICATE-----Generated at Thu Dec 18 01:14:26 2025 by rpki-client