This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: h7TOaVZ/KrNPD1+DBJnJQyjYLy9cLSURdOZFkfm0Law= Subject key identifier: D7:E4:B2:2D:83:74:61:F8:93:28:F7:84:95:15:C4:D0:C2:78:87:92 Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019B41A41EE125034BC2D934673D90E16F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 06BC Signing time: Sun 21 Dec 2025 16:00:33 +0000 Manifest this update: Sun 21 Dec 2025 16:00:33 +0000 Manifest next update: Mon 22 Dec 2025 16:00:33 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: lDMO77RoyXDRveAwkAfWMDNr7EbKlvFdjMWn5/0W/wo=) 2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=) 3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:1e:e1:25:03:4b:c2:d9:34:67:3d:90:e1:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Dec 21 16:00:33 2025 GMT Not After : Dec 22 16:00:33 2025 GMT Subject: CN=d7e4b22d837461f89328f7849515c4d0c2788792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:97:ee:08:39:ca:12:2c:ba:53:d4:c0:51: de:9d:dd:a8:cd:5b:30:0b:c8:9c:3d:ad:e4:5a:0e: 8f:b3:18:0a:8c:4c:4d:10:19:69:fb:5f:88:2f:46: 1b:22:1e:33:ce:35:20:53:18:af:27:ae:64:e5:40: 41:db:b6:ac:cb:71:35:19:87:2e:84:3f:28:75:86: 17:85:b0:c0:89:c6:73:e3:51:b7:7f:95:2d:f8:fd: f6:63:9c:4c:07:a2:2c:15:0a:8f:c8:79:29:5a:34: 3d:38:6b:2c:92:4e:e8:97:17:93:f0:e2:e7:b4:7d: 59:02:c4:3a:81:d2:6a:50:f7:16:29:f2:f8:14:ea: c6:3b:dc:93:8b:3f:81:44:86:67:fc:b7:8e:05:c7: 57:46:c2:45:76:bc:e8:74:9a:18:a9:a6:47:93:32: 37:08:5c:54:fd:07:1a:bd:49:05:cd:e0:e8:e6:e6: 80:b8:d6:b0:d3:ed:b7:dc:ad:1d:8d:3b:56:6d:18: f5:0f:9c:c7:f5:e7:00:b3:07:4c:28:ed:ea:7c:53: a4:35:b9:e1:be:c6:6c:ed:07:0f:7c:cc:db:66:07: f2:10:d1:08:12:c6:68:1f:a7:ff:60:8f:1d:83:69: f5:0f:98:bd:8a:bb:05:63:fa:b9:3b:a5:db:75:50: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E4:B2:2D:83:74:61:F8:93:28:F7:84:95:15:C4:D0:C2:78:87:92 X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f4:72:21:49:c8:d2:6a:bc:4b:6b:c0:51:da:58:45:c0:33: 61:6d:da:e1:e1:b6:df:32:10:ba:d5:47:2e:4e:5d:6d:f7:d4: e8:9b:c3:62:65:10:13:3b:5b:6f:19:17:fe:4e:50:a0:5a:7c: 44:ce:20:c0:64:0b:f4:1f:74:7d:24:52:83:5f:28:62:8e:b7: cd:1f:8a:22:c9:77:5e:a9:e7:c9:67:88:96:86:82:45:6b:89: 95:d4:65:43:71:10:1a:ea:76:db:7e:6c:32:94:88:21:0f:91: 02:15:ce:69:a8:9a:72:74:a4:55:74:3e:12:bb:82:0a:1a:bc: f0:04:5e:6d:ad:07:e7:80:c6:23:4a:8f:54:9c:50:97:bf:50: 0f:2e:74:42:a7:16:bb:c5:2e:89:c9:be:bd:e5:13:a2:e5:ba: eb:9a:6a:aa:8d:24:ce:49:42:df:a5:3f:f9:77:52:f2:8a:fe: 25:b4:91:ed:ae:34:1a:27:48:14:67:31:33:6b:57:06:d6:fd: e6:48:63:14:49:5f:cb:4f:b4:00:24:94:29:ef:78:e0:e2:26: c8:09:a8:8b:1c:4d:10:08:b4:af:b2:a1:55:e0:e5:c8:1e:64: b1:c5:5d:22:70:a3:1d:10:22:0e:5b:73:ba:c4:31:4b:e0:8c: ea:8f:71:6e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtBpB7hJQNLwtk0Zz2Q4W9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjUxMjIxMTYwMDMzWhcNMjUxMjIyMTYwMDMzWjAzMTEwLwYDVQQD EyhkN2U0YjIyZDgzNzQ2MWY4OTMyOGY3ODQ5NTE1YzRkMGMyNzg4NzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthyX7gg5yhIsulPUwFHend2ozVsw C8icPa3kWg6PsxgKjExNEBlp+1+IL0YbIh4zzjUgUxivJ65k5UBB27asy3E1GYcu hD8odYYXhbDAicZz41G3f5Ut+P32Y5xMB6IsFQqPyHkpWjQ9OGsskk7olxeT8OLn tH1ZAsQ6gdJqUPcWKfL4FOrGO9yTiz+BRIZn/LeOBcdXRsJFdrzodJoYqaZHkzI3 CFxU/QcavUkFzeDo5uaAuNaw0+233K0djTtWbRj1D5zH9ecAswdMKO3qfFOkNbnh vsZs7QcPfMzbZgfyENEIEsZoH6f/YI8dg2n1D5i9irsFY/q5O6XbdVCLRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNfksi2DdGH4kyj3hJUVxNDCeIeSMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfRy IUnI0mq8S2vAUdpYRcAzYW3a4eG23zIQutVHLk5dbffU6JvDYmUQEztbbxkX/k5Q oFp8RM4gwGQL9B90fSRSg18oYo63zR+KIsl3XqnnyWeIloaCRWuJldRlQ3EQGup2 235sMpSIIQ+RAhXOaaiacnSkVXQ+EruCChq88AReba0H54DGI0qPVJxQl79QDy50 QqcWu8Uuicm+veUTouW665pqqo0kzklC36U/+XdS8or+JbSR7a40GidIFGcxM2tX Btb95khjFElfy0+0ACSUKe944OImyAmoixxNEAi0r7KhVeDlyB5kscVdInCjHRAi DltzusQxS+CM6o9xbg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:38 2025 by rpki-client