This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json) Hash identifier: DNrlCq5ucosUY/axyhwKw30Imv776oSLsPwaRpGxtJs= Subject key identifier: E0:59:0A:BE:4C:82:B7:A0:2B:37:A6:72:CE:FE:84:70:B2:1D:01:E2 Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Certificate serial: 019B1C85CF9939099AC417136ECAC93C3936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 11:01:29 +0000 Manifest this update: Sun 14 Dec 2025 11:01:29 +0000 Manifest next update: Mon 15 Dec 2025 11:01:29 +0000 Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=) 2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: ZXn0IpHDi+Ae6PSJ3IJch82dXajRvZE0DEbQPxCqF+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:cf:99:39:09:9a:c4:17:13:6e:ca:c9:3c:39:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Validity Not Before: Dec 14 11:01:29 2025 GMT Not After : Dec 15 11:01:29 2025 GMT Subject: CN=e0590abe4c82b7a02b37a672cefe8470b21d01e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:57:00:36:ff:2f:50:c6:ef:6b:4a:eb:c4: dc:46:a1:0a:7e:09:9c:a6:46:48:18:72:e5:dc:cf: 9d:e2:ce:9f:55:58:92:2a:11:db:9a:9e:df:14:58: a8:ae:b1:de:bc:6d:1a:6e:67:3e:8d:e7:61:6f:4a: a7:4f:9a:73:6a:d2:ac:7b:39:f3:bb:5d:63:f1:17: 08:2e:d7:86:b0:40:0e:39:51:14:05:54:98:ee:88: b5:5a:08:c7:fa:1e:ad:1b:c6:eb:0f:c6:ad:25:bf: ce:2d:e5:88:12:33:79:73:aa:67:d4:57:da:39:c6: 03:f3:0d:68:02:6b:ad:b4:47:03:7c:89:1b:20:3a: 2a:a4:7f:70:07:2a:ad:dc:3c:05:cd:cb:59:b8:4c: e7:f1:00:ad:0c:94:b7:7e:fc:90:31:44:5b:68:f6: e0:28:21:9b:59:0c:84:c3:d8:a2:1a:55:ab:27:94: 7a:0b:31:ad:aa:52:b6:56:3d:22:9f:09:82:96:f7: 18:e1:62:1d:7b:6e:7b:74:c1:a5:86:f9:72:50:0f: 6f:1c:5e:f8:74:30:00:ba:8d:37:34:98:43:ac:00: 1d:a9:80:9e:8c:d2:b5:f9:e2:b4:5c:c8:39:41:93: dd:e8:f8:84:56:a6:73:c7:24:00:57:47:9f:67:99: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:59:0A:BE:4C:82:B7:A0:2B:37:A6:72:CE:FE:84:70:B2:1D:01:E2 X509v3 Authority Key Identifier: keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:1c:d4:28:c3:3b:31:3f:c5:75:bb:51:36:53:11:59:ac: 74:af:eb:2c:07:d0:c3:1d:47:ab:4d:6c:c7:ab:89:e6:e8:ca: 11:38:44:28:b5:26:86:c6:18:2e:7b:ce:22:a7:a5:82:73:5a: dd:72:93:f4:30:6c:00:e2:e3:9a:5f:2e:72:e9:f7:6f:d6:a1: 20:6d:64:25:1d:c6:18:f6:bd:a3:9f:47:53:59:2f:c7:fc:95: 54:2a:f8:67:11:5d:c1:aa:03:ae:65:16:81:53:41:3d:6e:64: c4:c7:e5:c2:50:9b:36:a5:1e:ca:33:7c:18:20:ea:61:6e:c4: 0a:68:a3:4e:9c:5d:e5:df:7c:12:a8:84:b7:58:3a:c7:bf:f7: 70:5e:95:dc:17:7e:b4:8d:ad:d3:86:ad:a9:79:36:09:3a:02: cf:61:9a:7e:b4:ce:69:4a:ef:d8:7a:2e:fe:18:9b:46:13:25: aa:79:42:e9:71:cd:c3:26:43:27:01:6a:c0:a7:26:eb:5e:27: ed:6d:a6:b5:5d:c6:7c:96:7a:e9:bb:93:4c:b2:4b:bd:8f:12: 01:a7:1a:bd:1e:18:0d:12:d8:c4:0a:00:a4:da:e6:89:66:37: b3:f7:4f:46:ea:f8:ec:74:16:85:f8:59:d6:2b:d4:91:b8:71: df:35:9e:7c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZschc+ZOQmaxBcTbsrJPDk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx ZGVlMGEwHhcNMjUxMjE0MTEwMTI5WhcNMjUxMjE1MTEwMTI5WjAzMTEwLwYDVQQD EyhlMDU5MGFiZTRjODJiN2EwMmIzN2E2NzJjZWZlODQ3MGIyMWQwMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3epXADb/L1DG72tK68TcRqEKfgmc pkZIGHLl3M+d4s6fVViSKhHbmp7fFFiorrHevG0abmc+jedhb0qnT5pzatKseznz u11j8RcILteGsEAOOVEUBVSY7oi1WgjH+h6tG8brD8atJb/OLeWIEjN5c6pn1Ffa OcYD8w1oAmuttEcDfIkbIDoqpH9wByqt3DwFzctZuEzn8QCtDJS3fvyQMURbaPbg KCGbWQyEw9iiGlWrJ5R6CzGtqlK2Vj0inwmClvcY4WIde257dMGlhvlyUA9vHF74 dDAAuo03NJhDrAAdqYCejNK1+eK0XMg5QZPd6PiEVqZzxyQAV0efZ5ndBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOBZCr5MgregKzemcs7+hHCyHQHiMB8GA1UdIwQY MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScUc 1CjDOzE/xXW7UTZTEVmsdK/rLAfQwx1Hq01sx6uJ5ujKEThEKLUmhsYYLnvOIqel gnNa3XKT9DBsAOLjml8ucun3b9ahIG1kJR3GGPa9o59HU1kvx/yVVCr4ZxFdwaoD rmUWgVNBPW5kxMflwlCbNqUeyjN8GCDqYW7ECmijTpxd5d98EqiEt1g6x7/3cF6V 3Bd+tI2t04atqXk2CToCz2GafrTOaUrv2Hou/hibRhMlqnlC6XHNwyZDJwFqwKcm 614n7W2mtV3GfJZ66buTTLJLvY8SAacavR4YDRLYxAoApNrmiWY3s/dPRur47HQW hfhZ1ivUkbhx3zWefA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:49 2025 by rpki-client