This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: mUlCYRKfXKqP2o3Go97nA7yweMhkubDcYpwIm8dE9Us= Subject key identifier: 50:69:F5:80:50:3D:7A:87:74:C3:0D:AA:7B:62:60:AA:93:C8:73:24 Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019AF2767B6570FD151AEAF8463272A935D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 0693 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: 9r+SoxqgMp6zszXeUNizTRZTeCerWktK00Vt2Nf2hvA=) 2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=) 3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7b:65:70:fd:15:1a:ea:f8:46:32:72:a9:35:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=5069f580503d7a8774c30daa7b6260aa93c87324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:0f:09:c1:47:78:55:01:cc:7e:2d:e6:ef: 68:27:30:2c:39:1d:87:c2:73:02:17:b8:a2:73:c6: 1c:4a:b4:6a:58:68:99:85:19:02:81:ee:00:dc:cc: c2:f3:ea:ca:da:d1:f5:26:ec:16:5b:3f:6c:f5:a0: 6c:d6:ba:10:79:1c:6d:32:4e:27:11:b6:b2:72:e3: 4e:08:a0:4e:3c:6f:f0:39:1a:99:03:1b:e1:21:a5: 3a:43:50:d2:ff:b9:42:5e:d0:8a:6b:df:7f:80:04: 97:3a:96:6d:e9:46:bc:e1:ba:61:ac:c0:3d:ae:2b: 52:b9:9b:9e:97:2e:c1:50:7b:67:13:45:1c:bb:9d: d3:2e:2c:70:f4:25:f9:22:1a:c7:4c:e5:03:30:4c: 61:16:e0:6c:56:cf:cb:4e:71:5d:26:7c:b7:60:50: 37:d5:97:7c:77:88:f6:ab:22:00:de:d4:09:82:32: 65:d0:2e:b6:b9:2b:21:98:c1:87:c4:df:75:c5:f5: 6a:d0:02:37:d3:6e:4e:17:25:dc:92:3a:e8:0a:c5: a5:af:78:80:51:52:f4:db:ca:38:12:cf:59:3b:59: 31:0d:df:ab:81:b2:75:ab:47:86:18:c5:3a:ff:83: e8:93:de:5c:b4:3a:4e:60:22:e4:42:37:1a:9d:76: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:F5:80:50:3D:7A:87:74:C3:0D:AA:7B:62:60:AA:93:C8:73:24 X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f7:f0:f2:f6:52:13:cb:ef:85:22:d3:f2:d1:40:e5:67:3b: bf:4f:b8:f9:8d:ee:4d:c8:b7:47:9e:b4:38:24:3e:9a:09:86: fd:97:41:7a:3a:e1:c1:ae:72:61:1d:9b:e0:08:fb:df:be:8d: d3:2e:70:af:ff:69:ee:4d:81:3b:4d:49:e6:fa:ce:c9:5a:ae: 97:39:2d:c9:33:ee:fd:09:54:e6:a9:a6:3f:15:ec:6a:6c:36: ca:1e:05:6a:bb:fa:80:98:04:02:f5:8c:d1:44:6b:55:92:0f: 04:21:72:43:10:cb:b7:06:b8:17:ba:9d:51:5b:b2:94:65:0e: 00:83:60:fd:cc:09:96:cf:a1:8a:41:27:f3:5b:d9:25:88:30: 69:28:34:3a:77:23:40:a4:7b:0e:8c:32:47:6d:fc:ce:66:54: 1b:85:4b:72:0a:0f:a7:97:6d:83:fe:eb:af:37:8f:22:61:fb: d9:da:a7:b9:39:88:33:02:a0:ea:d2:b7:a9:a7:01:58:bb:46: eb:1e:82:9b:3f:fa:3e:89:72:ae:79:f5:f5:75:b5:ab:3d:ae: 6c:c2:bf:f5:12:5c:08:59:c4:60:6d:9b:87:13:3a:23:e0:0d: 3c:40:d8:2c:01:74:8f:7f:dc:50:e7:6d:f9:29:76:ae:12:d7: e8:1d:53:c9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydntlcP0VGur4RjJyqTXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD Eyg1MDY5ZjU4MDUwM2Q3YTg3NzRjMzBkYWE3YjYyNjBhYTkzYzg3MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0PCcFHeFUBzH4t5u9oJzAsOR2H wnMCF7iic8YcSrRqWGiZhRkCge4A3MzC8+rK2tH1JuwWWz9s9aBs1roQeRxtMk4n EbaycuNOCKBOPG/wORqZAxvhIaU6Q1DS/7lCXtCKa99/gASXOpZt6Ua84bphrMA9 ritSuZuely7BUHtnE0Ucu53TLixw9CX5IhrHTOUDMExhFuBsVs/LTnFdJny3YFA3 1Zd8d4j2qyIA3tQJgjJl0C62uSshmMGHxN91xfVq0AI3025OFyXckjroCsWlr3iA UVL028o4Es9ZO1kxDd+rgbJ1q0eGGMU6/4Pok95ctDpOYCLkQjcanXamZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFBp9YBQPXqHdMMNqntiYKqTyHMkMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPfw 8vZSE8vvhSLT8tFA5Wc7v0+4+Y3uTci3R560OCQ+mgmG/ZdBejrhwa5yYR2b4Aj7 376N0y5wr/9p7k2BO01J5vrOyVqulzktyTPu/QlU5qmmPxXsamw2yh4Farv6gJgE AvWM0URrVZIPBCFyQxDLtwa4F7qdUVuylGUOAINg/cwJls+hikEn81vZJYgwaSg0 OncjQKR7DowyR238zmZUG4VLcgoPp5dtg/7rrzePImH72dqnuTmIMwKg6tK3qacB WLtG6x6Cmz/6Polyrnn19XW1qz2ubMK/9RJcCFnEYG2bhxM6I+ANPEDYLAF0j3/c UOdt+Sl2rhLX6B1TyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:28 2025 by rpki-client