This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json) Hash identifier: +C7WsXujRo+7c/U6jlhCGnVVVZlQmc7w6kq5vugXpQI= Subject key identifier: 38:AA:68:C6:23:8F:BD:E4:84:AC:3C:89:1B:FF:C8:BD:6C:D0:2D:1D Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f Certificate serial: 019AF577D2915CB273826E558B0F9EC43481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft Manifest number: 177B Signing time: Sat 06 Dec 2025 21:01:01 +0000 Manifest this update: Sat 06 Dec 2025 21:01:01 +0000 Manifest next update: Sun 07 Dec 2025 21:01:01 +0000 Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: yPNqHJuTAJqQA3KO8E4MpMwpSsk5q1gSWx1xvRsgnl0=) 2: BM2Moga6uW9t4OydPnB8DTcOinw.roa (hash: IG1Kq6iyEsuHEjPMDq65TtiVsf5VzpCT3NE2QDKCuf0=) 3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d2:91:5c:b2:73:82:6e:55:8b:0f:9e:c4:34:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f Validity Not Before: Dec 6 21:01:01 2025 GMT Not After : Dec 7 21:01:01 2025 GMT Subject: CN=38aa68c6238fbde484ac3c891bffc8bd6cd02d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:df:26:be:3f:ce:a0:45:bc:37:f5:1c:03: 3e:f7:d4:05:ff:cd:f4:c3:c7:08:bb:0e:31:33:cd: 86:f0:f9:95:06:3a:a8:69:d1:f9:fc:c6:d4:c3:c6: 14:02:ae:10:90:39:d0:96:fd:de:08:64:14:62:b7: b5:0c:cd:f3:b5:85:2f:e0:a6:88:95:c8:89:09:6d: ee:5f:05:8c:7b:55:43:61:e0:88:57:0f:15:31:e4: 3e:d1:c9:af:c8:73:37:67:b0:e3:c8:95:35:5b:92: e5:e5:12:ac:29:1a:cf:3d:9e:de:f7:68:d0:5c:c9: cf:a2:f9:73:5f:25:d7:56:a7:24:91:91:79:d4:d4: 48:bb:4d:d7:f7:c7:06:0f:0c:49:e4:91:3d:8c:b0: 6d:5b:5d:1a:e2:51:a7:a2:37:70:3b:58:03:4a:74: 21:0b:35:82:b3:b0:7a:13:92:5f:bc:eb:91:fa:03: 0e:39:60:00:19:a2:91:00:8e:bb:be:76:6e:e0:87: e4:b8:8e:97:32:24:02:e4:31:71:b2:82:2b:14:4c: d7:39:5e:69:8a:46:bc:32:36:4e:b4:46:dd:b7:5a: 70:60:3d:ce:c0:d0:57:ea:e9:b1:21:91:55:46:d5: cc:a3:75:1b:e0:b9:50:98:9f:c5:02:76:11:64:b0: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AA:68:C6:23:8F:BD:E4:84:AC:3C:89:1B:FF:C8:BD:6C:D0:2D:1D X509v3 Authority Key Identifier: keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dd:48:84:9c:45:94:6a:d7:1f:8b:a0:bd:d1:98:49:40:9e: 4f:5a:f3:11:5c:6f:be:47:b1:18:20:32:35:f9:f1:61:15:06: e2:5b:a1:18:c3:35:69:cb:b9:2f:c3:58:b7:c7:72:b1:38:63: 77:61:77:e6:76:c7:81:52:ea:77:a7:f2:7f:ac:a2:14:a3:22: f4:1f:d9:23:e2:31:3a:79:70:83:53:4b:e7:78:10:ed:90:e2: 24:33:05:50:8e:74:d0:e9:5e:08:83:36:f3:f0:e4:0f:b5:43: a4:38:f7:be:eb:54:ea:74:32:6e:9f:33:12:e2:21:6b:22:ee: 42:ea:f8:6b:eb:32:e8:ff:db:ce:0e:0d:6f:02:b8:30:70:82: 75:58:ff:a9:4f:19:19:ae:bf:ec:23:8b:bb:df:40:9c:2a:1b: a6:bb:a1:39:71:19:43:b1:af:9f:48:83:b6:d9:3f:b3:89:7e: 75:77:9d:a3:5a:9b:d1:47:2d:53:d8:ac:0b:3e:ed:18:aa:e3: b1:cb:b1:6a:7a:bf:e7:27:e7:a0:96:0a:fb:09:10:e7:1c:b2: e8:e1:e2:ab:3b:64:65:1e:7d:82:38:0f:7b:3f:18:97:82:b7: 8a:7c:f4:e7:ce:34:d4:2f:f2:d6:47:40:5c:2e:45:7c:0c:7d: ea:98:62:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9KRXLJzgm5Viw+exDSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTcwM2RiMzAyMGNjMWVmMmZkNzEwOTFhNDY4ZjRhNjQ5 YzIzOGYwHhcNMjUxMjA2MjEwMTAxWhcNMjUxMjA3MjEwMTAxWjAzMTEwLwYDVQQD EygzOGFhNjhjNjIzOGZiZGU0ODRhYzNjODkxYmZmYzhiZDZjZDAyZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLffJr4/zqBFvDf1HAM+99QF/830 w8cIuw4xM82G8PmVBjqoadH5/MbUw8YUAq4QkDnQlv3eCGQUYre1DM3ztYUv4KaI lciJCW3uXwWMe1VDYeCIVw8VMeQ+0cmvyHM3Z7DjyJU1W5Ll5RKsKRrPPZ7e92jQ XMnPovlzXyXXVqckkZF51NRIu03X98cGDwxJ5JE9jLBtW10a4lGnojdwO1gDSnQh CzWCs7B6E5JfvOuR+gMOOWAAGaKRAI67vnZu4IfkuI6XMiQC5DFxsoIrFEzXOV5p ika8MjZOtEbdt1pwYD3OwNBX6umxIZFVRtXMo3Ub4LlQmJ/FAnYRZLDeDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiqaMYjj73khKw8iRv/yL1s0C0dMB8GA1UdIwQY MBaAFNQXA9swIMwe8v1xCRpGj0pknCOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYt NDhkMzFjNzVmMzFlLzEvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYtNDhkMzFjNzVmMzFl LzEvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY91IhJxF lGrXH4ugvdGYSUCeT1rzEVxvvkexGCAyNfnxYRUG4luhGMM1acu5L8NYt8dysThj d2F35nbHgVLqd6fyf6yiFKMi9B/ZI+IxOnlwg1NL53gQ7ZDiJDMFUI500OleCIM2 8/DkD7VDpDj3vutU6nQybp8zEuIhayLuQur4a+sy6P/bzg4NbwK4MHCCdVj/qU8Z Ga6/7COLu99AnCobpruhOXEZQ7Gvn0iDttk/s4l+dXedo1qb0UctU9isCz7tGKrj scuxanq/5yfnoJYK+wkQ5xyy6OHiqztkZR59gjgPez8Yl4K3inz058401C/y1kdA XC5FfAx96phiCA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:50 2025 by rpki-client