This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json) Hash identifier: WO2vc3nMR0dTGeiy7y9h6ddYrrU9eLPyo195aDQW8xI= Subject key identifier: 1E:81:43:47:5C:08:DD:E6:44:54:9A:11:51:0A:24:11:B9:7F:D9:0A Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4 Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4 Certificate serial: 019AF12E520FB3228A9CB8F81E5F2B8742CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft Manifest number: 07D7 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: OQWKW9GJI3uNqAXfwLSp6qD5W8DeiiKOq+muzP1aF+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:52:0f:b3:22:8a:9c:b8:f8:1e:5f:2b:87:42:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=1e8143475c08dde644549a11510a2411b97fd90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:94:43:c2:f1:1c:6b:92:91:d1:08:99:a0: 54:47:99:59:26:33:04:ef:dd:28:71:1e:8c:68:70: 2d:0d:61:d0:05:c1:62:e6:4e:f6:45:bc:5b:3c:44: b6:7a:00:cd:45:53:c0:8a:16:ca:4b:69:37:03:44: c9:f9:0d:6b:fa:94:ca:9b:9f:4a:29:1c:c6:17:96: 0a:18:d4:75:a1:b6:8e:1f:d3:aa:29:b9:6c:14:0b: e9:93:7e:77:99:2f:d8:29:a3:b0:4d:3d:cb:24:b4: 68:d6:a2:f8:24:01:66:53:44:a9:bc:51:b8:b4:ea: 44:45:c8:10:51:bd:8e:64:a6:f5:29:52:dd:a9:6a: 88:9b:4e:32:2c:5e:53:58:02:d4:16:fe:ae:ad:62: 87:a1:72:5a:b4:e0:97:56:fe:1f:ba:fc:1e:fc:10: 7d:ba:29:05:c9:8e:57:d8:06:cd:28:89:97:ff:62: 9e:cb:4f:68:b6:98:22:4d:bf:46:2d:20:17:09:6a: b9:a7:ae:d8:f2:0b:f0:1b:e6:0f:75:14:b7:b1:03: d4:87:6a:bd:5c:ea:ee:cb:86:6d:53:59:40:70:55: c3:b8:39:45:04:dd:17:b7:6b:32:82:d8:c4:8f:11: 89:bd:c1:76:99:02:98:98:76:6a:f9:b9:d2:74:8a: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:81:43:47:5C:08:DD:E6:44:54:9A:11:51:0A:24:11:B9:7F:D9:0A X509v3 Authority Key Identifier: keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:31:f4:20:c2:ff:4d:ea:0f:7e:f2:ab:78:9a:95:b6:bf:42: 67:2d:1e:fb:cf:c1:3b:94:97:d6:f1:19:dd:f4:28:34:86:8f: 2f:c0:47:f9:79:e5:cf:82:65:7d:9a:1a:b4:f8:0d:1e:4e:03: 73:a2:ff:e9:0e:6b:d9:c7:d6:67:0e:d3:96:0f:0a:16:bc:12: 2a:42:e3:6f:e4:6c:79:b1:dc:7a:0d:ab:5a:1b:fd:bf:cf:b7: 69:4a:58:f3:a1:67:02:cf:c9:2c:34:30:96:5c:3c:d5:31:2f: 95:d6:ca:72:ea:28:3a:30:20:74:88:1d:d8:ae:90:67:7b:69: 21:e8:0a:27:cc:fe:2a:e8:9e:fb:32:42:d9:7b:0c:d5:95:3d: 98:e0:7e:72:17:b8:b5:93:55:7c:b3:8f:d9:80:84:c8:43:46: 00:e2:1f:1b:de:9d:ad:be:5d:b8:d5:71:cc:39:3c:48:fe:ed: b3:06:d6:05:a7:18:91:15:64:54:92:5a:69:00:2d:11:64:f8: 0b:65:69:96:67:8c:be:e9:17:66:7f:7b:9d:cc:3a:db:4d:24: 5f:a0:38:2e:fd:f0:c2:36:5a:1c:d9:d1:c3:16:2e:0b:0d:db: f6:2b:4c:83:d9:8e:0b:bd:a4:e0:0b:20:ca:5f:07:93:7c:3c: 59:85:29:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlIPsyKKnLj4Hl8rh0LLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTgxZGUxYjMyYjdjMTA1MGQwYjBjYTZkNjQwZDQ2M2E1 MzUyZjQwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygxZTgxNDM0NzVjMDhkZGU2NDQ1NDlhMTE1MTBhMjQxMWI5N2ZkOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S2UQ8LxHGuSkdEImaBUR5lZJjME 790ocR6MaHAtDWHQBcFi5k72RbxbPES2egDNRVPAihbKS2k3A0TJ+Q1r+pTKm59K KRzGF5YKGNR1obaOH9OqKblsFAvpk353mS/YKaOwTT3LJLRo1qL4JAFmU0SpvFG4 tOpERcgQUb2OZKb1KVLdqWqIm04yLF5TWALUFv6urWKHoXJatOCXVv4fuvwe/BB9 uikFyY5X2AbNKImX/2Key09otpgiTb9GLSAXCWq5p67Y8gvwG+YPdRS3sQPUh2q9 XOruy4ZtU1lAcFXDuDlFBN0Xt2sygtjEjxGJvcF2mQKYmHZq+bnSdIqdcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6BQ0dcCN3mRFSaEVEKJBG5f9kKMB8GA1UdIwQY MBaAFNQYHeGzK3wQUNCwym1kDUY6U1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDct YWYxZTJkZjViZGMzLzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDctYWYxZTJkZjViZGMz LzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDH0IML/ TeoPfvKreJqVtr9CZy0e+8/BO5SX1vEZ3fQoNIaPL8BH+Xnlz4JlfZoatPgNHk4D c6L/6Q5r2cfWZw7Tlg8KFrwSKkLjb+RsebHceg2rWhv9v8+3aUpY86FnAs/JLDQw llw81TEvldbKcuooOjAgdIgd2K6QZ3tpIegKJ8z+Kuie+zJC2XsM1ZU9mOB+che4 tZNVfLOP2YCEyENGAOIfG96drb5duNVxzDk8SP7tswbWBacYkRVkVJJaaQAtEWT4 C2VplmeMvukXZn97ncw6200kX6A4Lv3wwjZaHNnRwxYuCw3b9itMg9mOC72k4Asg yl8Hk3w8WYUpCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:32 2025 by rpki-client