This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json) Hash identifier: kT9ig8cXfI1Ge2LQ8umbAYHheA0nmgNXru+eFvLqhh8= Subject key identifier: 98:FF:F0:5E:A1:17:55:F7:8C:DF:E7:5F:FE:D3:99:6A:5D:C8:7C:13 Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e Certificate serial: 019AF19B1EB85A4079F3987EFC58A9FB9F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft Manifest number: 0D3C Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: pi08XdibNrkDotiJRWrobUFRct12YNjWQxQUzRpiG1g=) 2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1e:b8:5a:40:79:f3:98:7e:fc:58:a9:fb:9f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=98fff05ea11755f78cdfe75ffed3996a5dc87c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:1d:55:b8:c5:bb:76:67:fb:b5:8f:4a:50: 8e:22:c8:15:15:75:74:11:eb:5f:cc:59:4c:56:42: b9:60:53:68:7a:c4:93:ea:8e:c9:27:7f:29:43:c5: ed:0c:48:53:e0:37:ce:87:8f:ca:bd:d4:96:d9:f1: f0:43:00:0a:16:d9:03:ac:be:cf:a9:8e:fa:87:ef: 0a:85:45:21:94:ee:16:03:3b:2a:e1:ba:99:d1:c4: 5c:71:32:df:0a:84:85:51:6d:e8:91:78:b2:1d:62: c2:21:23:a2:c0:3d:da:76:b0:6c:0b:b4:c8:a0:31: 9d:ab:99:a0:a0:7d:f0:99:11:45:84:de:a6:47:ef: a2:05:1a:6c:8f:b7:ce:72:4f:ab:88:26:47:fe:3f: 1f:e8:60:f8:6e:38:d4:ed:27:6f:f2:e5:58:a0:26: db:c4:84:3d:94:e3:f2:77:ac:8a:c3:e2:b4:66:ed: 8c:e3:11:ff:49:39:e8:d4:7b:a1:2c:1c:ff:04:fd: 8a:dc:9d:12:d1:29:3b:ba:c2:35:c8:b8:4b:68:9b: 96:37:c6:40:74:e4:d9:3b:2c:9a:38:c0:17:64:f8: a0:19:42:92:07:96:1b:97:3d:89:59:3e:78:1f:de: c7:94:e6:b6:e2:c3:a0:12:23:7b:75:bf:6d:b3:69: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:F0:5E:A1:17:55:F7:8C:DF:E7:5F:FE:D3:99:6A:5D:C8:7C:13 X509v3 Authority Key Identifier: keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a7:6c:f9:ce:27:5e:8d:99:6e:65:40:30:fd:d2:3b:a4:48: 3f:77:65:35:74:83:01:71:a1:a6:6e:97:c4:5c:55:58:fb:42: 4a:6a:31:93:51:03:e8:0d:4c:68:a7:f5:ef:e2:c5:7d:3d:f9: f3:d5:03:5b:cf:e5:63:2c:c9:30:27:36:4a:78:28:bd:95:6c: 63:f8:fb:aa:64:a9:f0:86:c1:0a:25:8f:cf:e3:e9:2f:43:9f: 37:bd:90:b2:19:c1:50:b0:82:e9:4a:75:5d:0a:3d:b7:82:a4: 41:6e:3e:3a:e9:f8:b2:f1:1e:7d:c4:38:5f:c2:49:f7:68:1f: db:f1:18:b8:1a:ff:98:19:bf:68:10:7e:db:78:72:fc:87:36: 8d:97:ff:eb:00:0d:ef:c4:4b:9a:99:91:33:83:9a:ef:0f:7f: b0:6e:70:2e:7f:38:c5:a5:5c:e9:fe:1c:2f:e0:25:61:b5:3e: 16:ad:6f:ee:e7:c8:74:2c:9a:92:2e:3b:70:e6:89:a3:03:10: 53:28:bd:4d:3c:de:01:d0:ff:50:a0:04:d0:4e:ca:f0:54:39: cc:1b:db:dd:7e:0f:5a:6a:72:5f:09:a6:c5:a8:49:48:7f:49: 6d:93:8a:34:ca:6e:4b:b6:ed:eb:85:65:aa:1e:96:2e:50:2c: 48:d4:05:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx64WkB585h+/Fip+598MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3 Nzg0M2UwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg5OGZmZjA1ZWExMTc1NWY3OGNkZmU3NWZmZWQzOTk2YTVkYzg3YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEsdVbjFu3Zn+7WPSlCOIsgVFXV0 EetfzFlMVkK5YFNoesST6o7JJ38pQ8XtDEhT4DfOh4/KvdSW2fHwQwAKFtkDrL7P qY76h+8KhUUhlO4WAzsq4bqZ0cRccTLfCoSFUW3okXiyHWLCISOiwD3adrBsC7TI oDGdq5mgoH3wmRFFhN6mR++iBRpsj7fOck+riCZH/j8f6GD4bjjU7Sdv8uVYoCbb xIQ9lOPyd6yKw+K0Zu2M4xH/STno1HuhLBz/BP2K3J0S0Sk7usI1yLhLaJuWN8ZA dOTZOyyaOMAXZPigGUKSB5Yblz2JWT54H97HlOa24sOgEiN7db9ts2l+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj/8F6hF1X3jN/nX/7TmWpdyHwTMB8GA1UdIwQY MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnads+c4n Xo2ZbmVAMP3SO6RIP3dlNXSDAXGhpm6XxFxVWPtCSmoxk1ED6A1MaKf17+LFfT35 89UDW8/lYyzJMCc2SngovZVsY/j7qmSp8IbBCiWPz+PpL0OfN72QshnBULCC6Up1 XQo9t4KkQW4+Oun4svEefcQ4X8JJ92gf2/EYuBr/mBm/aBB+23hy/Ic2jZf/6wAN 78RLmpmRM4Oa7w9/sG5wLn84xaVc6f4cL+AlYbU+Fq1v7ufIdCyaki47cOaJowMQ Uyi9TTzeAdD/UKAE0E7K8FQ5zBvb3X4PWmpyXwmmxahJSH9JbZOKNMpuS7bt64Vl qh6WLlAsSNQFvA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:16 2025 by rpki-client