This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json) Hash identifier: Mf8D9cJ1Q2fdwN1TwyyLzfmD7Fg8ExAATgXnqiif17Y= Subject key identifier: 5C:BE:D3:85:43:CE:10:37:87:36:99:F3:34:51:D4:73:34:42:59:AC Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Certificate serial: 019AF208E746120E3861F56B5AA2FD0E3748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft Manifest number: 0BA0 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: RidxajqH0h1zffGYGXnVISn4MdujkdgD0Nt8YMqFr0Y=) 2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e7:46:12:0e:38:61:f5:6b:5a:a2:fd:0e:37:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=5cbed38543ce1037873699f33451d473344259ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:68:45:93:b6:c3:58:01:d3:c1:46:11:63:0a: 27:88:1d:70:a9:06:d2:a8:ca:1d:41:0b:63:f1:2d: 8e:54:cf:21:af:52:11:d0:97:0a:ad:5f:54:d2:f2: 4b:74:a3:67:d7:08:32:24:a7:d4:72:b7:65:fe:60: ec:81:e6:d2:e2:fd:cd:35:00:fc:88:ab:f5:5d:1c: 3d:70:f8:f0:db:9f:f7:64:3d:35:98:5e:15:c2:37: 85:d3:18:e4:19:d2:67:d3:0c:62:6c:59:fa:3d:db: be:63:d7:c7:bf:fb:dd:5b:51:33:c4:fa:9a:77:27: 75:ea:fb:5c:f3:46:c9:66:27:d3:9a:6f:8d:e9:3c: ca:2c:69:2f:dc:fd:aa:22:7d:94:db:3c:8d:ae:04: 75:45:00:cd:cc:84:22:26:b3:7e:c0:d7:77:97:26: 6b:e7:63:e1:f0:32:9e:82:58:34:e3:a9:2f:d4:df: c4:bd:c9:73:d7:45:18:07:c6:5b:87:3d:a8:cb:3d: 75:2e:ac:8e:e0:d8:4d:74:fb:4e:a7:e0:da:ca:a1: 0a:b1:74:cc:b8:de:2a:f1:6f:b5:67:b4:1b:fa:15: 18:94:e5:60:5d:26:46:16:25:ad:3f:22:14:b7:da: 2e:40:55:90:12:69:8e:ec:c3:6c:45:a6:c5:f3:36: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BE:D3:85:43:CE:10:37:87:36:99:F3:34:51:D4:73:34:42:59:AC X509v3 Authority Key Identifier: keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:08:ec:80:5d:ce:53:3e:c7:3a:9d:db:14:79:7a:47:bf:a4: 26:a2:8f:fb:0b:75:7c:fb:17:a2:d5:8c:52:68:59:22:7d:61: ec:90:a4:8b:3c:f4:fb:66:69:37:4d:a0:40:3c:d9:9f:21:21: 6a:a2:12:ee:8b:56:08:90:b2:45:1a:63:cf:9b:3a:7f:f7:9a: 5f:83:19:26:44:91:b9:2d:dd:35:6e:92:57:6d:8b:69:04:07: bd:50:8f:0e:13:95:d8:15:77:62:ff:a2:0e:7d:c0:81:78:77: 10:96:13:f0:34:c3:b1:ed:bc:b9:92:84:21:b5:82:93:4a:4f: 61:fd:1a:fd:b1:0d:32:e0:39:5a:e6:ef:de:5f:af:fb:91:bb: 17:15:c5:04:58:05:5d:9c:4c:1a:80:20:bc:ec:0b:46:9c:b9: 4c:ab:d5:89:a0:06:15:8c:04:19:a4:01:c7:89:42:ab:00:f6: 2c:f9:08:32:4d:f5:1b:08:ba:89:b5:cd:c9:f0:ff:06:92:07: ef:dd:2e:1a:b8:cb:1e:d1:ea:23:10:9c:75:69:5a:6c:8d:2e: 04:c0:0d:57:70:69:23:78:1d:5c:16:89:8c:2d:07:50:c0:c7: 66:37:da:64:05:57:57:31:b3:a2:ff:d3:bf:2a:65:92:1a:ba: 83:16:e2:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOdGEg44YfVrWqL9DjdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk MzAyMDYwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD Eyg1Y2JlZDM4NTQzY2UxMDM3ODczNjk5ZjMzNDUxZDQ3MzM0NDI1OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGhFk7bDWAHTwUYRYwoniB1wqQbS qModQQtj8S2OVM8hr1IR0JcKrV9U0vJLdKNn1wgyJKfUcrdl/mDsgebS4v3NNQD8 iKv1XRw9cPjw25/3ZD01mF4VwjeF0xjkGdJn0wxibFn6Pdu+Y9fHv/vdW1EzxPqa dyd16vtc80bJZifTmm+N6TzKLGkv3P2qIn2U2zyNrgR1RQDNzIQiJrN+wNd3lyZr 52Ph8DKeglg046kv1N/Evclz10UYB8Zbhz2oyz11LqyO4NhNdPtOp+DayqEKsXTM uN4q8W+1Z7Qb+hUYlOVgXSZGFiWtPyIUt9ouQFWQEmmO7MNsRabF8zY4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFy+04VDzhA3hzaZ8zRR1HM0QlmsMB8GA1UdIwQY MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5 LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgjsgF3O Uz7HOp3bFHl6R7+kJqKP+wt1fPsXotWMUmhZIn1h7JCkizz0+2ZpN02gQDzZnyEh aqIS7otWCJCyRRpjz5s6f/eaX4MZJkSRuS3dNW6SV22LaQQHvVCPDhOV2BV3Yv+i Dn3AgXh3EJYT8DTDse28uZKEIbWCk0pPYf0a/bENMuA5Wubv3l+v+5G7FxXFBFgF XZxMGoAgvOwLRpy5TKvViaAGFYwEGaQBx4lCqwD2LPkIMk31Gwi6ibXNyfD/BpIH 790uGrjLHtHqIxCcdWlabI0uBMANV3BpI3gdXBaJjC0HUMDHZjfaZAVXVzGzov/T vyplkhq6gxbiNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:36 2025 by rpki-client