This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json) Hash identifier: j4v2qNCdl3GeHtP/xHZhJk6QsIdjYtHqFjspUNq67X4= Subject key identifier: 1E:23:F8:1C:B9:7F:13:14:9E:71:F1:72:D9:85:CD:75:1A:7B:20:40 Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Certificate serial: 019B3B6B4222E720924025133211AEBE0110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 11:00:43 +0000 Manifest this update: Sat 20 Dec 2025 11:00:43 +0000 Manifest next update: Sun 21 Dec 2025 11:00:43 +0000 Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=) 2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: Bx6zh7o+AIkT5d/j/wWuiXGFbvP2srpeNhO+QlB9lgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:42:22:e7:20:92:40:25:13:32:11:ae:be:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Validity Not Before: Dec 20 11:00:43 2025 GMT Not After : Dec 21 11:00:43 2025 GMT Subject: CN=1e23f81cb97f13149e71f172d985cd751a7b2040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b6:b7:96:57:c9:3d:0b:b8:e0:c9:ca:29:01: 3d:41:2d:2d:b8:ef:fd:c3:03:f2:a5:dd:ec:99:55: da:18:d8:5e:f4:87:dc:7f:9d:bc:c2:92:1a:5b:4f: af:60:cf:f1:f1:56:97:02:ba:fb:d9:13:46:98:74: f4:74:6b:7c:89:ef:c7:4d:7b:fd:1f:34:f5:a3:a0: cd:d8:c8:f0:82:ed:eb:99:0a:a9:42:a8:6d:b9:5d: 4f:bb:72:8f:cf:93:e2:6e:ae:b6:9d:31:f7:7e:40: 82:6b:15:ea:9f:44:67:6c:9c:e7:c1:c9:5a:09:9a: 20:3b:d5:44:35:b4:ee:f2:c9:5c:93:01:69:c3:b5: 52:c8:4e:b3:d7:f3:43:4e:37:db:07:06:fa:2a:09: 40:06:9c:3e:a3:bc:fd:10:ac:53:d4:aa:b0:31:6a: 3e:dc:02:90:41:b3:4a:3a:2f:a2:94:68:1f:41:76: 27:40:af:d0:2e:0b:da:bd:63:6d:5a:0f:23:de:c6: 11:c4:ab:95:95:8b:5c:68:d0:c3:ea:cd:54:41:83: c3:fb:01:77:25:15:97:8d:6c:a8:94:d3:f0:62:7c: f8:bb:36:80:25:7e:57:43:c8:6c:59:29:25:ef:89: 4d:3c:40:5e:4d:02:69:f4:4d:e7:12:ed:1a:fb:ce: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:23:F8:1C:B9:7F:13:14:9E:71:F1:72:D9:85:CD:75:1A:7B:20:40 X509v3 Authority Key Identifier: keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:73:01:41:80:4a:56:1e:d3:bb:43:2a:a0:45:4c:5c:8d:76: 21:0c:88:9e:ab:58:be:89:ae:b9:f4:0b:90:b2:d8:94:6f:a9: 80:3c:76:33:57:c6:e8:58:38:dc:89:92:90:21:c2:23:6d:6e: 8b:69:1c:6e:d3:39:23:b9:d8:60:11:2a:80:60:04:ce:3e:95: 5c:5c:f4:93:21:3a:5c:c6:b0:39:b3:95:e9:1c:49:3f:e1:64: 4a:11:d5:16:02:e2:50:a8:3c:11:11:17:f7:ec:09:f7:8f:10: 6c:0e:4a:ac:ce:7c:db:83:c5:3f:82:9e:0e:7f:bf:d5:83:7a: fd:65:8a:6f:b0:a0:8b:cf:6f:c6:b0:e0:68:ed:2a:9f:04:3e: 06:07:a9:a8:e1:3b:67:45:d7:ea:82:42:c9:ca:25:52:39:c1: 52:08:e2:3a:54:f1:a4:15:3c:fd:fc:9a:51:f1:72:05:6c:6c: d9:2c:22:b4:30:eb:39:45:2e:32:f3:d1:ce:8e:b5:46:03:c1: c5:5c:49:d6:ff:dd:b7:b6:8f:1a:79:96:58:fe:6e:19:66:39: 33:59:ec:f4:cb:07:01:f3:81:18:f5:d9:86:6c:e5:e1:16:ae: 7d:ab:84:2c:28:b1:d2:47:4c:91:4c:13:5d:2e:b4:f0:0e:09: 9b:73:35:62 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7a0Ii5yCSQCUTMhGuvgEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx ZGVlMGEwHhcNMjUxMjIwMTEwMDQzWhcNMjUxMjIxMTEwMDQzWjAzMTEwLwYDVQQD EygxZTIzZjgxY2I5N2YxMzE0OWU3MWYxNzJkOTg1Y2Q3NTFhN2IyMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgba3llfJPQu44MnKKQE9QS0tuO/9 wwPypd3smVXaGNhe9Ifcf528wpIaW0+vYM/x8VaXArr72RNGmHT0dGt8ie/HTXv9 HzT1o6DN2Mjwgu3rmQqpQqhtuV1Pu3KPz5Pibq62nTH3fkCCaxXqn0RnbJznwcla CZogO9VENbTu8slckwFpw7VSyE6z1/NDTjfbBwb6KglABpw+o7z9EKxT1KqwMWo+ 3AKQQbNKOi+ilGgfQXYnQK/QLgvavWNtWg8j3sYRxKuVlYtcaNDD6s1UQYPD+wF3 JRWXjWyolNPwYnz4uzaAJX5XQ8hsWSkl74lNPEBeTQJp9E3nEu0a+84DuwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB4j+By5fxMUnnHxctmFzXUaeyBAMB8GA1UdIwQY MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXMB QYBKVh7Tu0MqoEVMXI12IQyInqtYvomuufQLkLLYlG+pgDx2M1fG6Fg43ImSkCHC I21ui2kcbtM5I7nYYBEqgGAEzj6VXFz0kyE6XMawObOV6RxJP+FkShHVFgLiUKg8 EREX9+wJ948QbA5KrM5824PFP4KeDn+/1YN6/WWKb7Cgi89vxrDgaO0qnwQ+Bgep qOE7Z0XX6oJCycolUjnBUgjiOlTxpBU8/fyaUfFyBWxs2SwitDDrOUUuMvPRzo61 RgPBxVxJ1v/dt7aPGnmWWP5uGWY5M1ns9MsHAfOBGPXZhmzl4RaufauELCix0kdM kUwTXS608A4Jm3M1Yg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:13 2025 by rpki-client