This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json) Hash identifier: Me94CRQfpDLdBDZTbPh8kxjUO7iLQNgKcirZm09mNw4= Subject key identifier: 32:08:DE:83:E3:A8:86:6D:7D:0B:0D:7A:F7:78:5D:6A:7B:0C:F9:79 Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Certificate serial: 019AF20967A525AB3F9268D6D118F44D9703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:33 +0000 Manifest this update: Sat 06 Dec 2025 05:01:33 +0000 Manifest next update: Sun 07 Dec 2025 05:01:33 +0000 Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=) 2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: 3rcQcH9IE4l9V9DxlbXvQZCjdxliskDW9yKYXVgM/hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:67:a5:25:ab:3f:92:68:d6:d1:18:f4:4d:97:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Validity Not Before: Dec 6 05:01:33 2025 GMT Not After : Dec 7 05:01:33 2025 GMT Subject: CN=3208de83e3a8866d7d0b0d7af7785d6a7b0cf979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:ce:e5:81:19:bf:e7:9a:52:dd:c5:db:74: dc:6f:18:8e:12:72:ce:a0:5b:68:1e:b6:7b:4b:82: 3a:fc:aa:24:c6:2a:39:f5:8e:15:c9:9e:2e:3d:28: 01:71:5d:60:c4:35:20:f9:96:d0:4b:81:be:45:9e: 1d:c7:ae:19:96:00:f3:00:1a:12:83:bf:74:4a:7c: c9:e4:82:02:05:fe:bc:70:31:fa:e6:56:77:89:d7: c7:6f:ba:f7:c1:74:97:e3:53:e5:19:e6:c2:5d:a3: b4:e5:a4:ef:01:a0:92:0e:1a:ad:dd:28:86:64:78: 0d:d7:3a:22:0d:43:41:64:85:81:41:96:15:08:ec: 5f:6c:de:56:84:dd:51:b2:7a:1f:99:25:fb:0f:50: 7d:66:99:6b:c8:f2:1b:95:e8:a8:d4:3f:1b:06:95: a3:8a:52:a4:e1:4b:5b:3c:68:93:f2:e6:a7:99:4d: 49:f8:67:80:2a:c2:4c:72:5f:ec:5d:60:21:53:6a: 4b:bf:3f:6f:ba:08:7e:63:fe:40:0b:99:ab:16:50: fc:3a:43:be:11:ed:48:f7:33:13:80:f1:92:83:17: 01:c8:ae:c4:5c:5a:03:c7:eb:3e:c4:b8:b5:b2:f6: a4:f5:c7:25:4f:4d:a8:61:f9:6b:40:98:77:26:31: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:08:DE:83:E3:A8:86:6D:7D:0B:0D:7A:F7:78:5D:6A:7B:0C:F9:79 X509v3 Authority Key Identifier: keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b6:55:59:5a:0f:02:02:5e:f9:7b:c3:98:fe:f3:64:55:46: b3:13:be:cd:72:46:3e:bf:51:c8:5f:14:72:47:21:fb:7d:9d: 3c:66:04:d3:27:c4:39:0f:d8:9f:d7:f7:fe:44:c5:d0:27:93: 50:ea:c2:ac:5f:ff:a3:7b:6a:30:d1:21:8d:4e:02:2b:32:61: fc:a9:9e:61:f5:0e:22:e3:82:b0:50:ec:ac:49:8d:03:8f:7d: 26:1f:de:2a:06:63:b2:37:f2:c4:ea:35:41:34:e2:9d:21:5c: 18:81:49:94:c6:c7:46:01:fe:86:3a:6e:34:54:53:db:3e:90: eb:ea:41:46:ef:05:e2:39:9d:9e:ef:44:78:1d:38:a7:c9:0a: 03:7f:b0:be:62:41:e1:6f:12:6c:46:e4:05:d9:da:c7:57:88: 23:73:5c:45:91:24:fe:92:12:e8:be:2e:f1:35:a1:15:b9:2e: 56:22:2c:f1:29:46:c2:c6:20:ed:55:c1:42:6c:33:b6:41:5f: a8:f1:14:be:41:95:d8:7b:44:cc:d8:e1:70:42:2a:bc:64:ee: 1f:97:a0:bc:30:9b:61:0c:d7:7c:1f:f3:57:d5:8a:45:ec:f2: 3c:9b:58:63:57:f0:7f:60:52:eb:f8:da:c7:d6:2f:26:ab:b8: 54:2f:98:de -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCWelJas/kmjW0Rj0TZcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx ZGVlMGEwHhcNMjUxMjA2MDUwMTMzWhcNMjUxMjA3MDUwMTMzWjAzMTEwLwYDVQQD EygzMjA4ZGU4M2UzYTg4NjZkN2QwYjBkN2FmNzc4NWQ2YTdiMGNmOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7LO5YEZv+eaUt3F23TcbxiOEnLO oFtoHrZ7S4I6/Kokxio59Y4VyZ4uPSgBcV1gxDUg+ZbQS4G+RZ4dx64ZlgDzABoS g790SnzJ5IICBf68cDH65lZ3idfHb7r3wXSX41PlGebCXaO05aTvAaCSDhqt3SiG ZHgN1zoiDUNBZIWBQZYVCOxfbN5WhN1RsnofmSX7D1B9ZplryPIbleio1D8bBpWj ilKk4UtbPGiT8uanmU1J+GeAKsJMcl/sXWAhU2pLvz9vugh+Y/5AC5mrFlD8OkO+ Ee1I9zMTgPGSgxcByK7EXFoDx+s+xLi1svak9cclT02oYflrQJh3JjGmoQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDII3oPjqIZtfQsNevd4XWp7DPl5MB8GA1UdIwQY MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7ZV WVoPAgJe+XvDmP7zZFVGsxO+zXJGPr9RyF8Uckch+32dPGYE0yfEOQ/Yn9f3/kTF 0CeTUOrCrF//o3tqMNEhjU4CKzJh/KmeYfUOIuOCsFDsrEmNA499Jh/eKgZjsjfy xOo1QTTinSFcGIFJlMbHRgH+hjpuNFRT2z6Q6+pBRu8F4jmdnu9EeB04p8kKA3+w vmJB4W8SbEbkBdnax1eII3NcRZEk/pIS6L4u8TWhFbkuViIs8SlGwsYg7VXBQmwz tkFfqPEUvkGV2HtEzNjhcEIqvGTuH5egvDCbYQzXfB/zV9WKRezyPJtYY1fwf2BS 6/jax9YvJqu4VC+Y3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:12 2025 by rpki-client