This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json) Hash identifier: JSGx4aRcwKbXk5JSnRO2dZlLdTIsZ0uFwEqjE9YTkPA= Subject key identifier: A6:15:16:1D:7D:F0:9F:D9:DA:7B:51:0E:01:10:3B:F1:46:95:97:34 Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f Certificate serial: 019B514E36C295B9249BF6E398E187F4B74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft Manifest number: 07A8 Signing time: Wed 24 Dec 2025 17:00:38 +0000 Manifest this update: Wed 24 Dec 2025 17:00:38 +0000 Manifest next update: Thu 25 Dec 2025 17:00:38 +0000 Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: wTwTgZd786558xIClOzpTw5xVByeiPlNlhHlFUTZV78=) 2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:36:c2:95:b9:24:9b:f6:e3:98:e1:87:f4:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f Validity Not Before: Dec 24 17:00:38 2025 GMT Not After : Dec 25 17:00:38 2025 GMT Subject: CN=a615161d7df09fd9da7b510e01103bf146959734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:76:6e:e9:94:98:b8:86:9c:98:e0:5b:4a: e4:61:34:f9:19:b2:84:58:a7:6b:13:b4:59:b4:98: a4:a5:e4:b7:2a:d6:e4:0a:23:c4:79:1c:0b:5a:a3: fd:56:ba:be:24:76:b3:10:38:dd:29:e6:60:f0:3e: 70:46:91:95:00:2a:db:24:7a:7d:69:64:cf:78:40: e7:62:99:21:cf:57:4f:5e:66:f9:bf:23:01:69:75: fb:ac:a0:2e:e4:11:ae:85:1e:e2:c6:92:52:5e:6f: 45:81:e2:cd:c8:35:45:1c:ce:55:80:f2:78:f2:a1: 9d:c2:1e:82:1d:cc:f0:78:c1:e9:d5:ee:0e:a9:82: 13:ec:e4:99:bc:11:ec:0e:aa:2b:73:e9:b2:2e:bb: d1:5f:a0:8b:5e:c3:f7:76:7c:1b:44:af:8d:a0:7f: 38:e1:6a:ce:7e:06:b8:a8:8f:0d:cd:95:da:bf:53: e5:3c:6f:46:59:2f:e1:3b:07:70:6b:f2:3f:bf:cc: 0f:31:df:a9:41:f1:1b:fe:63:66:0c:68:bb:7a:b5: 53:9a:68:5e:5c:e2:9a:b6:db:3f:bd:cb:62:a4:d8: c0:69:a5:78:e4:24:24:19:97:a5:77:e0:20:b9:5a: 91:0f:5e:1d:23:0f:f1:42:1d:92:6f:2b:0e:6e:f8: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:16:1D:7D:F0:9F:D9:DA:7B:51:0E:01:10:3B:F1:46:95:97:34 X509v3 Authority Key Identifier: keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3e:9a:0e:e6:da:54:01:47:7d:ed:7b:17:c0:c5:54:9e:13: db:75:ff:6b:02:f7:03:68:71:9f:3d:ef:d1:ea:71:40:8c:9a: 6e:93:32:af:83:76:f3:c3:b2:17:c9:77:43:dc:83:3f:89:4b: 93:ed:92:db:6c:12:2b:d7:66:ee:7f:4b:51:b0:28:19:ff:33: 37:88:48:76:67:d2:00:ec:0a:8e:68:0f:f2:73:c3:58:f7:53: 91:ee:b8:f6:ae:c8:08:50:38:b4:62:61:09:e4:74:0f:44:b7: 70:95:ed:e2:c6:b6:7e:d1:f4:3f:8d:84:1a:7d:47:5d:62:9b: d2:bc:b5:3e:c4:39:d6:19:a0:83:9d:c2:51:59:3f:42:51:a5: e1:4d:58:0a:4c:59:ce:7c:4c:7e:3d:4b:30:a7:a6:76:55:b3: 3f:f2:e9:25:63:67:02:c0:c2:55:8a:5e:b7:f0:bf:81:42:4b: 84:e0:6b:56:6b:2d:fb:5a:46:f0:21:21:29:62:ff:77:24:ee: 30:08:c7:b8:5a:59:0f:09:7a:35:a5:62:1f:12:b7:42:7b:51: f7:45:41:1b:31:18:ba:a3:c3:e7:77:7c:2d:29:a7:84:bd:f8: 00:f5:45:75:d5:1a:b0:32:6a:db:87:c2:8a:1c:0d:8a:6d:5f: 63:36:24:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtRTjbClbkkm/bjmOGH9LdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz N2ZjNGYwHhcNMjUxMjI0MTcwMDM4WhcNMjUxMjI1MTcwMDM4WjAzMTEwLwYDVQQD EyhhNjE1MTYxZDdkZjA5ZmQ5ZGE3YjUxMGUwMTEwM2JmMTQ2OTU5NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubd2bumUmLiGnJjgW0rkYTT5GbKE WKdrE7RZtJikpeS3KtbkCiPEeRwLWqP9Vrq+JHazEDjdKeZg8D5wRpGVACrbJHp9 aWTPeEDnYpkhz1dPXmb5vyMBaXX7rKAu5BGuhR7ixpJSXm9FgeLNyDVFHM5VgPJ4 8qGdwh6CHczweMHp1e4OqYIT7OSZvBHsDqorc+myLrvRX6CLXsP3dnwbRK+NoH84 4WrOfga4qI8NzZXav1PlPG9GWS/hOwdwa/I/v8wPMd+pQfEb/mNmDGi7erVTmmhe XOKatts/vctipNjAaaV45CQkGZeld+AguVqRD14dIw/xQh2SbysObvgE7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKYVFh198J/Z2ntRDgEQO/FGlZc0MB8GA1UdIwQY MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0 ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT6a DubaVAFHfe17F8DFVJ4T23X/awL3A2hxnz3v0epxQIyabpMyr4N288OyF8l3Q9yD P4lLk+2S22wSK9dm7n9LUbAoGf8zN4hIdmfSAOwKjmgP8nPDWPdTke649q7ICFA4 tGJhCeR0D0S3cJXt4sa2ftH0P42EGn1HXWKb0ry1PsQ51hmgg53CUVk/QlGl4U1Y CkxZznxMfj1LMKemdlWzP/LpJWNnAsDCVYpet/C/gUJLhOBrVmst+1pG8CEhKWL/ dyTuMAjHuFpZDwl6NaViHxK3QntR90VBGzEYuqPD53d8LSmnhL34APVFddUasDJq 24fCihwNim1fYzYkVQ== -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:00 2025 by rpki-client