This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json) Hash identifier: 4GsgEPRF6pKYBx6FiUuj4LlnAMzpEQH6BTix1Y3zhzY= Subject key identifier: 3D:59:4C:19:59:49:43:C2:AD:9E:64:06:F2:36:56:8E:76:FF:77:BA Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019B7F398040189ABEA7A79F5A051D705846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft Manifest number: 06DC Signing time: Fri 02 Jan 2026 15:00:33 +0000 Manifest this update: Fri 02 Jan 2026 15:00:33 +0000 Manifest next update: Sat 03 Jan 2026 15:00:33 +0000 Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: aMiLheoo+JVMjhp67CRzrBVOdaiev6fX2+h8vf8BH7I=) 2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=) 3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:39:80:40:18:9a:be:a7:a7:9f:5a:05:1d:70:58:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Jan 2 15:00:33 2026 GMT Not After : Jan 3 15:00:33 2026 GMT Subject: CN=3d594c19594943c2ad9e6406f236568e76ff77ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:b6:dc:df:f5:c4:87:fc:32:80:66:f1:a8: e1:88:6f:b2:25:ff:36:e9:2c:ad:c8:07:b4:38:29: 07:17:6a:73:fe:87:73:f0:38:bb:bc:c4:88:c0:d2: f7:f1:02:4d:9e:58:94:9f:d9:b3:ca:31:22:eb:36: c0:da:57:ca:93:ca:2e:2d:af:29:50:56:fa:bb:1a: 49:2b:9f:2a:94:34:e2:54:d8:be:f4:72:9d:4e:c6: 91:82:b4:88:54:18:40:03:81:ad:d1:36:ba:ec:74: 90:23:41:d9:87:d6:74:87:e3:fd:df:a3:ea:c2:c0: 68:67:dc:78:7c:9b:98:55:06:d8:12:b8:22:b2:fd: be:a9:5a:07:11:37:a7:a2:34:81:cd:03:8a:cd:27: ca:cb:22:18:ae:27:48:71:47:97:b4:d2:2a:2d:2d: 63:b7:ae:b0:44:fe:1c:2f:f3:9c:77:57:23:b3:3f: 06:87:4e:0f:ce:85:19:92:b0:79:f3:a7:74:11:8e: 33:7b:da:c0:f7:57:36:bd:0a:2d:64:2a:25:33:3f: 14:f1:22:3e:92:2a:fe:4f:a9:d8:19:08:cb:3d:54: b5:66:2a:3a:7e:6a:67:92:b6:3b:d7:c0:54:10:ad: 38:f8:85:d2:a7:33:f8:d8:af:05:e0:83:b7:6d:e2: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:4C:19:59:49:43:C2:AD:9E:64:06:F2:36:56:8E:76:FF:77:BA X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e2:fa:14:26:01:f8:ec:cf:68:66:51:60:95:68:fe:f4:56: 7e:98:37:ba:63:64:e1:65:b4:c5:42:6f:32:e2:56:02:ba:92: b6:03:c9:0d:b8:cd:d2:05:46:21:ef:bb:a3:4d:27:ab:35:2f: 43:50:89:4a:d0:3a:33:26:28:8c:97:82:a3:05:7a:e5:24:8b: ae:75:89:42:f2:3d:24:d1:8d:b5:02:6f:10:3b:82:9c:4c:ce: 0d:a7:57:65:79:e3:74:c4:d1:f3:03:cc:7a:48:11:98:5a:3d: 48:94:e2:81:f9:d5:f0:64:6e:99:dd:e5:7b:18:c9:44:df:4f: b0:67:14:b6:42:32:d0:13:5f:3e:19:74:1f:fc:87:67:42:82: cc:ea:ba:b7:7d:63:c7:14:32:23:8b:19:01:f6:52:18:72:f7: 4c:29:55:8d:86:85:6e:70:a3:b5:31:c4:33:01:7a:1f:26:ff: fa:76:f8:93:cb:d4:d8:ec:74:09:15:c1:7c:84:02:b9:c1:7f: df:e5:82:9c:52:a1:9d:03:b4:8c:ab:f8:3e:64:a4:46:d0:8a: 03:56:f4:c7:4d:53:e5:41:b2:b7:cd:e5:51:84:07:8a:02:3f: e6:a8:1f:68:02:93:61:f1:90:b7:62:f5:6f:87:80:6b:ed:57: bf:04:4b:1d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/OYBAGJq+p6efWgUdcFhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjYwMTAyMTUwMDMzWhcNMjYwMTAzMTUwMDMzWjAzMTEwLwYDVQQD EygzZDU5NGMxOTU5NDk0M2MyYWQ5ZTY0MDZmMjM2NTY4ZTc2ZmY3N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttO23N/1xIf8MoBm8ajhiG+yJf82 6SytyAe0OCkHF2pz/odz8Di7vMSIwNL38QJNnliUn9mzyjEi6zbA2lfKk8ouLa8p UFb6uxpJK58qlDTiVNi+9HKdTsaRgrSIVBhAA4Gt0Ta67HSQI0HZh9Z0h+P936Pq wsBoZ9x4fJuYVQbYErgisv2+qVoHETenojSBzQOKzSfKyyIYridIcUeXtNIqLS1j t66wRP4cL/Ocd1cjsz8Gh04PzoUZkrB586d0EY4ze9rA91c2vQotZColMz8U8SI+ kir+T6nYGQjLPVS1Zio6fmpnkrY718BUEK04+IXSpzP42K8F4IO3beJd2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD1ZTBlZSUPCrZ5kBvI2Vo52/3e6MB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5 MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuL6 FCYB+OzPaGZRYJVo/vRWfpg3umNk4WW0xUJvMuJWArqStgPJDbjN0gVGIe+7o00n qzUvQ1CJStA6MyYojJeCowV65SSLrnWJQvI9JNGNtQJvEDuCnEzODadXZXnjdMTR 8wPMekgRmFo9SJTigfnV8GRumd3lexjJRN9PsGcUtkIy0BNfPhl0H/yHZ0KCzOq6 t31jxxQyI4sZAfZSGHL3TClVjYaFbnCjtTHEMwF6Hyb/+nb4k8vU2Ox0CRXBfIQC ucF/3+WCnFKhnQO0jKv4PmSkRtCKA1b0x01T5UGyt83lUYQHigI/5qgfaAKTYfGQ t2L1b4eAa+1XvwRLHQ== -----END CERTIFICATE-----Generated at Fri Jan 2 23:22:56 2026 by rpki-client