This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json) Hash identifier: lVeHe8J/JD0S2ErgT8ZHMpChFUOH+TDXI9uDCTXMRKY= Subject key identifier: A1:0F:BA:21:23:D9:1D:E2:8D:69:EB:01:D5:C3:2A:3F:AA:6F:5F:D7 Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Certificate serial: 019B3D910677CC25669F40C77910FA02701B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft Manifest number: 0AAA Signing time: Sat 20 Dec 2025 21:01:13 +0000 Manifest this update: Sat 20 Dec 2025 21:01:13 +0000 Manifest next update: Sun 21 Dec 2025 21:01:13 +0000 Files and hashes: 1: A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa (hash: TKnnwgB4D2OW3syeJW6W6YQDxOjqWLylQxuIymjfrLw=) 2: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: HwTeeLna6FtBSbJwGf4mYnfwRe3m1h74lSMFZbxGKMg=) 3: Ka_z-__yfPUNdCEkEmrWJv_gA2o.roa (hash: u3MD0TaHO1ydISnjdsribaPZzm3duPVcA9ePVcYit+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:06:77:cc:25:66:9f:40:c7:79:10:fa:02:70:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Validity Not Before: Dec 20 21:01:13 2025 GMT Not After : Dec 21 21:01:13 2025 GMT Subject: CN=a10fba2123d91de28d69eb01d5c32a3faa6f5fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:ad:69:bb:58:b7:6d:08:54:b4:3c:dc:8c: 5b:3c:1a:6b:f5:ce:c7:5f:20:46:9e:d2:d9:ed:32: 83:e4:bc:9f:bc:29:4f:35:0b:f9:66:3f:85:43:9f: f2:16:9c:10:57:7e:17:5d:85:32:b9:84:16:47:8a: 69:83:db:08:94:37:3a:63:77:9f:dd:df:0a:06:e2: 49:df:31:5c:57:7a:1f:e5:07:10:b7:1d:98:35:49: 2a:6f:8b:76:5b:88:69:14:79:8d:99:24:2a:f1:8e: 0c:f9:1a:66:78:45:5e:3d:61:48:15:10:8e:93:3f: 5a:d7:65:cd:c4:eb:5a:ac:be:7f:2e:f0:1b:5c:ad: e5:2c:18:8b:84:3f:cc:92:9a:5b:c3:ec:90:cd:bd: c8:14:ab:ba:3e:e2:0a:f6:6b:d9:c2:54:99:80:9a: e4:d8:af:e4:69:df:50:4c:a6:2b:a9:2a:06:d2:9d: 42:eb:21:9b:88:d1:89:ae:63:8e:6a:60:26:18:e2: fa:f4:47:69:ee:94:85:b5:b5:a9:10:62:41:74:70: df:20:d3:a6:41:99:86:1a:83:79:b1:ea:6c:37:20: 86:97:7c:61:d6:f2:b7:cd:4c:e1:a0:86:85:c7:09: 6e:72:b6:f7:0d:77:ab:91:b7:eb:f8:52:9f:01:96: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:BA:21:23:D9:1D:E2:8D:69:EB:01:D5:C3:2A:3F:AA:6F:5F:D7 X509v3 Authority Key Identifier: keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a6:49:a4:0d:6f:8b:bb:3a:df:3a:58:82:f1:9a:d6:b6:57: 5e:1c:21:51:69:00:68:69:a4:8a:ec:14:39:5b:fc:cc:e4:be: 89:7e:8e:50:9f:8b:a3:6c:9a:ad:dc:d0:b2:f8:49:95:ee:e3: ce:9b:69:e0:3f:12:46:8c:ef:ce:2a:eb:3f:69:84:82:69:6c: 9f:c2:50:13:c5:00:61:b9:d2:f2:00:1d:86:4d:9e:71:d4:df: ac:91:0d:c3:be:47:b0:a4:aa:b7:c6:dc:86:f3:e9:20:65:90: 84:dc:97:51:c1:b6:2a:62:9c:71:cd:4e:59:8d:94:39:e4:0b: b9:3a:9b:aa:8c:ab:7c:9c:36:30:fd:cd:3c:e0:1e:c1:3e:2a: d9:6d:36:a7:bb:6b:ef:86:22:8f:fe:72:af:11:a4:6a:eb:2f: fa:f4:1d:ad:30:db:fc:5c:ca:68:a3:04:ca:0b:1a:e8:62:4f: 83:9d:6c:ce:43:a4:c5:66:de:b2:04:a8:75:9f:70:3e:40:1a: 62:b6:62:ee:f6:9d:81:2b:bd:12:b3:70:2c:51:9a:7f:e5:60: f8:72:be:53:86:10:37:55:ad:c2:8e:54:e1:39:c0:3a:84:81: 9c:70:7b:8d:ca:3d:fd:b6:46:34:a4:3a:f5:32:45:f6:7e:9f: 55:48:1c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQZ3zCVmn0DHeRD6AnAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MDBkNzdlZjllYTBlZDI5NTJiZTJmNjBmYWQzYWVjYzJl MTY4YWMwHhcNMjUxMjIwMjEwMTEzWhcNMjUxMjIxMjEwMTEzWjAzMTEwLwYDVQQD EyhhMTBmYmEyMTIzZDkxZGUyOGQ2OWViMDFkNWMzMmEzZmFhNmY1ZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNytabtYt20IVLQ83IxbPBpr9c7H XyBGntLZ7TKD5LyfvClPNQv5Zj+FQ5/yFpwQV34XXYUyuYQWR4ppg9sIlDc6Y3ef 3d8KBuJJ3zFcV3of5QcQtx2YNUkqb4t2W4hpFHmNmSQq8Y4M+RpmeEVePWFIFRCO kz9a12XNxOtarL5/LvAbXK3lLBiLhD/Mkppbw+yQzb3IFKu6PuIK9mvZwlSZgJrk 2K/kad9QTKYrqSoG0p1C6yGbiNGJrmOOamAmGOL69Edp7pSFtbWpEGJBdHDfINOm QZmGGoN5sepsNyCGl3xh1vK3zUzhoIaFxwlucrb3DXerkbfr+FKfAZZAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEPuiEj2R3ijWnrAdXDKj+qb1/XMB8GA1UdIwQY MBaAFAQA13756g7SlSvi9g+tOuzC4WisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgt YTYwMTM4YzFjMDQ2LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgtYTYwMTM4YzFjMDQ2 LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6ZJpA1v i7s63zpYgvGa1rZXXhwhUWkAaGmkiuwUOVv8zOS+iX6OUJ+Lo2yardzQsvhJle7j zptp4D8SRozvzirrP2mEgmlsn8JQE8UAYbnS8gAdhk2ecdTfrJENw75HsKSqt8bc hvPpIGWQhNyXUcG2KmKccc1OWY2UOeQLuTqbqoyrfJw2MP3NPOAewT4q2W02p7tr 74Yij/5yrxGkausv+vQdrTDb/FzKaKMEygsa6GJPg51szkOkxWbesgSodZ9wPkAa YrZi7vadgSu9ErNwLFGaf+Vg+HK+U4YQN1Wtwo5U4TnAOoSBnHB7jco9/bZGNKQ6 9TJF9n6fVUgcqA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:38 2025 by rpki-client