This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json) Hash identifier: 0FyRWP5q0UeDYsEqxWIhBI7S/mCDiE9jCrPxUjQ3G+Y= Subject key identifier: 39:0F:D3:6C:25:E8:E0:36:D5:83:16:72:C7:6F:7B:21:F1:F7:48:FA Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Certificate serial: 019B6FC669013E6057917354DD9EF677F416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft Manifest number: 0AC4 Signing time: Tue 30 Dec 2025 15:00:32 +0000 Manifest this update: Tue 30 Dec 2025 15:00:32 +0000 Manifest next update: Wed 31 Dec 2025 15:00:32 +0000 Files and hashes: 1: A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa (hash: TKnnwgB4D2OW3syeJW6W6YQDxOjqWLylQxuIymjfrLw=) 2: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: 3+FUbh9EFUF8up4YMq7C4v9iSt/fB0TmljNB9U9dHlU=) 3: Ka_z-__yfPUNdCEkEmrWJv_gA2o.roa (hash: u3MD0TaHO1ydISnjdsribaPZzm3duPVcA9ePVcYit+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:69:01:3e:60:57:91:73:54:dd:9e:f6:77:f4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Validity Not Before: Dec 30 15:00:32 2025 GMT Not After : Dec 31 15:00:32 2025 GMT Subject: CN=390fd36c25e8e036d5831672c76f7b21f1f748fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:12:15:f6:d0:65:15:70:46:a6:b9:d3:99: 6a:86:1d:c4:0a:72:8d:af:b2:d4:c2:f0:37:6e:ee: 7c:0f:c6:e1:d2:8e:5b:e0:89:58:cb:0b:04:52:a0: ce:ec:01:a8:bd:e3:75:f5:23:97:8d:59:f0:5d:7c: be:ba:84:91:01:89:4c:b3:8a:5b:f7:d6:a9:6c:8a: 76:52:f6:a4:e2:41:55:c6:fc:6e:ba:5e:f0:93:31: ef:f8:ce:bb:75:17:41:4c:ad:dd:eb:c7:8c:34:a6: b4:31:73:b6:3a:44:e2:5d:64:60:2d:ef:bf:de:ac: d0:53:19:56:46:d3:f5:02:72:3e:24:39:a8:37:b3: dd:b3:c5:6b:95:0a:e0:0e:6a:6a:8e:34:e2:fe:48: a7:8c:52:f2:e8:a8:50:36:aa:c6:a5:42:d6:9d:40: aa:ab:00:8b:06:e9:db:2d:6a:a3:12:3b:bc:0d:80: 31:65:4d:52:3b:1a:47:ff:cc:22:55:7f:c3:23:89: ea:5d:0c:14:6b:8d:de:ee:f9:6c:c5:ae:0d:cb:46: a9:ac:9d:c7:b8:ac:fe:cd:55:93:89:d7:ea:c3:dd: 69:f3:f2:35:d3:47:11:46:2e:22:48:56:92:1a:39: c0:bd:cc:e3:92:06:03:5c:ad:d9:85:a5:ef:3e:22: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:D3:6C:25:E8:E0:36:D5:83:16:72:C7:6F:7B:21:F1:F7:48:FA X509v3 Authority Key Identifier: keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:b8:d4:fc:74:a5:9b:7b:b6:a5:f4:f9:28:ef:b1:81:f0: de:40:d5:df:20:78:c9:b4:b3:74:e9:dc:4f:f9:10:4e:56:13: 26:ae:74:6f:6f:17:fd:39:bf:93:37:99:74:3f:0d:d5:04:1c: 3d:d7:76:d1:d9:8f:f3:6c:7d:b0:fe:fc:c3:78:7b:a7:94:e6: f0:99:21:0b:37:6e:77:d0:c1:25:b3:1f:6b:92:b1:a5:de:b4: e6:5b:32:d5:3c:e0:46:ad:be:bc:b1:ae:f9:12:d4:20:ac:39: 70:68:d0:6f:af:4a:62:9f:e0:5c:49:f4:e4:8f:f2:38:2d:49: af:88:68:fd:69:4d:dd:0d:c7:11:41:ab:70:da:8a:20:72:ed: 0e:4d:83:c8:af:ed:70:f4:98:71:4f:43:80:d4:20:c9:3b:dd: 89:aa:24:ef:88:6d:36:f4:40:43:2b:27:2c:4e:d3:ff:76:be: d4:ca:7c:50:23:04:de:37:19:b3:72:11:65:02:26:ef:b7:df: eb:e4:4c:8a:4e:b1:33:96:4d:2a:19:91:d2:bf:a7:e8:a0:fd: f4:c8:f0:22:c3:62:4a:c4:8f:e6:96:6e:e3:46:4d:9b:5b:30: 55:ac:3c:77:e9:6e:00:e4:8d:80:60:2a:c8:41:b4:44:80:44: 34:84:c7:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxmkBPmBXkXNU3Z72d/QWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MDBkNzdlZjllYTBlZDI5NTJiZTJmNjBmYWQzYWVjYzJl MTY4YWMwHhcNMjUxMjMwMTUwMDMyWhcNMjUxMjMxMTUwMDMyWjAzMTEwLwYDVQQD EygzOTBmZDM2YzI1ZThlMDM2ZDU4MzE2NzJjNzZmN2IyMWYxZjc0OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTQSFfbQZRVwRqa505lqhh3ECnKN r7LUwvA3bu58D8bh0o5b4IlYywsEUqDO7AGoveN19SOXjVnwXXy+uoSRAYlMs4pb 99apbIp2Uvak4kFVxvxuul7wkzHv+M67dRdBTK3d68eMNKa0MXO2OkTiXWRgLe+/ 3qzQUxlWRtP1AnI+JDmoN7Pds8VrlQrgDmpqjjTi/kinjFLy6KhQNqrGpULWnUCq qwCLBunbLWqjEju8DYAxZU1SOxpH/8wiVX/DI4nqXQwUa43e7vlsxa4Ny0aprJ3H uKz+zVWTidfqw91p8/I100cRRi4iSFaSGjnAvczjkgYDXK3ZhaXvPiKSmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkP02wl6OA21YMWcsdveyHx90j6MB8GA1UdIwQY MBaAFAQA13756g7SlSvi9g+tOuzC4WisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgt YTYwMTM4YzFjMDQ2LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgtYTYwMTM4YzFjMDQ2 LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDq41Px0 pZt7tqX0+SjvsYHw3kDV3yB4ybSzdOncT/kQTlYTJq50b28X/Tm/kzeZdD8N1QQc Pdd20dmP82x9sP78w3h7p5Tm8JkhCzdud9DBJbMfa5Kxpd605lsy1TzgRq2+vLGu +RLUIKw5cGjQb69KYp/gXEn05I/yOC1Jr4ho/WlN3Q3HEUGrcNqKIHLtDk2DyK/t cPSYcU9DgNQgyTvdiaok74htNvRAQysnLE7T/3a+1Mp8UCME3jcZs3IRZQIm77ff 6+RMik6xM5ZNKhmR0r+n6KD99MjwIsNiSsSP5pZu40ZNm1swVaw8d+luAOSNgGAq yEG0RIBENITH8g== -----END CERTIFICATE-----Generated at Wed Dec 31 00:23:16 2025 by rpki-client