This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: Nvp43Q025Wzp9tLe0rYJ50XNHZqkwIfaGxkus41T6K0=
Subject key identifier: 9E:CE:90:EA:51:DC:21:8A:E5:03:F5:81:81:37:BF:16:B1:A6:4D:87
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 019B4C5F64F4C114C48287CE234007CADD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0DE2
Signing time: Tue 23 Dec 2025 18:01:18 +0000
Manifest this update: Tue 23 Dec 2025 18:01:18 +0000
Manifest next update: Wed 24 Dec 2025 18:01:18 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: 1h0byNvEJ6l6hkjxIb3t/yXLn+fbCkddNWGhh38P/AI=)
2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4c:5f:64:f4:c1:14:c4:82:87:ce:23:40:07:ca:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Dec 23 18:01:18 2025 GMT
Not After : Dec 24 18:01:18 2025 GMT
Subject: CN=9ece90ea51dc218ae503f5818137bf16b1a64d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:10:f4:c4:a7:ab:49:cb:59:cc:7f:b5:2d:
a4:ba:32:3e:63:63:c8:44:a5:bd:2a:73:89:f5:9c:
4a:3f:dc:01:0c:60:e2:4d:07:45:cb:af:1f:fd:f2:
4b:71:67:51:24:19:aa:1d:13:f0:9f:31:f4:47:1d:
b1:d8:f4:09:76:bd:32:b1:e2:d9:86:8d:7d:61:ca:
b0:0b:9c:a9:d0:f0:8b:d7:d9:44:28:5b:f9:db:89:
c3:37:78:2d:67:93:d7:9e:4b:49:34:dd:d0:b5:ce:
2a:bd:77:df:9d:ad:aa:ae:09:5d:56:a1:36:ba:16:
42:44:06:06:82:32:20:55:7b:89:8f:71:82:89:fb:
d5:bb:63:ed:42:94:a4:22:fe:b3:d1:06:cc:a5:a3:
60:af:40:58:9f:72:0d:b1:cb:11:c2:33:ee:d1:bc:
aa:71:4a:4c:74:c9:f3:19:31:ce:2c:55:48:73:d9:
08:2a:4f:84:f0:a8:92:27:4d:d3:06:b6:91:14:2d:
ee:64:45:89:2e:70:78:27:af:77:20:10:f2:5e:e0:
26:5e:6e:b7:ce:af:ca:66:0d:61:8b:f7:16:a9:e9:
85:a7:ec:da:ef:6b:46:43:b8:22:8d:9f:0e:bb:f9:
31:f7:5d:e8:61:cd:bb:12:a1:6f:20:1a:65:bd:d5:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:90:EA:51:DC:21:8A:E5:03:F5:81:81:37:BF:16:B1:A6:4D:87
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:f3:ae:6c:ef:9b:b7:c0:08:19:0b:ae:5c:9a:a9:43:f2:
f8:88:9e:ac:c5:9e:10:f7:67:7d:bf:f9:bd:02:68:4c:da:ca:
10:c2:b5:d7:f6:7e:8c:b0:40:6e:af:53:cb:f7:dd:a0:de:6b:
ac:21:54:7b:99:d1:ca:49:d6:19:3a:6b:90:79:f1:99:51:2b:
fa:53:93:a7:16:59:a6:0e:99:c2:37:f5:33:e5:8f:75:4c:f2:
21:61:65:dc:86:e4:46:2e:47:1b:b0:51:d9:6f:d0:a2:ad:3e:
6f:88:31:50:fa:1d:b3:bb:24:95:fe:a0:dc:f1:ed:3b:a8:80:
64:57:cb:f8:57:a3:d9:1e:2b:ca:2b:a0:c6:a6:26:9c:d0:f7:
b2:30:b3:78:c4:e0:89:cf:ba:88:40:8f:bc:fd:cd:6d:d6:6a:
9b:8a:5d:77:0e:bd:55:0d:c7:bf:57:61:e4:2b:a0:98:e5:4f:
72:c5:e5:f0:00:e1:5b:93:02:3a:65:29:20:45:09:3c:a4:8f:
e6:b7:95:1f:b3:67:8c:e6:23:07:ff:7e:0a:a9:b4:7c:18:8b:
8d:55:92:2b:1f:81:06:ac:78:a8:88:b2:69:7d:17:ad:12:4f:
c4:86:e2:22:26:30:37:71:eb:31:0d:fd:7f:64:ce:12:bd:24:
1e:cd:f6:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZtMX2T0wRTEgofOI0AHyt0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0
MzI2MWUwHhcNMjUxMjIzMTgwMTE4WhcNMjUxMjI0MTgwMTE4WjAzMTEwLwYDVQQD
Eyg5ZWNlOTBlYTUxZGMyMThhZTUwM2Y1ODE4MTM3YmYxNmIxYTY0ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPcQ9MSnq0nLWcx/tS2kujI+Y2PI
RKW9KnOJ9ZxKP9wBDGDiTQdFy68f/fJLcWdRJBmqHRPwnzH0Rx2x2PQJdr0yseLZ
ho19YcqwC5yp0PCL19lEKFv524nDN3gtZ5PXnktJNN3Qtc4qvXffna2qrgldVqE2
uhZCRAYGgjIgVXuJj3GCifvVu2PtQpSkIv6z0QbMpaNgr0BYn3INscsRwjPu0byq
cUpMdMnzGTHOLFVIc9kIKk+E8KiSJ03TBraRFC3uZEWJLnB4J693IBDyXuAmXm63
zq/KZg1hi/cWqemFp+za72tGQ7gijZ8Ou/kx913oYc27EqFvIBplvdXSpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ7OkOpR3CGK5QP1gYE3vxaxpk2HMB8GA1UdIwQY
MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh
LTc3MTJmYmYxNjFjMS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ5LzBkZjJlZi1mZmM5LTQ0NTctOWY0YS03NzEyZmJmMTYx
YzEvMS8xLUJvZ1VnVW1kZFJUbTRmMS01eHBUYjlESmg0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOvz
rmzvm7fACBkLrlyaqUPy+IierMWeEPdnfb/5vQJoTNrKEMK11/Z+jLBAbq9Ty/fd
oN5rrCFUe5nRyknWGTprkHnxmVEr+lOTpxZZpg6Zwjf1M+WPdUzyIWFl3IbkRi5H
G7BR2W/Qoq0+b4gxUPods7sklf6g3PHtO6iAZFfL+Fej2R4ryiugxqYmnND3sjCz
eMTgic+6iECPvP3NbdZqm4pddw69VQ3Hv1dh5CugmOVPcsXl8ADhW5MCOmUpIEUJ
PKSP5reVH7NnjOYjB/9+Cqm0fBiLjVWSKx+BBqx4qIiyaX0XrRJPxIbiIiYwN3Hr
MQ39f2TOEr0kHs32bw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:34:39 2025 by rpki-client