This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json) Hash identifier: HN2WT6rLQN+Pqs1xVpSrwEytCqa2WiHCkW97l9w6n6M= Subject key identifier: 91:0F:51:D5:E7:FD:1E:BB:BB:90:3B:5F:4A:3C:31:AC:50:F1:C3:EF Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e Certificate serial: 019B40C919A857A310A2D4D0E175A31CFC6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft Manifest number: 0DDC Signing time: Sun 21 Dec 2025 12:01:19 +0000 Manifest this update: Sun 21 Dec 2025 12:01:19 +0000 Manifest next update: Mon 22 Dec 2025 12:01:19 +0000 Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: 8Pt280GUbn56erQQIhX/MHdc0GCJHtoEeTzBlOttq3Y=) 2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:19:a8:57:a3:10:a2:d4:d0:e1:75:a3:1c:fc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e Validity Not Before: Dec 21 12:01:19 2025 GMT Not After : Dec 22 12:01:19 2025 GMT Subject: CN=910f51d5e7fd1ebbbb903b5f4a3c31ac50f1c3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:73:4b:b4:ea:b8:d4:97:f2:bf:86:dd:9b: fc:f9:25:73:b3:e7:eb:65:e3:ce:e8:a7:0e:6d:2e: f6:63:6c:40:a7:a6:31:2c:86:c9:a4:0c:84:18:de: da:5b:f3:7f:6f:f3:3b:52:c0:24:48:be:8e:9f:c8: 70:a3:48:69:84:db:f5:db:7b:ca:5c:a8:ee:93:8f: 29:d1:62:30:0e:45:1e:dc:8e:84:9b:6b:92:e0:0a: ec:da:37:a8:70:47:5f:3b:88:fb:a4:e2:c7:a0:2c: c4:07:51:75:10:a8:a9:97:28:a3:32:66:00:2e:55: 5d:d5:de:15:e6:0c:35:dd:4b:bc:17:18:57:cf:f0: 5b:f5:2a:b9:a4:fd:10:5e:c7:91:f6:41:db:b7:9c: ce:a6:c7:2d:31:f8:bf:2f:50:68:e3:6b:73:18:bc: 0b:c8:4b:d8:74:69:f9:9f:af:73:5a:dc:13:75:4a: bd:39:45:28:06:18:ed:87:c9:35:6c:6a:37:d4:d3: c8:f9:40:2b:48:cd:4b:c8:ed:12:67:3c:d3:21:4b: 6a:91:58:80:72:aa:6d:31:b0:48:2c:ae:52:59:56: d8:c4:3a:12:09:0f:f8:25:ec:61:b0:0d:6f:df:ab: bb:aa:0f:48:b7:1f:c0:2e:92:a6:cd:c8:2b:32:d9: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:51:D5:E7:FD:1E:BB:BB:90:3B:5F:4A:3C:31:AC:50:F1:C3:EF X509v3 Authority Key Identifier: keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:9c:54:70:4a:ee:53:c4:7e:65:22:79:0e:3b:97:5e:ac:12: cf:7e:de:e9:f2:fe:46:5a:36:75:02:46:72:6d:92:40:6d:a5: 1f:15:a5:7a:22:48:3b:82:ab:c4:9d:7a:fd:9b:a8:be:1c:96: ea:95:e0:e7:93:67:92:ae:0e:08:d3:e2:66:69:e0:c7:bb:72: 47:05:32:67:e1:53:dc:8e:0b:d2:b6:2b:dc:22:76:ac:66:65: c9:62:c5:43:bd:45:84:64:5f:02:b8:26:62:3c:54:6b:2c:4c: d3:c9:9e:10:99:d3:cf:ec:d3:8c:47:9a:52:88:57:25:c4:98: ae:e9:75:2f:12:f0:86:83:07:37:90:44:76:25:b7:8b:52:55: a7:cf:dc:36:d8:91:af:46:ee:79:fd:fd:17:5b:f1:e6:8b:cb: f5:82:ef:67:f1:ab:6e:5e:28:36:6e:2d:b0:ea:c8:85:a6:33: 9d:11:89:e2:c2:94:01:81:ee:24:8a:32:c0:88:f3:fd:a1:00: 9d:fa:9e:25:f3:e0:38:96:69:a0:44:84:5c:2c:6b:1a:94:66: cb:06:33:ee:c2:9c:6d:72:74:21:df:4d:55:48:d8:80:15:40: 13:ed:b7:f4:93:3e:a6:02:1c:5b:3e:c7:bb:f2:43:b6:7e:80: 70:56:71:bf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAyRmoV6MQotTQ4XWjHPxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0 MzI2MWUwHhcNMjUxMjIxMTIwMTE5WhcNMjUxMjIyMTIwMTE5WjAzMTEwLwYDVQQD Eyg5MTBmNTFkNWU3ZmQxZWJiYmI5MDNiNWY0YTNjMzFhYzUwZjFjM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j9zS7TquNSX8r+G3Zv8+SVzs+fr ZePO6KcObS72Y2xAp6YxLIbJpAyEGN7aW/N/b/M7UsAkSL6On8hwo0hphNv123vK XKjuk48p0WIwDkUe3I6Em2uS4Ars2jeocEdfO4j7pOLHoCzEB1F1EKiplyijMmYA LlVd1d4V5gw13Uu8FxhXz/Bb9Sq5pP0QXseR9kHbt5zOpsctMfi/L1Bo42tzGLwL yEvYdGn5n69zWtwTdUq9OUUoBhjth8k1bGo31NPI+UArSM1LyO0SZzzTIUtqkViA cqptMbBILK5SWVbYxDoSCQ/4JexhsA1v36u7qg9Itx/ALpKmzcgrMtkz1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJEPUdXn/R67u5A7X0o8MaxQ8cPvMB8GA1UdIwQY MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh LTc3MTJmYmYxNjFjMS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ5LzBkZjJlZi1mZmM5LTQ0NTctOWY0YS03NzEyZmJmMTYx YzEvMS8xLUJvZ1VnVW1kZFJUbTRmMS01eHBUYjlESmg0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5xU cEruU8R+ZSJ5DjuXXqwSz37e6fL+Rlo2dQJGcm2SQG2lHxWleiJIO4KrxJ16/Zuo vhyW6pXg55Nnkq4OCNPiZmngx7tyRwUyZ+FT3I4L0rYr3CJ2rGZlyWLFQ71FhGRf ArgmYjxUayxM08meEJnTz+zTjEeaUohXJcSYrul1LxLwhoMHN5BEdiW3i1JVp8/c NtiRr0buef39F1vx5ovL9YLvZ/Grbl4oNm4tsOrIhaYznRGJ4sKUAYHuJIoywIjz /aEAnfqeJfPgOJZpoESEXCxrGpRmywYz7sKcbXJ0Id9NVUjYgBVAE+239JM+pgIc Wz7Hu/JDtn6AcFZxvw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:50 2025 by rpki-client