This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json) Hash identifier: qSw7PXP7LopYGO3OCnkjK44OI0bu9WQ+IaIAdSDM864= Subject key identifier: F8:A7:09:BF:19:9B:DD:97:EA:A7:C7:8C:C8:45:4E:F9:3D:A1:F1:3A Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Certificate serial: 019B35A0AF316E477B00A9C5DBC8F5E742C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 08:01:21 +0000 Manifest this update: Fri 19 Dec 2025 08:01:21 +0000 Manifest next update: Sat 20 Dec 2025 08:01:21 +0000 Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: G4C+MLkYLhv5COPTv01DLZkwCgRbhtAZQ1LOqQ38mjA=) 2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:af:31:6e:47:7b:00:a9:c5:db:c8:f5:e7:42:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Validity Not Before: Dec 19 08:01:21 2025 GMT Not After : Dec 20 08:01:21 2025 GMT Subject: CN=f8a709bf199bdd97eaa7c78cc8454ef93da1f13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:76:f1:2e:58:62:c0:f9:7c:93:53:ab:9f: b3:47:7a:4c:db:99:78:52:08:a2:18:59:56:ef:ee: d9:f3:01:a7:6c:23:7a:27:7c:04:66:2a:c6:5b:da: b1:06:a0:4b:c5:f0:eb:f1:1d:3e:94:48:f6:12:c8: 72:4f:9b:19:7d:e4:e4:0f:d0:b3:ee:38:55:bd:70: 02:dd:d8:33:d3:6e:1d:11:75:cf:2f:37:f9:77:ab: ad:82:e7:c1:ab:3b:40:db:d0:90:b4:1c:9c:27:ee: 5a:31:a6:5b:d7:65:cf:43:59:87:2b:60:63:ea:d1: eb:5e:b5:d8:02:c5:9b:02:59:19:e3:ce:94:7f:b8: 71:35:29:a4:f0:78:8f:da:0b:db:97:2e:87:7c:c3: 64:fd:7c:19:39:8e:b1:6d:68:b2:23:ef:cc:4e:0e: a3:e6:1b:19:1f:c4:0e:6d:a9:d1:4f:70:51:ac:93: 20:cd:11:f8:06:df:7d:30:dc:b3:b4:8b:43:21:c8: 20:d8:ca:25:bc:23:3a:f4:9f:14:ad:82:c9:1b:1f: a0:cc:5c:39:f8:74:eb:de:ae:12:5c:2e:b3:ed:83: e6:0a:24:cc:24:5b:66:67:51:5f:28:3d:b0:df:3e: ed:29:ab:1c:a4:a5:bf:04:c7:14:81:a5:11:70:9e: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:09:BF:19:9B:DD:97:EA:A7:C7:8C:C8:45:4E:F9:3D:A1:F1:3A X509v3 Authority Key Identifier: keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:05:29:0b:c6:34:a2:7d:ab:4c:7e:8b:e2:02:b9:6e:1b:17: 5a:60:99:6c:54:76:e3:b9:7b:17:71:37:f8:9d:bb:fb:f8:85: 29:8c:f1:9d:9b:62:d9:68:3b:85:75:41:fb:6d:0b:cd:f5:e5: d0:b0:c2:b8:a7:cb:f7:b3:af:44:bf:af:c1:0e:d6:09:ee:e0: 8a:f3:24:c1:01:b4:9d:b3:2c:4e:67:5f:fa:6d:fd:6b:52:8b: 95:38:37:06:4a:2d:ad:4f:14:e5:ea:13:e7:99:dd:fc:06:16: c4:1b:ee:4d:21:8c:35:55:ab:5e:4c:b0:f0:66:93:de:36:ee: 36:ae:bd:ac:1a:d5:e2:83:0d:de:e6:b9:cd:63:26:94:12:6c: 6d:77:1d:a8:10:67:f2:ee:46:f7:75:1f:17:42:58:99:d6:a7: 98:29:3d:e6:5e:04:aa:b7:2a:a9:a8:66:71:4e:ce:10:51:50: 4e:e1:12:d8:89:14:71:84:4a:d8:60:26:11:db:cf:58:50:40: 8c:d3:e9:80:55:59:ad:af:71:6e:41:7f:f4:1d:35:a8:4e:a2: bd:f9:d8:43:7c:4d:e8:45:3d:c3:9d:f1:56:14:bd:c3:ab:d3: d2:11:1a:f1:f0:bc:82:54:03:b3:48:7f:d8:ff:2f:11:8c:88: 3b:30:1b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oK8xbkd7AKnF28j150LFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2 YTBjYTUwHhcNMjUxMjE5MDgwMTIxWhcNMjUxMjIwMDgwMTIxWjAzMTEwLwYDVQQD EyhmOGE3MDliZjE5OWJkZDk3ZWFhN2M3OGNjODQ1NGVmOTNkYTFmMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bV28S5YYsD5fJNTq5+zR3pM25l4 UgiiGFlW7+7Z8wGnbCN6J3wEZirGW9qxBqBLxfDr8R0+lEj2EshyT5sZfeTkD9Cz 7jhVvXAC3dgz024dEXXPLzf5d6utgufBqztA29CQtBycJ+5aMaZb12XPQ1mHK2Bj 6tHrXrXYAsWbAlkZ486Uf7hxNSmk8HiP2gvbly6HfMNk/XwZOY6xbWiyI+/MTg6j 5hsZH8QObanRT3BRrJMgzRH4Bt99MNyztItDIcgg2MolvCM69J8UrYLJGx+gzFw5 +HTr3q4SXC6z7YPmCiTMJFtmZ1FfKD2w3z7tKascpKW/BMcUgaURcJ51CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPinCb8Zm92X6qfHjMhFTvk9ofE6MB8GA1UdIwQY MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt NzBjNjdmMTI2YmYyLzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwUpC8Y0 on2rTH6L4gK5bhsXWmCZbFR247l7F3E3+J27+/iFKYzxnZti2Wg7hXVB+20LzfXl 0LDCuKfL97OvRL+vwQ7WCe7givMkwQG0nbMsTmdf+m39a1KLlTg3BkotrU8U5eoT 55nd/AYWxBvuTSGMNVWrXkyw8GaT3jbuNq69rBrV4oMN3ua5zWMmlBJsbXcdqBBn 8u5G93UfF0JYmdanmCk95l4EqrcqqahmcU7OEFFQTuES2IkUcYRK2GAmEdvPWFBA jNPpgFVZra9xbkF/9B01qE6ivfnYQ3xN6EU9w53xVhS9w6vT0hEa8fC8glQDs0h/ 2P8vEYyIOzAboQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:56 2025 by rpki-client