This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json) Hash identifier: wF2vjEWhYyftq+WVDWOnqGWS9ZC5233M80LX9bAKlQI= Subject key identifier: AB:4C:34:78:CF:FA:F0:E6:7A:52:2A:66:1B:8D:BC:82:BE:10:53:65 Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc Certificate serial: 019B3E35872C18389ACF557316C82A8CC4AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft Manifest number: 148D Signing time: Sun 21 Dec 2025 00:00:53 +0000 Manifest this update: Sun 21 Dec 2025 00:00:53 +0000 Manifest next update: Mon 22 Dec 2025 00:00:53 +0000 Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: ya/54YAobOUVoANfEcrFvhGc5jCiMdm7OfAjwY97XvE=) 2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=) 3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:87:2c:18:38:9a:cf:55:73:16:c8:2a:8c:c4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc Validity Not Before: Dec 21 00:00:53 2025 GMT Not After : Dec 22 00:00:53 2025 GMT Subject: CN=ab4c3478cffaf0e67a522a661b8dbc82be105365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:68:20:7e:38:e3:cf:44:6d:e3:2a:ab:b5: 1e:87:fc:a3:e5:ef:74:eb:42:6e:4f:0c:64:0d:ba: 78:93:7c:66:63:50:d5:eb:4b:1c:f4:6c:cd:3f:34: 39:f2:74:33:4c:7d:f6:f8:0e:4d:08:d0:55:81:a4: e9:4a:55:78:60:cc:3b:d5:de:43:9d:55:ea:e1:99: fe:60:dd:4a:84:b3:e3:cf:c3:09:72:ba:8d:0f:fd: 5e:64:70:f0:6a:b4:e6:b9:2c:b6:f3:50:11:4b:1d: f1:33:74:67:43:58:52:53:99:11:d4:bb:ea:68:33: 6e:75:47:93:91:97:4c:a7:bc:99:b4:fc:15:c9:2d: 80:78:eb:4c:0b:a4:df:92:89:1b:40:25:cf:7e:c8: 04:e8:fe:52:d8:73:4c:c0:0b:eb:1e:2e:2e:72:64: c9:4b:75:eb:1b:b7:e2:4e:c4:66:a8:3f:fe:31:e8: 3c:4f:ed:14:ad:b0:a6:2f:e7:95:43:44:b4:d5:93: 1a:f1:a5:36:ad:8a:28:c4:df:e6:d0:c0:bc:8f:75: fa:af:7f:1f:c7:56:54:97:2f:0f:1d:72:3b:a5:e0: 28:3c:b5:ca:f0:3f:17:ce:8c:9e:ee:cd:22:c9:9f: c2:13:4f:1b:f3:2b:98:0e:b4:4a:22:bd:06:00:77: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4C:34:78:CF:FA:F0:E6:7A:52:2A:66:1B:8D:BC:82:BE:10:53:65 X509v3 Authority Key Identifier: keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:59:6c:83:7a:21:90:91:cb:8a:4f:da:e9:6c:2f:4c:ab: 74:01:dd:10:92:08:1c:cd:ab:71:12:d1:0b:b9:51:29:0f:0a: fa:b8:b3:e3:7d:22:bf:99:ae:13:20:4f:2a:9d:41:19:6c:82: 8a:61:cd:68:16:62:0f:39:dd:61:de:96:9e:69:fd:68:56:80: db:85:c0:5d:af:1d:a1:e8:2b:0e:4c:37:e9:be:d3:3f:28:1b: e2:7f:df:10:93:42:78:79:9a:03:11:83:7a:18:ff:3d:ae:31: a0:2d:04:28:75:5a:7d:96:b5:8c:d7:0d:b5:74:de:1a:07:40: d3:bb:28:99:2a:f2:e9:b4:bb:7e:84:b0:89:31:98:2e:9c:54: 3b:4a:6f:72:c6:79:81:5c:21:db:11:64:be:9c:a4:e4:8e:4b: 85:21:fc:45:d6:b0:3a:38:52:32:ce:ea:fe:b0:21:6a:93:27: 4b:da:9d:c0:56:62:6a:d4:51:b6:bf:e7:04:9d:c7:92:48:38: e6:c0:91:17:22:24:51:59:df:89:93:ba:eb:84:9e:ee:77:1e: 33:ae:28:d9:d6:a8:e4:fe:00:21:e1:8a:2a:ad:f4:91:68:4e: c7:6e:7f:0e:c3:6b:06:39:0d:c0:b7:47:18:ea:f8:23:27:ab: 48:25:5e:2a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+NYcsGDiaz1VzFsgqjMStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk ZGRiZGMwHhcNMjUxMjIxMDAwMDUzWhcNMjUxMjIyMDAwMDUzWjAzMTEwLwYDVQQD EyhhYjRjMzQ3OGNmZmFmMGU2N2E1MjJhNjYxYjhkYmM4MmJlMTA1MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG1oIH44489EbeMqq7Ueh/yj5e90 60JuTwxkDbp4k3xmY1DV60sc9GzNPzQ58nQzTH32+A5NCNBVgaTpSlV4YMw71d5D nVXq4Zn+YN1KhLPjz8MJcrqND/1eZHDwarTmuSy281ARSx3xM3RnQ1hSU5kR1Lvq aDNudUeTkZdMp7yZtPwVyS2AeOtMC6TfkokbQCXPfsgE6P5S2HNMwAvrHi4ucmTJ S3XrG7fiTsRmqD/+Meg8T+0UrbCmL+eVQ0S01ZMa8aU2rYooxN/m0MC8j3X6r38f x1ZUly8PHXI7peAoPLXK8D8Xzoye7s0iyZ/CE08b8yuYDrRKIr0GAHcSowIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKtMNHjP+vDmelIqZhuNvIK+EFNlMB8GA1UdIwQY MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKBZ bIN6IZCRy4pP2ulsL0yrdAHdEJIIHM2rcRLRC7lRKQ8K+riz430iv5muEyBPKp1B GWyCimHNaBZiDzndYd6Wnmn9aFaA24XAXa8doegrDkw36b7TPygb4n/fEJNCeHma AxGDehj/Pa4xoC0EKHVafZa1jNcNtXTeGgdA07somSry6bS7foSwiTGYLpxUO0pv csZ5gVwh2xFkvpyk5I5LhSH8RdawOjhSMs7q/rAhapMnS9qdwFZiatRRtr/nBJ3H kkg45sCRFyIkUVnfiZO664Se7nceM64o2dao5P4AIeGKKq30kWhOx25/DsNrBjkN wLdHGOr4IyerSCVeKg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:18:07 2025 by rpki-client