This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json) Hash identifier: T3a8eqZlmfQDJ9GRhtY0wkPS8ao20VWJjSPIhkqRy44= Subject key identifier: 00:24:7D:80:01:D1:70:1A:FB:70:6B:62:AF:99:A7:CF:DB:9B:1A:17 Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392 Certificate serial: 019B42EE0705155BD240BCBF630CCA6ACC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 22:00:54 +0000 Manifest this update: Sun 21 Dec 2025 22:00:54 +0000 Manifest next update: Mon 22 Dec 2025 22:00:54 +0000 Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: Xrv5CnfAXCBJBbY0mn55DXdUxHsue3m/AHFWtbXeV2M=) 2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=) 3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:07:05:15:5b:d2:40:bc:bf:63:0c:ca:6a:cc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392 Validity Not Before: Dec 21 22:00:54 2025 GMT Not After : Dec 22 22:00:54 2025 GMT Subject: CN=00247d8001d1701afb706b62af99a7cfdb9b1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:45:23:82:8b:19:f7:bf:d1:2b:cc:8f:bb: 36:ce:72:98:4b:02:06:b0:2d:9b:ab:12:c9:7d:a3: 63:75:21:57:ef:c7:18:93:85:6f:49:de:e0:0f:47: 19:68:c3:3e:f1:90:6d:70:c6:f8:94:3a:4f:32:d1: d6:46:05:3d:73:e7:c5:75:ad:79:ed:c2:34:0e:fd: 8b:4f:a8:99:88:53:2a:91:58:d3:1c:1a:ee:2b:24: 82:e1:0f:30:e2:a6:a3:ea:e2:2f:78:44:d5:58:9c: d4:a9:0d:32:bd:f9:ed:e3:ca:04:3b:f0:f0:19:91: bc:35:0b:8a:78:74:78:f4:76:c4:03:e4:8e:5c:fe: fc:9b:d8:04:f2:64:cd:87:11:bc:bd:c6:35:23:03: e4:3c:fd:46:a7:40:93:67:1b:73:01:3f:da:31:1b: 0c:ce:a3:08:0b:a1:7b:d4:10:87:11:d5:15:c2:67: 54:09:5f:32:bf:df:64:3e:b4:c4:b0:9b:df:47:84: 5c:91:9d:aa:ee:92:a1:ef:40:ac:29:9f:9b:67:85: 8c:78:b1:c1:0e:17:c6:f4:77:63:d1:ea:86:b0:0d: b7:77:37:1d:de:59:c3:49:72:d6:cc:a4:85:74:77: 19:f8:c3:94:5d:d2:e4:e3:be:bb:86:94:c7:05:ab: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:7D:80:01:D1:70:1A:FB:70:6B:62:AF:99:A7:CF:DB:9B:1A:17 X509v3 Authority Key Identifier: keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:46:a2:2d:a6:58:19:9d:69:8c:00:19:27:68:62:68:a6:67: 98:bc:df:cf:0b:44:1c:66:ea:10:78:cb:4a:be:3a:72:64:da: dd:e5:f6:6d:b2:df:5e:39:2d:10:14:88:98:d1:0e:89:8f:9a: 2a:ee:fd:ef:f1:22:ee:77:a2:f9:a9:84:cd:93:4d:a8:66:e3: eb:a6:a7:4a:13:01:03:ec:19:d3:78:ce:83:e5:7b:fe:6e:81: 4b:23:3b:bd:3f:6b:39:66:61:e5:1b:5e:79:4b:13:39:49:df: e0:6e:3c:9c:ea:0b:28:19:7e:f9:d1:78:4c:b5:5d:32:81:f0: 6a:60:1d:0f:dc:83:c3:00:27:4b:e1:2c:74:44:e7:74:da:4e: f0:c7:5b:cd:2c:e8:3a:31:f8:40:82:38:11:07:3a:3c:cd:1f: 68:6f:76:30:6f:0f:bb:66:07:d3:81:f1:d6:6c:f3:0c:6b:2e: 12:0f:fe:0d:cb:00:0a:21:74:ae:42:20:94:3a:0f:9d:49:09: 60:36:d4:81:33:ed:66:ad:9b:49:d0:93:a4:3b:2c:6c:77:d9: 63:28:c2:13:70:1e:4f:86:aa:a2:45:82:dc:08:46:89:9d:4c: fb:d8:4d:6d:cd:9d:1a:bc:43:78:ee:ae:cb:9a:8b:81:ed:6d: 29:6e:30:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtC7gcFFVvSQLy/YwzKasxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTFmYTVlZmYzNzBiYzM2ZDBlMzkyOTYyNWUzNDE0MDgx YTIzOTIwHhcNMjUxMjIxMjIwMDU0WhcNMjUxMjIyMjIwMDU0WjAzMTEwLwYDVQQD EygwMDI0N2Q4MDAxZDE3MDFhZmI3MDZiNjJhZjk5YTdjZmRiOWIxYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HFFI4KLGfe/0SvMj7s2znKYSwIG sC2bqxLJfaNjdSFX78cYk4VvSd7gD0cZaMM+8ZBtcMb4lDpPMtHWRgU9c+fFda15 7cI0Dv2LT6iZiFMqkVjTHBruKySC4Q8w4qaj6uIveETVWJzUqQ0yvfnt48oEO/Dw GZG8NQuKeHR49HbEA+SOXP78m9gE8mTNhxG8vcY1IwPkPP1Gp0CTZxtzAT/aMRsM zqMIC6F71BCHEdUVwmdUCV8yv99kPrTEsJvfR4RckZ2q7pKh70CsKZ+bZ4WMeLHB DhfG9Hdj0eqGsA23dzcd3lnDSXLWzKSFdHcZ+MOUXdLk4767hpTHBauvSQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAAkfYAB0XAa+3BrYq+Zp8/bmxoXMB8GA1UdIwQY MBaAFPgR+l7/NwvDbQ45KWJeNBQIGiOSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CSDZYdjgzQzhOdERqa3BZbDQwRkFnYUk1SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIx LTFjYzUwNTUwMWEwZi8xLzEtQkg2WHY4M0M4TnREamtwWWw0MEZBZ2FJNUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhLzRhMjkzZC0yYWQzLTQxMTQtYTJiMS0xY2M1MDU1MDFh MGYvMS8xLUJINlh2ODNDOE50RGprcFlsNDBGQWdhSTVJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkai LaZYGZ1pjAAZJ2hiaKZnmLzfzwtEHGbqEHjLSr46cmTa3eX2bbLfXjktEBSImNEO iY+aKu797/Ei7nei+amEzZNNqGbj66anShMBA+wZ03jOg+V7/m6BSyM7vT9rOWZh 5RteeUsTOUnf4G48nOoLKBl++dF4TLVdMoHwamAdD9yDwwAnS+EsdETndNpO8Mdb zSzoOjH4QII4EQc6PM0faG92MG8Pu2YH04Hx1mzzDGsuEg/+DcsACiF0rkIglDoP nUkJYDbUgTPtZq2bSdCTpDssbHfZYyjCE3AeT4aqokWC3AhGiZ1M+9hNbc2dGrxD eO6uy5qLge1tKW4w6Q== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:10 2025 by rpki-client