This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json) Hash identifier: YOyguCqczGQt+zEgYuigaUczJSOSaMfL/lvXxD82Swg= Subject key identifier: A4:1A:D0:43:1D:2B:02:53:5F:82:0E:3B:BA:DA:85:36:71:58:A5:65 Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad Certificate serial: 019B7FDE5CD82EBAAECEC107EFA12C6A36FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft Manifest number: 10BB Signing time: Fri 02 Jan 2026 18:00:37 +0000 Manifest this update: Fri 02 Jan 2026 18:00:37 +0000 Manifest next update: Sat 03 Jan 2026 18:00:37 +0000 Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: qbjCU5qC7vWgC06j+FVAAZuuFpRH+EjmfnvLENGWxE0=) 2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:5c:d8:2e:ba:ae:ce:c1:07:ef:a1:2c:6a:36:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad Validity Not Before: Jan 2 18:00:37 2026 GMT Not After : Jan 3 18:00:37 2026 GMT Subject: CN=a41ad0431d2b02535f820e3bbada85367158a565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:62:64:cd:4a:85:d2:ba:ab:bb:3b:a4:da: fb:cb:39:47:08:8f:f7:78:36:11:a5:bb:a9:48:08: 0d:7c:62:6f:30:d8:36:c1:21:46:03:5d:75:fb:83: 41:19:c7:d6:fa:66:63:60:3f:5d:76:b4:4d:3c:71: 56:e5:c4:93:4e:06:24:76:d4:f5:86:c1:32:3d:a6: f1:01:fc:30:df:b9:52:4f:72:5b:17:53:b3:9a:69: 5c:f9:83:ff:a4:d1:54:ed:bd:da:c8:10:71:a5:9a: 30:5d:25:1e:69:5f:f3:23:f1:43:1f:86:b1:dc:a6: f3:01:f8:4c:15:e9:13:f4:3f:1e:39:69:73:07:6c: d6:5f:7b:24:16:90:89:3a:0a:4d:dc:c6:a2:52:79: f2:76:21:2f:f2:3f:71:69:81:14:25:94:07:90:7b: 34:54:71:8f:a3:89:16:9d:5f:ef:9f:14:ca:76:35: 38:5f:88:58:fc:c0:97:65:31:51:1e:94:9a:25:12: 5f:85:8f:8a:36:89:e3:15:8b:c3:5e:37:49:5e:c2: b9:75:12:4e:89:b6:01:79:ac:17:34:27:99:3b:f0: 5b:ff:4e:6d:ee:05:8e:fc:4b:16:a7:d6:76:1e:b9: 2f:a6:35:44:5f:7a:cf:41:43:29:35:ec:99:80:76: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:D0:43:1D:2B:02:53:5F:82:0E:3B:BA:DA:85:36:71:58:A5:65 X509v3 Authority Key Identifier: keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c7:3a:86:9f:a6:b3:09:f0:c2:bf:bd:d3:bd:6b:bd:60:5e: 6f:85:e0:62:37:f8:59:3d:81:43:6f:1a:ef:01:60:9a:6e:67: 8d:2a:01:b6:41:82:5c:df:4a:93:c6:6e:b3:d0:4f:d7:2c:9f: 31:26:6f:90:93:1b:55:f6:11:c0:d0:b8:20:ef:ff:3e:a0:16: 76:2a:b2:ea:6b:49:17:3c:d6:a0:71:eb:be:74:a7:4e:53:86: 5f:c1:f8:49:3f:ed:da:f3:63:00:dd:c1:4e:17:95:a9:c3:f7: 09:4f:4c:f3:a3:e7:f4:95:09:65:80:f8:04:15:50:0c:c0:a5: 41:77:c3:38:cc:18:80:a5:7a:53:35:c0:a1:f0:af:ad:cc:08: 95:b4:54:93:5a:7e:cb:7b:04:08:a0:21:54:1a:70:30:28:87: b7:05:25:79:1c:5f:98:76:47:b4:09:1d:4a:ff:2a:2e:68:63: 1a:22:c5:7f:46:4d:eb:6b:bd:04:a6:64:3b:f5:5d:f7:81:23: 61:35:4e:0a:c9:60:f9:8b:a6:70:c7:cc:9b:3d:da:a7:cb:41: a9:38:1d:fa:28:6c:de:d3:fe:4d:48:58:d8:7a:ff:76:e3:0b: c3:5b:67:6e:60:89:aa:02:b4:15:f2:a3:eb:40:f3:44:13:06: 51:d1:d8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3lzYLrquzsEH76Esajb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ0MDUyZTBmYzc2NTM2MzYxY2JiZGM3NzUwODc3ZGRm MzYwYWQwHhcNMjYwMTAyMTgwMDM3WhcNMjYwMTAzMTgwMDM3WjAzMTEwLwYDVQQD EyhhNDFhZDA0MzFkMmIwMjUzNWY4MjBlM2JiYWRhODUzNjcxNThhNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbdiZM1KhdK6q7s7pNr7yzlHCI/3 eDYRpbupSAgNfGJvMNg2wSFGA111+4NBGcfW+mZjYD9ddrRNPHFW5cSTTgYkdtT1 hsEyPabxAfww37lST3JbF1Ozmmlc+YP/pNFU7b3ayBBxpZowXSUeaV/zI/FDH4ax 3KbzAfhMFekT9D8eOWlzB2zWX3skFpCJOgpN3MaiUnnydiEv8j9xaYEUJZQHkHs0 VHGPo4kWnV/vnxTKdjU4X4hY/MCXZTFRHpSaJRJfhY+KNonjFYvDXjdJXsK5dRJO ibYBeawXNCeZO/Bb/05t7gWO/EsWp9Z2HrkvpjVEX3rPQUMpNeyZgHYcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQa0EMdKwJTX4IOO7rahTZxWKVlMB8GA1UdIwQY MBaAFG3dQFLg/HZTY2HLvcd1CHfd82CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQt YmE3YjFmMzc2OWUzLzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQtYmE3YjFmMzc2OWUz LzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMc6hp+m swnwwr+9071rvWBeb4XgYjf4WT2BQ28a7wFgmm5njSoBtkGCXN9Kk8Zus9BP1yyf MSZvkJMbVfYRwNC4IO//PqAWdiqy6mtJFzzWoHHrvnSnTlOGX8H4ST/t2vNjAN3B TheVqcP3CU9M86Pn9JUJZYD4BBVQDMClQXfDOMwYgKV6UzXAofCvrcwIlbRUk1p+ y3sECKAhVBpwMCiHtwUleRxfmHZHtAkdSv8qLmhjGiLFf0ZN62u9BKZkO/Vd94Ej YTVOCslg+YumcMfMmz3ap8tBqTgd+ihs3tP+TUhY2Hr/duMLw1tnbmCJqgK0FfKj 60DzRBMGUdHYzg== -----END CERTIFICATE-----Generated at Fri Jan 2 20:06:32 2026 by rpki-client