This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json) Hash identifier: Ejz0XTnr6Q13XoFnxc0xluZF0ImWeMBPm6/YpR/V1Fk= Subject key identifier: 50:F0:69:60:6D:A3:6E:50:B6:06:C8:6F:86:23:DD:02:F6:A7:FC:AB Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4 Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4 Certificate serial: 019B7A4AAF0B90B44D4BCF0F5A3C6378E2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft Manifest number: 081E Signing time: Thu 01 Jan 2026 16:01:13 +0000 Manifest this update: Thu 01 Jan 2026 16:01:13 +0000 Manifest next update: Fri 02 Jan 2026 16:01:13 +0000 Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: WblZDO26aoOBWk4fi+HX6q+n7bXuvfjphd+D4Yas3/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:af:0b:90:b4:4d:4b:cf:0f:5a:3c:63:78:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4 Validity Not Before: Jan 1 16:01:13 2026 GMT Not After : Jan 2 16:01:13 2026 GMT Subject: CN=50f069606da36e50b606c86f8623dd02f6a7fcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:c9:d6:75:62:01:69:a1:1a:b7:c4:4f:ce: d5:9a:f7:9c:ee:62:de:58:ce:75:ba:86:85:2d:a1: e3:39:2d:2a:a0:62:0e:ae:38:96:9e:32:e4:8c:24: f9:33:6f:d1:7c:72:f7:86:1a:86:f4:dd:da:66:d0: b7:13:04:6f:a9:5d:f3:3c:96:e7:67:64:07:e0:a4: 16:a0:d6:25:3c:7e:80:a8:2c:47:de:d6:ee:3b:59: e5:ef:29:e4:be:1c:2d:7e:3f:c1:ef:9f:98:01:2a: 80:f1:d0:bc:6a:1f:19:51:05:c6:86:33:ef:fd:e0: 8b:0e:e6:69:c9:07:47:ba:bb:fa:dc:ba:c2:59:f7: ef:52:73:f1:b2:70:6c:74:ef:a3:cf:fe:14:55:07: 61:d1:02:02:e5:ea:f4:6e:33:91:02:df:ec:38:af: ad:cd:18:c8:db:35:7b:d8:77:08:52:fd:0d:f1:3b: a2:64:91:58:34:9d:23:59:c4:ce:f6:d8:53:46:0a: 4c:b6:9e:38:a5:90:90:1e:00:6b:a0:80:0f:15:36: 4c:76:f9:38:e4:e6:a7:2f:51:d3:e2:93:18:2c:b8: 01:f1:9c:47:eb:a6:fe:22:aa:3d:77:21:bc:23:b5: aa:24:e5:f9:44:81:d9:8a:eb:c7:6b:3e:f8:d2:de: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:69:60:6D:A3:6E:50:B6:06:C8:6F:86:23:DD:02:F6:A7:FC:AB X509v3 Authority Key Identifier: keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:14:4b:b1:6c:ac:ac:fc:6d:cc:79:05:bb:8b:28:10:60: b4:84:b9:62:98:cb:44:04:c5:b9:69:23:08:61:b4:ca:fa:f2: 98:63:e3:7e:27:c5:59:bc:c6:0a:9f:0c:8b:28:0f:68:ba:50: 39:2f:44:d5:9e:8b:f0:91:82:07:ab:8e:43:0e:12:48:30:ce: a0:c3:c0:35:eb:d4:98:5d:88:fd:38:8c:6b:62:74:c1:03:f7: a9:fb:5a:78:39:64:2e:6d:c3:2d:ad:76:ba:5e:67:ab:e5:40: 03:3d:44:83:56:5f:e2:9b:56:82:6a:f5:5c:8f:60:8a:4c:46: fb:7e:ac:18:3f:66:fd:fd:2f:ff:56:64:19:37:e0:46:df:2e: d1:14:c4:93:18:89:fa:b6:95:b6:31:a7:f1:96:5d:90:04:2d: 08:d6:50:38:3e:76:a5:07:c5:84:55:39:4e:f8:3f:2c:41:7c: 90:dd:e1:3d:88:c1:5d:72:7e:aa:5a:16:d8:df:78:43:33:b5: e9:47:8f:3d:e9:83:ad:2b:1c:9f:34:14:8c:bc:e7:3c:6e:c8: c8:2a:dc:e3:1b:73:34:39:04:6f:91:d4:04:52:91:ca:8b:6b: 7b:ff:ae:43:f7:a9:f5:17:5a:93:0b:8f:ed:1c:a6:0d:96:b1: ef:02:a6:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6Sq8LkLRNS88PWjxjeOLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTgxZGUxYjMyYjdjMTA1MGQwYjBjYTZkNjQwZDQ2M2E1 MzUyZjQwHhcNMjYwMTAxMTYwMTEzWhcNMjYwMTAyMTYwMTEzWjAzMTEwLwYDVQQD Eyg1MGYwNjk2MDZkYTM2ZTUwYjYwNmM4NmY4NjIzZGQwMmY2YTdmY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RjJ1nViAWmhGrfET87Vmvec7mLe WM51uoaFLaHjOS0qoGIOrjiWnjLkjCT5M2/RfHL3hhqG9N3aZtC3EwRvqV3zPJbn Z2QH4KQWoNYlPH6AqCxH3tbuO1nl7ynkvhwtfj/B75+YASqA8dC8ah8ZUQXGhjPv /eCLDuZpyQdHurv63LrCWffvUnPxsnBsdO+jz/4UVQdh0QIC5er0bjORAt/sOK+t zRjI2zV72HcIUv0N8TuiZJFYNJ0jWcTO9thTRgpMtp44pZCQHgBroIAPFTZMdvk4 5OanL1HT4pMYLLgB8ZxH66b+Iqo9dyG8I7WqJOX5RIHZiuvHaz740t5SFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDwaWBto25QtgbIb4Yj3QL2p/yrMB8GA1UdIwQY MBaAFNQYHeGzK3wQUNCwym1kDUY6U1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDct YWYxZTJkZjViZGMzLzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDctYWYxZTJkZjViZGMz LzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh08US7Fs rKz8bcx5BbuLKBBgtIS5YpjLRATFuWkjCGG0yvrymGPjfifFWbzGCp8MiygPaLpQ OS9E1Z6L8JGCB6uOQw4SSDDOoMPANevUmF2I/TiMa2J0wQP3qftaeDlkLm3DLa12 ul5nq+VAAz1Eg1Zf4ptWgmr1XI9gikxG+36sGD9m/f0v/1ZkGTfgRt8u0RTEkxiJ +raVtjGn8ZZdkAQtCNZQOD52pQfFhFU5Tvg/LEF8kN3hPYjBXXJ+qloW2N94QzO1 6UePPemDrSscnzQUjLznPG7IyCrc4xtzNDkEb5HUBFKRyotre/+uQ/ep9RdakwuP 7RymDZax7wKmWw== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:49 2026 by rpki-client