This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json) Hash identifier: krYuVA9WmrZHLbEKkhx6iQm9/IP/u7iSAf3ZrFJ8/Is= Subject key identifier: 9F:BF:2C:FC:D6:9C:86:1F:A4:5C:21:9B:53:F6:89:77:E2:EC:E1:1E Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e Certificate serial: 019B5607AA4CAE5DBFA9157CEFA6D2723EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft Manifest number: 0D70 Signing time: Thu 25 Dec 2025 15:01:41 +0000 Manifest this update: Thu 25 Dec 2025 15:01:41 +0000 Manifest next update: Fri 26 Dec 2025 15:01:41 +0000 Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 7gDUFCfDR9UGAgksx84dlJBFr08KjNH1Lv/qbyTaxBo=) 2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:aa:4c:ae:5d:bf:a9:15:7c:ef:a6:d2:72:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e Validity Not Before: Dec 25 15:01:41 2025 GMT Not After : Dec 26 15:01:41 2025 GMT Subject: CN=9fbf2cfcd69c861fa45c219b53f68977e2ece11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:a9:a6:b1:8f:f4:e8:30:4d:35:a9:fd:7d: 39:6a:69:73:a6:ad:ca:04:93:f4:cf:63:e1:da:af: c3:a1:1e:8c:bc:79:cf:99:a7:cb:31:18:cb:b7:33: 29:7c:4d:14:63:8e:60:ad:08:b4:6d:4d:f6:c9:e9: 95:1c:ec:7d:8a:5c:56:e7:29:35:97:de:30:de:b7: 69:9b:0e:4b:cf:9c:6f:db:fc:7c:a9:bf:52:d3:8b: 4a:75:46:2a:43:90:58:3b:dc:29:70:5c:22:31:97: 33:b3:37:e7:9e:09:36:bd:6b:c3:ff:11:af:4d:59: 32:a8:49:6f:69:9d:82:54:f3:d7:06:8d:7f:de:2e: 74:b0:f7:80:52:a1:b6:45:4f:ee:f6:a7:c1:77:d9: b0:d0:a9:03:7f:9e:b4:69:03:c8:71:31:c4:2a:74: b0:ed:62:74:ae:20:40:bb:07:4e:03:18:99:da:6b: d4:0a:65:b2:62:5c:16:95:d2:06:a3:b5:3a:97:5c: 47:d9:79:2a:29:66:51:f8:b7:9c:23:79:12:6c:86: 95:87:cc:b5:3e:4d:8b:27:be:3c:aa:99:a5:1b:bc: aa:a7:e6:05:cd:75:6f:cb:68:ad:ff:b9:f7:ae:14: a8:5f:4c:19:99:d6:c2:ba:27:97:86:b6:18:d7:7b: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:2C:FC:D6:9C:86:1F:A4:5C:21:9B:53:F6:89:77:E2:EC:E1:1E X509v3 Authority Key Identifier: keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:83:c2:33:3f:11:56:a0:55:b4:0d:e6:84:22:6c:ca:7d:ed: e8:1f:3e:44:18:5a:c6:51:bd:d1:7d:88:35:b7:76:d0:3c:63: 87:f5:db:bc:7c:5a:cf:fc:1e:2b:d8:10:86:06:b0:a8:84:78: 5b:2e:19:ad:80:18:7d:28:ca:8e:70:2d:d5:76:0c:3d:e6:b7: 72:91:cd:85:b8:6f:9b:43:c1:34:75:0e:fa:9a:e9:0f:c8:fe: 04:b9:9b:3e:47:94:d3:1e:aa:da:ea:d1:f1:0d:17:83:ea:c5: 7e:55:60:99:91:a6:80:75:11:7a:9f:69:bd:61:0d:8f:5c:16: 56:34:16:43:e7:bb:ce:c1:4f:0c:e3:db:05:62:5d:cc:05:2e: cb:24:24:17:63:ed:6a:ae:25:97:96:32:72:db:1e:0d:3c:6a: 12:3f:66:5c:c8:34:e6:c1:e2:5d:df:fa:91:a5:ee:d5:58:89: 1a:aa:38:b4:8e:e7:e3:9a:d6:93:5d:ef:68:05:b3:40:8e:e4: 01:5e:e8:6b:e2:76:5e:ee:b0:d4:20:91:63:4a:9a:ba:26:7e: d5:54:d1:40:55:90:f4:64:0b:d2:ae:b6:9c:e7:bf:4e:24:5f: b8:00:0c:14:78:0c:d7:44:b8:06:7f:d8:3b:06:cc:7f:1b:d4: 7c:13:10:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWB6pMrl2/qRV876bScj7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3 Nzg0M2UwHhcNMjUxMjI1MTUwMTQxWhcNMjUxMjI2MTUwMTQxWjAzMTEwLwYDVQQD Eyg5ZmJmMmNmY2Q2OWM4NjFmYTQ1YzIxOWI1M2Y2ODk3N2UyZWNlMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BSpprGP9OgwTTWp/X05amlzpq3K BJP0z2Ph2q/DoR6MvHnPmafLMRjLtzMpfE0UY45grQi0bU32yemVHOx9ilxW5yk1 l94w3rdpmw5Lz5xv2/x8qb9S04tKdUYqQ5BYO9wpcFwiMZczszfnngk2vWvD/xGv TVkyqElvaZ2CVPPXBo1/3i50sPeAUqG2RU/u9qfBd9mw0KkDf560aQPIcTHEKnSw 7WJ0riBAuwdOAxiZ2mvUCmWyYlwWldIGo7U6l1xH2XkqKWZR+LecI3kSbIaVh8y1 Pk2LJ748qpmlG7yqp+YFzXVvy2it/7n3rhSoX0wZmdbCuieXhrYY13v8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+/LPzWnIYfpFwhm1P2iXfi7OEeMB8GA1UdIwQY MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4PCMz8R VqBVtA3mhCJsyn3t6B8+RBhaxlG90X2INbd20Dxjh/XbvHxaz/weK9gQhgawqIR4 Wy4ZrYAYfSjKjnAt1XYMPea3cpHNhbhvm0PBNHUO+prpD8j+BLmbPkeU0x6q2urR 8Q0Xg+rFflVgmZGmgHURep9pvWENj1wWVjQWQ+e7zsFPDOPbBWJdzAUuyyQkF2Pt aq4ll5YyctseDTxqEj9mXMg05sHiXd/6kaXu1ViJGqo4tI7n45rWk13vaAWzQI7k AV7oa+J2Xu6w1CCRY0qauiZ+1VTRQFWQ9GQL0q62nOe/TiRfuAAMFHgM10S4Bn/Y OwbMfxvUfBMQsQ== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:01 2025 by rpki-client