This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json) Hash identifier: hR7wrDb37U5E3ZV0K4izeyD80pnvgnkhpv4Su9pX7lU= Subject key identifier: BA:12:DD:75:CD:8B:E8:22:3F:38:59:72:E2:B7:5A:8B:1B:DD:4A:A2 Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Certificate serial: 019B3D59B6E4A3AA36CAE6E3F7BD0782FB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft Manifest number: 0BC7 Signing time: Sat 20 Dec 2025 20:00:48 +0000 Manifest this update: Sat 20 Dec 2025 20:00:48 +0000 Manifest next update: Sun 21 Dec 2025 20:00:48 +0000 Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 5TNwTiQMhPTFmpfjSiWGysGUF99MBhwjIUVmtmSSduE=) 2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b6:e4:a3:aa:36:ca:e6:e3:f7:bd:07:82:fb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Validity Not Before: Dec 20 20:00:48 2025 GMT Not After : Dec 21 20:00:48 2025 GMT Subject: CN=ba12dd75cd8be8223f385972e2b75a8b1bdd4aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:36:cd:93:38:cb:2e:04:f9:d0:2b:87:3f: 0d:bf:c8:8b:e0:4f:fa:6a:8f:b0:70:e1:cf:3c:6f: de:25:e5:67:3c:4b:4a:d0:48:f0:d4:5a:f4:ea:d4: 0c:b0:4f:a5:ec:67:10:63:20:17:96:53:dd:12:08: bd:7a:bc:32:d1:18:32:43:4d:fa:14:4b:3c:73:0a: 80:fe:a1:37:fb:9a:14:4c:03:b6:f5:51:04:6d:fd: 82:16:5f:a7:9d:88:c0:ec:5b:a4:6b:6a:b9:ad:33: 40:e5:eb:e8:d8:e8:d5:e7:fe:80:96:3a:57:63:7c: c7:79:c0:04:43:bb:f9:26:10:95:7d:8a:ee:66:66: f8:85:56:37:da:2c:86:32:7b:c8:77:07:25:c3:16: be:60:24:25:3e:d6:28:8b:3d:60:34:f0:ff:6d:c4: 2c:d9:d2:54:2d:1b:ce:36:73:08:dc:d6:9f:76:96: 3b:2f:67:b5:03:ff:61:cd:c2:86:3e:16:19:b0:6a: 6f:be:7f:89:8b:89:72:11:cb:ad:61:6b:16:2b:de: 35:44:6b:05:d1:ca:66:54:de:ec:e5:88:ef:c6:47: f0:4d:5c:48:40:c7:41:ba:f1:0b:eb:2f:0c:cc:5b: 6f:85:fa:2f:2c:ff:ed:33:36:56:23:50:4a:10:a2: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:DD:75:CD:8B:E8:22:3F:38:59:72:E2:B7:5A:8B:1B:DD:4A:A2 X509v3 Authority Key Identifier: keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:37:0e:b2:71:71:71:ab:35:87:e3:83:8e:51:7c:75:81: 38:92:45:fe:48:63:44:24:a4:cb:b6:cf:26:bc:49:63:92:6d: 87:42:12:48:4f:9c:db:bd:f5:b1:84:e4:27:d3:b5:e9:6b:d2: 4a:60:9d:87:39:9f:ed:d4:b2:fb:f2:f8:40:06:6e:e5:c6:cc: 72:d5:b3:df:c7:c3:44:f9:62:55:68:b2:0e:ab:7f:a7:6a:2f: 9f:2e:8e:83:b5:f2:0c:dd:bc:c6:63:41:12:77:f0:45:e9:8a: a4:2e:71:1c:4b:1a:7e:9c:f8:1c:12:f3:ac:0e:1a:ee:fa:7d: 20:b8:8f:88:71:6c:03:dd:bf:d5:5e:cb:76:5c:f1:88:c8:57: cb:83:69:6c:d5:e5:bf:9b:6c:af:a6:f6:c9:16:6a:72:0f:0f: fe:6d:14:f8:64:ac:a5:e2:b7:fb:f0:70:5e:04:7d:89:19:ab: 6d:02:a3:61:c3:39:93:29:b9:06:f4:ac:b4:5e:b5:52:36:19: b4:97:d9:bc:2d:55:4a:a4:24:52:4b:96:00:fd:c6:03:c5:29: 16:30:36:aa:11:14:ca:41:f8:06:3d:ed:41:a6:b8:47:ed:eb: 02:7c:af:e3:07:61:85:fb:5b:c4:c7:a2:cc:1c:8a:49:f0:56: 90:db:64:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wbbko6o2yubj970Hgvt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk MzAyMDYwHhcNMjUxMjIwMjAwMDQ4WhcNMjUxMjIxMjAwMDQ4WjAzMTEwLwYDVQQD EyhiYTEyZGQ3NWNkOGJlODIyM2YzODU5NzJlMmI3NWE4YjFiZGQ0YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8k2zZM4yy4E+dArhz8Nv8iL4E/6 ao+wcOHPPG/eJeVnPEtK0Ejw1Fr06tQMsE+l7GcQYyAXllPdEgi9erwy0RgyQ036 FEs8cwqA/qE3+5oUTAO29VEEbf2CFl+nnYjA7Fuka2q5rTNA5evo2OjV5/6AljpX Y3zHecAEQ7v5JhCVfYruZmb4hVY32iyGMnvIdwclwxa+YCQlPtYoiz1gNPD/bcQs 2dJULRvONnMI3NafdpY7L2e1A/9hzcKGPhYZsGpvvn+Ji4lyEcutYWsWK941RGsF 0cpmVN7s5YjvxkfwTVxIQMdBuvEL6y8MzFtvhfovLP/tMzZWI1BKEKIzLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoS3XXNi+giPzhZcuK3Wosb3UqiMB8GA1UdIwQY MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5 LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ43DrJx cXGrNYfjg45RfHWBOJJF/khjRCSky7bPJrxJY5Jth0ISSE+c2731sYTkJ9O16WvS SmCdhzmf7dSy+/L4QAZu5cbMctWz38fDRPliVWiyDqt/p2ovny6Og7XyDN28xmNB EnfwRemKpC5xHEsafpz4HBLzrA4a7vp9ILiPiHFsA92/1V7LdlzxiMhXy4NpbNXl v5tsr6b2yRZqcg8P/m0U+GSspeK3+/BwXgR9iRmrbQKjYcM5kym5BvSstF61UjYZ tJfZvC1VSqQkUkuWAP3GA8UpFjA2qhEUykH4Bj3tQaa4R+3rAnyv4wdhhftbxMei zByKSfBWkNtkuA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:58 2025 by rpki-client