This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json) Hash identifier: ivzysmpiWRc3nj1q89To2mf7mJV/iqMdwZyGb8piXEA= Subject key identifier: 87:EC:FA:4C:88:B2:6A:5D:C1:E9:E4:39:A9:C1:65:AA:73:74:B0:56 Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Certificate serial: 019B717DC533AB6201BFAD516072214F4BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 23:00:26 +0000 Manifest this update: Tue 30 Dec 2025 23:00:26 +0000 Manifest next update: Wed 31 Dec 2025 23:00:26 +0000 Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=) 2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: nIehyMj8HECkI6muW5vx8mJtLj6/EaRPoFITs3Ti9Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:c5:33:ab:62:01:bf:ad:51:60:72:21:4f:4b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Validity Not Before: Dec 30 23:00:26 2025 GMT Not After : Dec 31 23:00:26 2025 GMT Subject: CN=87ecfa4c88b26a5dc1e9e439a9c165aa7374b056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:da:be:ff:10:a9:93:1c:fd:2f:5e:8e:33: 26:c9:9a:09:38:aa:54:ad:0f:cf:80:de:af:d6:12: 0e:ad:f2:97:29:25:2a:56:60:67:28:d0:3a:c1:d4: 34:cc:ad:4c:e9:bc:87:61:40:11:6a:3f:bf:a1:67: 29:c1:2e:bb:56:20:cc:e7:41:5d:21:24:a1:c2:b2: f6:e2:eb:6c:a0:3e:77:ff:b8:19:3d:2c:f4:5f:60: 3f:e3:24:ca:79:47:2c:3e:25:35:c6:ba:84:e4:3c: ab:d3:94:c6:d2:bf:07:65:a8:f6:04:95:bf:81:34: 44:8e:b2:8b:42:79:9f:6c:ad:6d:5a:cc:6d:13:3d: 9d:fc:f1:a8:89:33:8e:4e:cc:ce:35:e5:fa:d8:82: 3d:b4:f5:b1:3f:3a:a0:cb:7b:32:59:0b:03:b9:ef: 3d:23:b5:63:11:29:31:88:eb:dc:90:15:db:46:1d: d0:b8:67:63:d6:a4:ba:be:56:ff:c9:45:36:94:6a: 79:f6:15:a6:fd:96:1e:bc:41:bf:4d:77:f8:42:3d: 38:6e:a8:b1:b1:30:a3:d6:c9:53:b2:ce:08:c3:5e: ca:7f:94:21:7f:01:38:fe:f0:d5:88:a0:88:2f:25: f0:e7:0c:a4:c2:03:e3:d4:fe:bf:31:ae:d7:d6:77: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EC:FA:4C:88:B2:6A:5D:C1:E9:E4:39:A9:C1:65:AA:73:74:B0:56 X509v3 Authority Key Identifier: keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:5c:80:f5:89:aa:72:28:ac:39:72:fb:7f:4e:e3:e1:7e: 44:05:5f:4f:5f:9d:6f:73:8c:5a:4d:80:b9:07:ee:3f:9c:70: b3:90:23:a4:d3:7f:6c:f7:8e:ca:cb:05:c7:22:bc:fc:f5:7f: e9:f5:d8:ec:5e:e9:56:f3:fe:06:e4:15:fe:a5:8f:ba:a1:4a: 38:78:a3:63:34:73:79:01:65:60:20:47:d0:78:0c:bd:39:3c: 45:1e:38:6e:40:32:f3:43:15:27:45:54:77:b0:91:bc:26:a8: 36:c0:67:57:dc:29:97:84:ea:0c:66:ae:16:ad:79:d0:d9:3a: 00:fc:93:ca:fe:c7:d6:0d:76:49:70:59:6c:db:5f:e2:78:c6: db:dd:48:a2:f6:a4:11:98:cb:34:55:59:39:cd:b9:fe:c7:f5: 53:91:b4:53:14:91:22:79:a4:0c:02:78:ee:1f:6b:24:6e:25: e3:fd:54:17:71:f5:97:cd:08:b7:8a:ca:72:92:c6:6e:71:94: f1:99:db:3c:12:51:9e:86:8d:df:2a:21:1e:fc:4e:2b:13:3d: 52:15:5a:22:f2:06:af:40:8b:5f:96:3d:d9:ac:4a:48:c9:9e: 6b:46:83:0b:b9:6f:61:b0:23:a4:16:7d:e9:5f:9e:ab:30:8d: f3:89:60:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtxfcUzq2IBv61RYHIhT0vdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx ZGVlMGEwHhcNMjUxMjMwMjMwMDI2WhcNMjUxMjMxMjMwMDI2WjAzMTEwLwYDVQQD Eyg4N2VjZmE0Yzg4YjI2YTVkYzFlOWU0MzlhOWMxNjVhYTczNzRiMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR3avv8QqZMc/S9ejjMmyZoJOKpU rQ/PgN6v1hIOrfKXKSUqVmBnKNA6wdQ0zK1M6byHYUARaj+/oWcpwS67ViDM50Fd ISShwrL24utsoD53/7gZPSz0X2A/4yTKeUcsPiU1xrqE5Dyr05TG0r8HZaj2BJW/ gTREjrKLQnmfbK1tWsxtEz2d/PGoiTOOTszONeX62II9tPWxPzqgy3syWQsDue89 I7VjESkxiOvckBXbRh3QuGdj1qS6vlb/yUU2lGp59hWm/ZYevEG/TXf4Qj04bqix sTCj1slTss4Iw17Kf5QhfwE4/vDViKCILyXw5wykwgPj1P6/Ma7X1ndNCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIfs+kyIsmpdwenkOanBZapzdLBWMB8GA1UdIwQY MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXJc gPWJqnIorDly+39O4+F+RAVfT1+db3OMWk2AuQfuP5xws5AjpNN/bPeOyssFxyK8 /PV/6fXY7F7pVvP+BuQV/qWPuqFKOHijYzRzeQFlYCBH0HgMvTk8RR44bkAy80MV J0VUd7CRvCaoNsBnV9wpl4TqDGauFq150Nk6APyTyv7H1g12SXBZbNtf4njG291I ovakEZjLNFVZOc25/sf1U5G0UxSRInmkDAJ47h9rJG4l4/1UF3H1l80It4rKcpLG bnGU8ZnbPBJRnoaN3yohHvxOKxM9UhVaIvIGr0CLX5Y92axKSMmea0aDC7lvYbAj pBZ96V+eqzCN84lgMw== -----END CERTIFICATE-----Generated at Wed Dec 31 00:28:36 2025 by rpki-client