This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json) Hash identifier: 03wsf584CSbM3DM+GSs1K+ndt8b9hb27krdzOgY9sSk= Subject key identifier: 00:30:ED:A9:33:05:4C:9E:66:AD:17:40:F4:AA:96:94:41:AC:BC:09 Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643 Certificate serial: 019B42B6BDA070A513C1E8D3728CD14BB87B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:00:30 +0000 Manifest this update: Sun 21 Dec 2025 21:00:30 +0000 Manifest next update: Mon 22 Dec 2025 21:00:30 +0000 Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: 4xx1ubRHfQQGlY1ck3pufi/0QctPBKlA2oO0L/BHvHw=) 2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:bd:a0:70:a5:13:c1:e8:d3:72:8c:d1:4b:b8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643 Validity Not Before: Dec 21 21:00:30 2025 GMT Not After : Dec 22 21:00:30 2025 GMT Subject: CN=0030eda933054c9e66ad1740f4aa969441acbc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:8d:76:0d:cc:09:ec:48:87:60:94:aa:bb: 84:92:64:2b:0a:bb:18:a6:6c:28:47:8e:8a:1f:04: 64:03:44:b8:94:30:68:f3:bd:40:a2:18:50:24:a7: 7e:e8:bb:9a:ef:4b:3c:b9:c3:b0:65:e5:3f:42:45: 65:f1:bc:19:08:1c:94:76:3b:88:9a:c7:78:2a:47: 86:95:db:3a:7e:c2:73:21:be:da:36:16:75:98:16: 06:2a:4d:d8:aa:ae:d2:d8:8d:6b:19:fd:b3:75:da: ec:b3:ef:42:48:63:2e:25:50:60:e9:b0:fd:38:3a: b7:71:7a:2c:24:c6:61:d9:40:b7:d6:fa:7e:ce:cf: bb:7b:c1:46:8c:ec:34:3e:06:2c:9e:ea:32:0a:2c: b7:74:8c:46:27:e6:f1:10:1e:18:c2:93:0d:2f:d8: eb:41:a2:0a:1b:df:87:10:ec:3e:0a:ca:5f:f6:d8: ee:b5:16:5a:66:f5:8c:0d:5d:3f:13:3f:19:bc:4d: 00:1e:a4:e1:79:fa:c1:cc:2b:9f:e6:bf:2c:51:25: e3:f6:8c:85:63:52:65:ac:0d:73:26:f4:28:ad:6c: c4:3e:69:52:ba:2f:e7:6b:2d:59:a0:5c:3f:eb:43: ba:91:00:7c:b5:43:9b:fe:bc:46:17:aa:7e:db:52: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:30:ED:A9:33:05:4C:9E:66:AD:17:40:F4:AA:96:94:41:AC:BC:09 X509v3 Authority Key Identifier: keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1b:a1:9f:06:df:05:ea:f2:b6:b4:6c:95:d5:bf:24:a0:43: 7c:2c:d1:0f:71:34:34:ce:fc:6e:f3:55:20:37:f3:7d:5e:80: cb:ca:a9:60:c6:6f:38:c8:46:6e:62:9c:5f:33:f6:a3:9f:f0: a4:de:ee:19:12:ae:4c:ec:58:c8:4e:7a:bb:80:b2:f8:52:df: 11:28:38:8c:d4:70:d8:ed:12:26:95:c2:ba:a2:be:ff:b3:48: ae:40:7c:44:69:d7:ec:a9:3b:f7:69:71:48:86:d1:de:6f:7a: 83:81:cc:27:d6:95:4d:fb:27:ae:a7:11:e1:72:09:06:5a:61: 08:48:a7:99:fd:27:ef:08:8b:5e:67:27:6e:dc:c2:63:14:bc: df:f3:fe:5c:eb:61:22:17:9e:99:36:0b:92:b3:70:13:3e:4a: e2:3a:3d:17:5b:eb:a2:8f:f5:76:e2:7b:d9:57:a2:ab:f8:3d: 53:fa:94:c3:92:66:c9:b0:94:58:1b:36:0b:65:c6:c5:a0:c8: 02:ef:dd:10:19:4e:0d:9a:e5:04:21:34:b3:80:f2:26:77:56: 8c:25:be:eb:95:0f:29:6e:aa:4f:83:b3:e9:05:9d:6f:ec:56: d5:f6:a7:6d:71:0a:27:c5:41:5a:5f:6a:18:c4:64:1b:88:64: 3b:8e:e4:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtr2gcKUTwejTcozRS7h7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj NTg2NDMwHhcNMjUxMjIxMjEwMDMwWhcNMjUxMjIyMjEwMDMwWjAzMTEwLwYDVQQD EygwMDMwZWRhOTMzMDU0YzllNjZhZDE3NDBmNGFhOTY5NDQxYWNiYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ONdg3MCexIh2CUqruEkmQrCrsY pmwoR46KHwRkA0S4lDBo871AohhQJKd+6Lua70s8ucOwZeU/QkVl8bwZCByUdjuI msd4KkeGlds6fsJzIb7aNhZ1mBYGKk3Yqq7S2I1rGf2zddrss+9CSGMuJVBg6bD9 ODq3cXosJMZh2UC31vp+zs+7e8FGjOw0PgYsnuoyCiy3dIxGJ+bxEB4YwpMNL9jr QaIKG9+HEOw+Cspf9tjutRZaZvWMDV0/Ez8ZvE0AHqThefrBzCuf5r8sUSXj9oyF Y1JlrA1zJvQorWzEPmlSui/nay1ZoFw/60O6kQB8tUOb/rxGF6p+21J9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAw7akzBUyeZq0XQPSqlpRBrLwJMB8GA1UdIwQY MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRuhnwbf BerytrRsldW/JKBDfCzRD3E0NM78bvNVIDfzfV6Ay8qpYMZvOMhGbmKcXzP2o5/w pN7uGRKuTOxYyE56u4Cy+FLfESg4jNRw2O0SJpXCuqK+/7NIrkB8RGnX7Kk792lx SIbR3m96g4HMJ9aVTfsnrqcR4XIJBlphCEinmf0n7wiLXmcnbtzCYxS83/P+XOth IheemTYLkrNwEz5K4jo9F1vroo/1duJ72Veiq/g9U/qUw5JmybCUWBs2C2XGxaDI Au/dEBlODZrlBCE0s4DyJndWjCW+65UPKW6qT4Oz6QWdb+xW1fanbXEKJ8VBWl9q GMRkG4hkO47krg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:23:17 2025 by rpki-client