This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json) Hash identifier: A1o0/RmhSFW21oq8xHpPsdgOA5nMqqs9Wi3wbGXslTk= Subject key identifier: 72:07:82:63:53:5D:9E:34:FB:5E:6C:45:BD:4C:E6:2D:2C:C7:3A:86 Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2 Certificate serial: 019B2A77F2D50DE347912250043BE8A2FFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 04:01:02 +0000 Manifest this update: Wed 17 Dec 2025 04:01:02 +0000 Manifest next update: Thu 18 Dec 2025 04:01:02 +0000 Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: VbuvfDnW0FPUw80QP4bycVy0I0xSojfTtEJ2STns6pg=) 2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=) 3: gNi743mJaJJJpWWUxpf7RubXOek.roa (hash: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:f2:d5:0d:e3:47:91:22:50:04:3b:e8:a2:ff:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2 Validity Not Before: Dec 17 04:01:02 2025 GMT Not After : Dec 18 04:01:02 2025 GMT Subject: CN=72078263535d9e34fb5e6c45bd4ce62d2cc73a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:05:39:7e:f3:e5:2b:c4:db:10:62:d3:9f: b3:b2:2e:fb:b4:09:ac:4d:a6:47:6b:15:40:c9:3c: 66:6e:7e:14:3c:35:73:11:8f:38:4a:8f:ac:fc:75: 21:19:2f:04:b8:e4:05:36:a1:67:cf:d8:0e:34:3a: a6:38:fd:a5:f3:41:45:7d:42:76:ce:98:d3:eb:b3: ca:62:25:37:60:5d:00:da:56:33:a2:9d:2e:4d:b4: 4e:ba:55:b0:dd:9e:dc:b1:22:77:71:b3:44:05:72: 2b:82:25:8f:aa:28:d1:c0:95:45:18:73:52:52:f3: 4e:bd:6f:a7:15:91:23:4f:57:e8:04:64:3a:ea:ab: b1:b3:4f:55:aa:1c:1e:46:3e:7a:73:5f:21:7f:eb: d4:e5:2c:a9:fa:a5:da:8d:51:91:d6:d9:91:7f:9b: ca:77:98:a2:17:47:b2:c2:1c:c4:56:c0:c3:11:b4: 00:08:33:ce:a3:cf:5d:1f:83:b8:2e:7b:b4:b2:c0: e9:a4:d7:f3:fb:e4:a5:fa:cb:0a:78:b9:cb:c4:46: 55:77:3d:d0:79:5d:19:9e:dc:e8:67:8d:74:57:44: 98:27:fd:68:b0:7c:f8:e2:26:ce:c1:68:59:b7:13: fe:1c:0a:5d:7b:6e:d9:5f:b4:e1:26:b6:b0:c1:65: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:82:63:53:5D:9E:34:FB:5E:6C:45:BD:4C:E6:2D:2C:C7:3A:86 X509v3 Authority Key Identifier: keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:33:fd:63:fc:e7:c0:53:94:bc:de:63:93:38:d9:c2:10: 0d:7e:c0:2f:60:dc:79:c6:14:ca:e1:fb:5d:3f:95:1a:d5:03: 93:94:59:69:79:f8:4a:12:75:5c:be:cb:42:29:26:44:ad:83: ca:9d:fc:3e:d8:07:ba:5d:65:df:d2:83:66:fc:eb:3b:6f:ff: 57:8b:eb:47:9f:85:dc:96:11:03:94:ce:a6:4b:49:a5:9f:33: 1d:7d:12:59:04:e2:c5:cd:3a:5b:12:84:f3:63:71:f0:a2:56: 6c:b9:42:98:39:c0:3a:12:5b:d6:5d:37:6b:73:93:a8:db:77: e6:cf:a2:16:29:d2:ca:79:26:b2:93:db:63:8e:0f:b4:cd:7c: ae:46:37:92:88:1f:5c:e1:df:23:36:ed:5a:29:a8:07:50:c9: 2c:0c:e8:ed:10:db:9f:27:b9:c1:08:62:7c:e8:e9:8b:79:40: 03:de:fa:1f:26:df:1c:42:54:0e:7c:04:f2:f5:c5:91:79:2a: 7c:24:57:2a:24:30:64:fd:59:61:09:f4:4b:e7:69:8d:98:e1: 44:32:21:dc:6e:d8:51:57:e1:f9:06:e0:e5:69:f1:85:c5:f0: a4:3f:24:52:13:d5:83:6b:19:a1:80:d3:35:76:e8:1d:79:d1: 53:13:2c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd/LVDeNHkSJQBDvoov/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky NTdkZjIwHhcNMjUxMjE3MDQwMTAyWhcNMjUxMjE4MDQwMTAyWjAzMTEwLwYDVQQD Eyg3MjA3ODI2MzUzNWQ5ZTM0ZmI1ZTZjNDViZDRjZTYyZDJjYzczYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2AFOX7z5SvE2xBi05+zsi77tAms TaZHaxVAyTxmbn4UPDVzEY84So+s/HUhGS8EuOQFNqFnz9gONDqmOP2l80FFfUJ2 zpjT67PKYiU3YF0A2lYzop0uTbROulWw3Z7csSJ3cbNEBXIrgiWPqijRwJVFGHNS UvNOvW+nFZEjT1foBGQ66quxs09VqhweRj56c18hf+vU5Syp+qXajVGR1tmRf5vK d5iiF0eywhzEVsDDEbQACDPOo89dH4O4Lnu0ssDppNfz++Sl+ssKeLnLxEZVdz3Q eV0ZntzoZ410V0SYJ/1osHz44ibOwWhZtxP+HApde27ZX7ThJrawwWW00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIHgmNTXZ40+15sRb1M5i0sxzqGMB8GA1UdIwQY MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5Iz/WP8 58BTlLzeY5M42cIQDX7AL2DcecYUyuH7XT+VGtUDk5RZaXn4ShJ1XL7LQikmRK2D yp38PtgHul1l39KDZvzrO2//V4vrR5+F3JYRA5TOpktJpZ8zHX0SWQTixc06WxKE 82Nx8KJWbLlCmDnAOhJb1l03a3OTqNt35s+iFinSynkmspPbY44PtM18rkY3kogf XOHfIzbtWimoB1DJLAzo7RDbnye5wQhifOjpi3lAA976HybfHEJUDnwE8vXFkXkq fCRXKiQwZP1ZYQn0S+dpjZjhRDIh3G7YUVfh+Qbg5WnxhcXwpD8kUhPVg2sZoYDT NXboHXnRUxMsEQ== -----END CERTIFICATE-----Generated at Wed Dec 17 11:18:50 2025 by rpki-client