This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json) Hash identifier: gmQfEQoN28DNvV7GxZb2swbpE1vfasZwFyXMRv7Vd2Y= Subject key identifier: 4B:F4:19:E1:5C:23:5E:29:79:F6:5C:67:87:23:E4:29:FE:F5:EB:68 Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4 Certificate serial: 019B6B0E1B3AC372D5372D81B339E9536664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft Manifest number: 0346 Signing time: Mon 29 Dec 2025 17:00:44 +0000 Manifest this update: Mon 29 Dec 2025 17:00:44 +0000 Manifest next update: Tue 30 Dec 2025 17:00:44 +0000 Files and hashes: 1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=) 2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: PuXUFLKDB/ljOvMw397U+XuRFnCA3D9NkNNxcvexJu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0e:1b:3a:c3:72:d5:37:2d:81:b3:39:e9:53:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4 Validity Not Before: Dec 29 17:00:44 2025 GMT Not After : Dec 30 17:00:44 2025 GMT Subject: CN=4bf419e15c235e2979f65c678723e429fef5eb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:0d:ee:99:c8:5c:d6:e7:07:33:bf:11:00: b4:ce:79:50:25:13:38:60:88:6d:fa:bc:e5:5b:d3: 7f:25:7f:44:0d:0e:4a:8a:a9:93:23:8f:1e:fc:cb: fa:29:cb:56:5c:98:58:3f:13:19:a5:d2:d1:3f:19: 90:5e:66:cc:8a:e9:8b:c0:1b:e9:0c:5f:47:d8:64: 7e:f4:d5:5e:9d:e2:a4:c8:28:60:77:47:11:98:63: e9:ab:54:c4:a1:ca:43:7e:10:3e:51:51:6a:f0:c3: ed:bd:32:ce:af:62:33:e0:47:40:c1:10:dd:50:f1: 8a:5e:cd:75:e8:6c:10:92:9b:ca:08:49:23:12:ef: a2:01:49:e8:22:1f:d3:47:58:3d:86:fe:34:01:ec: 5b:1e:90:50:33:67:fc:3e:56:0a:00:45:57:d8:2c: ac:52:73:c9:61:8c:25:9a:9f:71:01:c5:ba:f5:6f: 44:09:9a:6b:d9:8f:c7:ef:ce:c9:07:be:d4:85:ec: 97:2b:20:e7:b5:7d:01:cc:29:68:2b:1f:0a:5f:60: 4a:c6:83:48:d1:0f:42:a8:d6:c0:44:d2:1f:f9:73: 13:fa:99:97:27:bc:b3:7c:3a:15:ba:9a:fe:bf:6a: 5d:71:a4:9d:f6:f4:80:8f:83:ad:0d:86:22:c5:57: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:19:E1:5C:23:5E:29:79:F6:5C:67:87:23:E4:29:FE:F5:EB:68 X509v3 Authority Key Identifier: keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:33:95:6a:0f:48:ee:78:78:0a:3c:69:16:3b:bf:dc:7b:b0: dc:90:8a:47:57:76:5b:db:ae:ae:f7:4a:21:5e:1e:16:23:44: e5:03:c6:ed:0e:e1:86:4d:9b:93:d8:14:6c:7c:95:77:0f:75: ca:12:fd:66:cd:f7:75:81:f2:90:4e:2a:b6:29:bf:4b:87:b8: b9:ec:06:c6:6f:0b:60:ad:47:0a:40:49:72:81:9e:fc:21:7a: 25:9a:ce:d4:a6:11:2b:85:28:76:2a:de:50:ee:21:90:47:a3: 52:7a:1c:dd:80:cc:88:32:42:ef:34:63:1b:9a:db:19:84:22: 4f:7a:11:9d:ac:81:52:bc:22:2b:3c:a9:1b:00:c9:02:c8:d2: b8:75:e5:e1:5b:72:e9:24:13:00:e9:f7:2d:22:11:24:3b:3d: 9f:01:00:0d:64:06:8f:b7:ff:f5:5d:ee:3b:2a:45:9c:d8:ee: b7:cc:f1:93:bf:ac:e0:92:93:79:6b:30:bb:11:68:cd:44:73: a6:e5:84:f4:a5:be:06:e8:90:a1:12:6b:11:2e:48:b5:25:92: c0:de:97:59:75:61:4d:5c:c2:a9:a8:65:6a:26:c1:72:17:12: fb:b2:2d:a1:3d:7b:2e:90:1f:57:4c:ef:8f:ce:c6:d8:ef:6e: a2:10:9c:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDhs6w3LVNy2BsznpU2ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz MDM5YTQwHhcNMjUxMjI5MTcwMDQ0WhcNMjUxMjMwMTcwMDQ0WjAzMTEwLwYDVQQD Eyg0YmY0MTllMTVjMjM1ZTI5NzlmNjVjNjc4NzIzZTQyOWZlZjVlYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wN7pnIXNbnBzO/EQC0znlQJRM4 YIht+rzlW9N/JX9EDQ5KiqmTI48e/Mv6KctWXJhYPxMZpdLRPxmQXmbMiumLwBvp DF9H2GR+9NVeneKkyChgd0cRmGPpq1TEocpDfhA+UVFq8MPtvTLOr2Iz4EdAwRDd UPGKXs116GwQkpvKCEkjEu+iAUnoIh/TR1g9hv40AexbHpBQM2f8PlYKAEVX2Cys UnPJYYwlmp9xAcW69W9ECZpr2Y/H787JB77UheyXKyDntX0BzCloKx8KX2BKxoNI 0Q9CqNbARNIf+XMT+pmXJ7yzfDoVupr+v2pdcaSd9vSAj4OtDYYixVePowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv0GeFcI14pefZcZ4cj5Cn+9etoMB8GA1UdIwQY MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3 LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjOVag9I 7nh4CjxpFju/3Huw3JCKR1d2W9uurvdKIV4eFiNE5QPG7Q7hhk2bk9gUbHyVdw91 yhL9Zs33dYHykE4qtim/S4e4uewGxm8LYK1HCkBJcoGe/CF6JZrO1KYRK4Uodire UO4hkEejUnoc3YDMiDJC7zRjG5rbGYQiT3oRnayBUrwiKzypGwDJAsjSuHXl4Vty 6SQTAOn3LSIRJDs9nwEADWQGj7f/9V3uOypFnNjut8zxk7+s4JKTeWswuxFozURz puWE9KW+BuiQoRJrES5ItSWSwN6XWXVhTVzCqahlaibBchcS+7ItoT17LpAfV0zv j87G2O9uohCc5Q== -----END CERTIFICATE-----Generated at Mon Dec 29 23:45:58 2025 by rpki-client