This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json) Hash identifier: Dp7RyHCgIjI9azotAz7TFRX9SgdVdrntEL0g1o1LUjE= Subject key identifier: 4E:CD:0B:B3:1F:49:13:05:E2:A8:C6:B6:F6:99:18:D8:5B:43:73:4E Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Certificate serial: 019B4E165CC65DBB9CF56B4516362DB1395F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft Manifest number: 0A4E Signing time: Wed 24 Dec 2025 02:00:46 +0000 Manifest this update: Wed 24 Dec 2025 02:00:46 +0000 Manifest next update: Thu 25 Dec 2025 02:00:46 +0000 Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=) 2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: LzPj+Rue5vRQ6YFQJRjQK+GYQa7mBAxNKPAcaTcCuG0=) 3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:5c:c6:5d:bb:9c:f5:6b:45:16:36:2d:b1:39:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Validity Not Before: Dec 24 02:00:46 2025 GMT Not After : Dec 25 02:00:46 2025 GMT Subject: CN=4ecd0bb31f491305e2a8c6b6f69918d85b43734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:80:cc:02:81:af:ac:a1:a4:02:b1:55:a6: e9:9c:a7:d1:2c:00:fc:fe:2c:21:fd:b2:aa:8c:b7: cb:87:ac:32:46:70:bc:52:4b:af:5a:7c:64:9b:9a: 0d:8f:66:53:bc:6b:08:78:a7:21:61:a4:4c:d7:ff: 55:6c:a4:f1:bf:37:c4:d0:5b:75:f7:9a:dc:2d:2e: 1a:84:0d:e0:14:7c:ef:84:dc:a1:11:8b:63:14:ba: 74:61:b1:42:54:00:72:20:ed:59:55:e8:5e:e9:16: 57:3e:05:68:49:59:e2:05:c3:4b:5f:4d:5b:bd:41: f7:42:b2:8e:34:6d:df:8d:36:83:ff:b9:1b:9f:66: 68:02:93:51:14:79:49:c8:83:e5:fe:d4:3f:61:55: fc:aa:f7:ae:97:02:fe:c6:6b:42:c3:56:c1:aa:b1: 2c:d1:89:74:e3:fc:28:85:15:49:a6:58:3f:b6:69: 22:f1:13:64:00:6e:85:3a:b1:6a:d7:e9:0a:af:23: 46:cd:94:c6:d5:19:dd:07:d4:83:20:33:93:b6:31: ef:d7:60:56:50:89:65:32:3a:91:04:23:af:64:b1: 05:65:2b:fb:09:a0:b3:6b:3c:25:1e:94:5c:a5:06: 98:78:1e:bf:e2:31:a3:11:da:0d:f4:2d:77:f6:a4: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:0B:B3:1F:49:13:05:E2:A8:C6:B6:F6:99:18:D8:5B:43:73:4E X509v3 Authority Key Identifier: keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:96:25:46:ce:3a:f0:d9:25:94:b1:03:e9:31:b0:04:47: 45:08:74:30:41:75:6d:50:43:fa:c0:a6:ef:a9:ee:af:e7:ff: 30:e0:f1:3a:61:ae:92:52:10:d7:40:92:3f:ae:2d:b5:34:50: 3c:4e:82:fd:7f:d9:cd:71:14:07:37:8a:be:0c:38:60:be:05: 71:98:6e:5c:6b:68:82:bb:a7:36:9b:df:4f:6e:83:0f:02:a7: f5:0a:16:e4:11:5e:b6:8c:b2:20:05:e3:7e:17:95:24:20:74: 5f:c4:1d:78:f6:74:05:dd:3c:a7:ce:54:a0:70:69:a5:4b:b8: 8e:3c:30:12:7d:14:93:9d:c6:e3:f2:21:59:69:e5:ac:3c:9b: 90:c2:7f:f5:41:bc:17:41:dc:04:0b:4e:ba:e1:5c:a8:17:f6: f0:e1:91:a8:5d:09:e2:f5:72:1d:5b:f1:ce:49:37:ff:be:ed: e5:f2:6e:49:2a:0e:e8:7d:cf:4b:7e:de:25:de:c9:2b:4b:dd: 77:4a:de:4a:f7:a1:f2:78:cf:42:17:a6:b3:1b:6e:ea:86:24: 66:9a:f4:74:7e:7b:42:9d:b2:d5:3a:3c:87:93:2e:2f:0d:d8: 10:e2:cb:da:3b:e0:f4:28:d0:73:8c:06:8e:42:e0:7a:8f:db: 70:91:73:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFlzGXbuc9WtFFjYtsTlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3 NjA4ZjYwHhcNMjUxMjI0MDIwMDQ2WhcNMjUxMjI1MDIwMDQ2WjAzMTEwLwYDVQQD Eyg0ZWNkMGJiMzFmNDkxMzA1ZTJhOGM2YjZmNjk5MThkODViNDM3MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jiAzAKBr6yhpAKxVabpnKfRLAD8 /iwh/bKqjLfLh6wyRnC8UkuvWnxkm5oNj2ZTvGsIeKchYaRM1/9VbKTxvzfE0Ft1 95rcLS4ahA3gFHzvhNyhEYtjFLp0YbFCVAByIO1ZVehe6RZXPgVoSVniBcNLX01b vUH3QrKONG3fjTaD/7kbn2ZoApNRFHlJyIPl/tQ/YVX8qveulwL+xmtCw1bBqrEs 0Yl04/wohRVJplg/tmki8RNkAG6FOrFq1+kKryNGzZTG1RndB9SDIDOTtjHv12BW UIllMjqRBCOvZLEFZSv7CaCzazwlHpRcpQaYeB6/4jGjEdoN9C139qS4MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7NC7MfSRMF4qjGtvaZGNhbQ3NOMB8GA1UdIwQY MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3 LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUSWJUbO OvDZJZSxA+kxsARHRQh0MEF1bVBD+sCm76nur+f/MODxOmGuklIQ10CSP64ttTRQ PE6C/X/ZzXEUBzeKvgw4YL4FcZhuXGtogrunNpvfT26DDwKn9QoW5BFetoyyIAXj fheVJCB0X8QdePZ0Bd08p85UoHBppUu4jjwwEn0Uk53G4/IhWWnlrDybkMJ/9UG8 F0HcBAtOuuFcqBf28OGRqF0J4vVyHVvxzkk3/77t5fJuSSoO6H3PS37eJd7JK0vd d0reSveh8njPQhemsxtu6oYkZpr0dH57Qp2y1To8h5MuLw3YEOLL2jvg9CjQc4wG jkLgeo/bcJFz3g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:58:25 2025 by rpki-client