This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json) Hash identifier: SKDnYInE1wQUBuK2qUJ0IoNqeh7FCfMkejDNOemGcS8= Subject key identifier: 57:87:9E:24:07:24:AF:B2:B4:D9:E4:25:DE:B1:DC:F2:BF:6A:FE:C6 Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Certificate serial: 019B42EE684A41B9D154814FB94305F8EAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 22:01:18 +0000 Manifest this update: Sun 21 Dec 2025 22:01:18 +0000 Manifest next update: Mon 22 Dec 2025 22:01:18 +0000 Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=) 2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: BXgHUO74s22EJNfk7VdFDFfz2+H0T/cyivcHQZVuxck=) 3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:68:4a:41:b9:d1:54:81:4f:b9:43:05:f8:ea:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Validity Not Before: Dec 21 22:01:18 2025 GMT Not After : Dec 22 22:01:18 2025 GMT Subject: CN=57879e240724afb2b4d9e425deb1dcf2bf6afec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:aa:be:6c:b8:92:69:c5:47:31:65:4d:c2: 49:d9:5e:f4:d9:9d:67:61:ab:c1:f6:30:e6:38:81: 2f:88:9d:3f:36:d8:03:d3:37:a6:ae:67:39:29:31: 1a:36:1f:37:d8:0f:91:f2:61:7d:ee:55:ca:07:3b: 9b:dc:c2:f4:52:a7:b0:66:a8:ec:18:e4:76:bf:64: b1:66:f2:38:c5:29:05:66:51:8f:76:cd:29:6e:1a: be:f2:9a:dc:dd:3f:44:7c:ab:00:d7:a7:9c:e0:84: 38:ea:4d:70:1a:34:70:b3:68:a6:86:a0:ab:2e:c3: 33:e8:1b:55:d9:97:4c:6f:44:94:7c:d2:19:53:2a: 28:1e:60:8c:f6:36:b1:83:fb:ef:ee:5c:d2:e4:4a: 1a:e2:e6:4f:cc:a5:45:49:99:f7:36:c8:6f:7d:7f: 54:35:be:73:17:52:08:31:74:6c:b1:07:e9:92:dc: 17:4d:02:2a:cd:6b:9d:1e:5c:f7:1e:a4:ff:9b:d5: 31:0c:0b:3b:69:b2:7d:23:f3:6d:d1:5d:30:fb:3a: ae:a2:ea:99:41:b9:fe:44:a2:d3:7d:e5:31:7b:d6: 56:c6:94:2f:80:8e:d5:dd:7e:66:cd:0d:0f:8c:a1: 91:1a:67:68:5f:d5:4a:f6:9c:33:a7:25:06:dc:26: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:9E:24:07:24:AF:B2:B4:D9:E4:25:DE:B1:DC:F2:BF:6A:FE:C6 X509v3 Authority Key Identifier: keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e9:ab:10:08:8e:22:7b:b4:9d:31:23:21:c4:d4:f1:92:5f: e0:41:95:85:02:67:09:55:0d:7f:31:9e:a0:77:06:ca:c7:01: a9:d9:bb:e0:54:ff:45:15:7f:dd:64:73:19:a2:5b:91:7c:1a: 3e:0c:05:3a:df:92:bb:56:6a:6f:8a:73:1c:86:af:74:e0:c2: c3:73:fe:b4:7f:84:53:44:c9:ec:6e:e2:81:aa:e4:7e:ff:1a: a2:99:e5:59:d5:5e:2f:96:5d:62:19:18:a2:64:2c:e2:96:71: b5:51:5d:c6:45:4d:e9:aa:0e:16:ae:cb:1c:97:f9:6d:21:71: 7b:6e:8b:1e:89:0d:32:cd:cb:02:ba:56:a6:40:bb:b2:fd:78: e4:6f:92:1c:25:f9:b0:77:8e:ce:f0:f0:15:bb:a9:53:29:31: fd:e4:75:9f:7c:52:13:b0:72:94:75:1b:cd:a2:e2:03:b5:26: 63:af:fd:f0:76:4a:fc:48:47:9b:09:a9:29:19:1d:a9:51:85: 15:ec:7d:67:95:17:86:c7:cb:87:ed:fb:e5:b2:f2:31:33:f7: 0b:82:10:c7:14:17:2c:3d:ba:3c:c9:05:47:74:25:b1:76:bd: 64:e0:91:a4:27:c1:0a:0f:c5:b9:07:a1:ff:51:ba:c8:fc:67: 72:5a:67:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7mhKQbnRVIFPuUMF+OrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl ZTgwYWQwHhcNMjUxMjIxMjIwMTE4WhcNMjUxMjIyMjIwMTE4WjAzMTEwLwYDVQQD Eyg1Nzg3OWUyNDA3MjRhZmIyYjRkOWU0MjVkZWIxZGNmMmJmNmFmZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j+qvmy4kmnFRzFlTcJJ2V702Z1n YavB9jDmOIEviJ0/NtgD0zemrmc5KTEaNh832A+R8mF97lXKBzub3ML0UqewZqjs GOR2v2SxZvI4xSkFZlGPds0pbhq+8prc3T9EfKsA16ec4IQ46k1wGjRws2imhqCr LsMz6BtV2ZdMb0SUfNIZUyooHmCM9jaxg/vv7lzS5Eoa4uZPzKVFSZn3NshvfX9U Nb5zF1IIMXRssQfpktwXTQIqzWudHlz3HqT/m9UxDAs7abJ9I/Nt0V0w+zquouqZ Qbn+RKLTfeUxe9ZWxpQvgI7V3X5mzQ0PjKGRGmdoX9VK9pwzpyUG3CZlTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeHniQHJK+ytNnkJd6x3PK/av7GMB8GA1UdIwQY MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4 LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUumrEAiO Inu0nTEjIcTU8ZJf4EGVhQJnCVUNfzGeoHcGyscBqdm74FT/RRV/3WRzGaJbkXwa PgwFOt+Su1Zqb4pzHIavdODCw3P+tH+EU0TJ7G7igarkfv8aopnlWdVeL5ZdYhkY omQs4pZxtVFdxkVN6aoOFq7LHJf5bSFxe26LHokNMs3LArpWpkC7sv145G+SHCX5 sHeOzvDwFbupUykx/eR1n3xSE7BylHUbzaLiA7UmY6/98HZK/EhHmwmpKRkdqVGF Fex9Z5UXhsfLh+375bLyMTP3C4IQxxQXLD26PMkFR3QlsXa9ZOCRpCfBCg/FuQeh /1G6yPxnclpnoA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:43:03 2025 by rpki-client