This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json) Hash identifier: l106PaCJ8niQ39stf6hY8lXOvZbNPiTcFgP62S4R9Es= Subject key identifier: B9:7A:AE:A6:4F:BE:0A:02:F0:04:EA:15:51:26:7C:8F:74:0D:A3:D0 Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Certificate serial: 019B4A0474A694BACD748DDCF0605E481BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft Manifest number: 1096 Signing time: Tue 23 Dec 2025 07:02:44 +0000 Manifest this update: Tue 23 Dec 2025 07:02:44 +0000 Manifest next update: Wed 24 Dec 2025 07:02:44 +0000 Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=) 2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: XmNh/Ra6J/Z3BGFG1kUcOgiw48/JejuZeFPzBil145c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:74:a6:94:ba:cd:74:8d:dc:f0:60:5e:48:1b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Validity Not Before: Dec 23 07:02:44 2025 GMT Not After : Dec 24 07:02:44 2025 GMT Subject: CN=b97aaea64fbe0a02f004ea1551267c8f740da3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:a0:15:05:eb:1e:9a:bb:ed:ab:8c:77:2c: be:a6:23:1c:9f:2b:9c:7b:ee:91:6c:ed:13:82:be: 5e:d0:cb:de:f2:7b:21:13:e3:93:19:9d:a4:31:42: bb:ad:9a:f2:e2:03:8e:c4:5a:bd:63:09:aa:9b:1f: 6e:68:8d:e7:81:07:45:3a:51:e2:fd:c8:b0:7b:70: 57:5b:17:10:bc:3d:21:5d:72:8a:3e:a5:45:47:a2: d8:30:38:dd:12:ef:5d:6a:ff:5e:cd:06:2d:2a:68: 7e:fa:71:81:e5:46:c9:9b:41:81:0e:21:1a:5a:e2: 43:46:f7:8e:f3:03:d9:78:d3:07:56:0a:70:e5:6c: 26:66:a2:16:80:02:b9:ba:6e:39:8a:bc:04:f1:52: 84:18:7b:3a:3b:a7:dd:a7:bb:fb:70:49:07:c1:5d: 3c:7d:db:af:f3:1d:54:cc:f9:d5:d5:c5:06:f6:4c: 72:d0:d2:a2:1e:6b:fa:d0:ad:da:dd:82:a7:4d:2e: f4:ec:e7:19:a2:aa:32:ae:91:07:b0:2f:7d:01:eb: 6e:45:b5:5d:04:23:29:70:83:52:46:41:d6:d1:6f: d6:73:9c:69:19:ed:2c:60:11:a9:dd:1a:28:8a:c8: ba:24:ad:f2:67:8d:42:e0:22:7d:96:14:1a:fa:9d: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7A:AE:A6:4F:BE:0A:02:F0:04:EA:15:51:26:7C:8F:74:0D:A3:D0 X509v3 Authority Key Identifier: keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:02:fe:6d:5d:a2:94:81:c9:77:e3:d1:84:65:09:cd:7b:f7: eb:8c:bc:e7:7e:bf:c3:29:56:20:d6:86:74:74:20:f6:ae:ca: 7c:fb:5b:ea:1b:10:38:bb:61:7e:64:17:e9:d4:cb:68:56:1e: 1c:cd:8d:cb:4c:d4:1e:d8:88:09:a1:24:3e:2f:3f:ec:60:d7: a3:34:15:d2:70:d5:8b:08:73:62:af:0a:34:84:04:74:b4:12: 37:4f:51:dc:e4:ff:e4:41:3c:e9:d5:9b:11:f3:bc:2b:32:ae: 3a:1c:f2:08:09:8e:49:35:85:78:ca:ef:2d:92:4d:5c:80:11: da:f8:8d:00:29:68:0b:ab:73:b7:f4:36:1a:02:63:8a:b4:bc: 33:9d:59:a0:58:e2:a1:18:7a:40:64:c3:9b:f1:10:60:8c:54: c7:79:3b:bb:3d:d7:7b:f9:39:38:ea:4c:b8:13:05:70:6b:23: 6b:ed:07:97:0c:22:3b:78:09:6c:74:1a:09:f0:99:5e:33:7a: f9:24:e6:a1:6a:4a:da:50:e5:59:a1:26:8e:2d:3c:3d:0c:15: 07:18:f2:61:47:3d:16:fd:74:cf:9a:49:ef:f1:ad:9c:16:31: b7:b3:5f:09:27:93:ad:ab:65:03:ac:4b:d2:dc:75:a6:eb:d6: e6:fe:f5:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBHSmlLrNdI3c8GBeSBvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTg3MGZjMTg1NGEzYjA5MzkzOGMwOWNmNjA2NTFiYTk5 M2ZmYzYwHhcNMjUxMjIzMDcwMjQ0WhcNMjUxMjI0MDcwMjQ0WjAzMTEwLwYDVQQD EyhiOTdhYWVhNjRmYmUwYTAyZjAwNGVhMTU1MTI2N2M4Zjc0MGRhM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PGgFQXrHpq77auMdyy+piMcnyuc e+6RbO0Tgr5e0Mve8nshE+OTGZ2kMUK7rZry4gOOxFq9Ywmqmx9uaI3ngQdFOlHi /ciwe3BXWxcQvD0hXXKKPqVFR6LYMDjdEu9dav9ezQYtKmh++nGB5UbJm0GBDiEa WuJDRveO8wPZeNMHVgpw5WwmZqIWgAK5um45irwE8VKEGHs6O6fdp7v7cEkHwV08 fduv8x1UzPnV1cUG9kxy0NKiHmv60K3a3YKnTS707OcZoqoyrpEHsC99AetuRbVd BCMpcINSRkHW0W/Wc5xpGe0sYBGp3Rooisi6JK3yZ41C4CJ9lhQa+p2vQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl6rqZPvgoC8ATqFVEmfI90DaPQMB8GA1UdIwQY MBaAFKQYcPwYVKOwk5OMCc9gZRupk//GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYt NzljOGEyNDcyYTBjLzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYtNzljOGEyNDcyYTBj LzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwL+bV2i lIHJd+PRhGUJzXv364y8536/wylWINaGdHQg9q7KfPtb6hsQOLthfmQX6dTLaFYe HM2Ny0zUHtiICaEkPi8/7GDXozQV0nDViwhzYq8KNIQEdLQSN09R3OT/5EE86dWb EfO8KzKuOhzyCAmOSTWFeMrvLZJNXIAR2viNACloC6tzt/Q2GgJjirS8M51ZoFji oRh6QGTDm/EQYIxUx3k7uz3Xe/k5OOpMuBMFcGsja+0HlwwiO3gJbHQaCfCZXjN6 +STmoWpK2lDlWaEmji08PQwVBxjyYUc9Fv10z5pJ7/GtnBYxt7NfCSeTratlA6xL 0tx1puvW5v71Bg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:13:29 2025 by rpki-client