This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json) Hash identifier: 2TkVcPm33acYhTMAakVzYlrIr7txYaffeQJoDo9zNtw= Subject key identifier: 71:33:2D:B0:FC:62:99:FE:93:38:05:BC:78:3D:A5:DF:85:34:B8:E8 Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Certificate serial: 019B5CE4F2217616A80DC6322A22F2DE9BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 23:01:06 +0000 Manifest this update: Fri 26 Dec 2025 23:01:06 +0000 Manifest next update: Sat 27 Dec 2025 23:01:06 +0000 Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: w40/9gqDXqoqTsujIerfSN03Ttd18ic+iaEeAqKMLjM=) 2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:f2:21:76:16:a8:0d:c6:32:2a:22:f2:de:9b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Validity Not Before: Dec 26 23:01:06 2025 GMT Not After : Dec 27 23:01:06 2025 GMT Subject: CN=71332db0fc6299fe933805bc783da5df8534b8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:29:f6:e4:7c:59:e2:82:c0:0f:2c:1e:e0: 81:56:7c:f8:9b:38:d9:cf:d9:5a:e1:25:6b:b3:a7: c2:78:af:77:26:59:a7:0e:74:85:8d:09:55:29:6d: ae:c8:dd:08:3a:1f:df:a7:ed:48:1e:9b:64:8a:ca: f8:4a:47:8f:99:0e:b6:c4:90:e4:47:a9:94:77:29: f2:31:a0:d2:b2:9c:36:f4:f7:52:fc:cc:03:f8:61: 02:71:89:d5:f4:95:60:49:32:9b:34:96:53:7c:62: 9e:52:21:fb:a1:44:a0:98:25:09:a6:38:6f:3d:0b: 14:b8:2d:d2:43:71:84:bf:03:67:9c:37:a6:07:5a: 8f:ad:05:a0:8d:b2:c4:ca:67:19:3d:53:d4:98:a6: 40:1b:e0:a8:60:df:72:68:94:02:a2:42:68:de:6f: 41:07:6d:ef:89:aa:10:05:20:af:8a:10:38:81:ec: ac:97:6e:46:84:34:c1:f2:d3:b7:de:ee:2f:2e:58: 34:c2:c0:d1:a4:f2:8b:cd:e7:e7:c9:52:a2:e0:70: bb:47:f1:af:e5:64:32:e4:50:03:76:23:af:53:99: eb:c7:96:53:c6:f0:7e:e5:c7:bb:4c:8e:5b:b7:7e: 3b:77:15:ea:7d:22:2f:50:1b:8b:7d:4c:fc:e6:77: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:2D:B0:FC:62:99:FE:93:38:05:BC:78:3D:A5:DF:85:34:B8:E8 X509v3 Authority Key Identifier: keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:40:4f:bf:bc:7f:05:13:a1:f0:96:da:38:05:a2:5a:53:ac: 4f:a2:75:5d:d4:ef:b0:71:a2:75:ac:59:33:58:82:59:72:d7: d2:b0:d7:2c:4d:c6:db:ae:bc:f9:58:12:0b:25:8e:7a:90:95: 0b:79:da:90:7c:cb:c8:9c:1c:d4:4d:af:16:33:c3:67:f3:26: ef:b8:de:3f:6e:48:9e:41:2c:4d:98:d2:bd:7c:01:ec:16:9e: 03:15:19:bc:35:1e:f5:12:75:52:ab:16:67:97:e2:f7:cb:ff: f7:48:f8:f4:22:c0:75:42:42:58:04:75:1b:3f:ea:7b:b3:df: 1c:3c:a9:f4:fa:11:73:fa:0f:85:fc:ca:be:61:0e:36:41:18: 7b:0f:05:2e:d3:ef:27:99:f1:77:ac:a5:29:cc:22:77:b3:23: 9c:74:46:f9:f5:52:c5:3b:5e:88:75:7e:60:d7:be:10:2f:0f: a3:7e:3d:69:15:bd:a4:0f:ed:25:44:d3:5d:2f:f9:8f:15:63: d6:a7:5a:6e:0b:83:b2:39:7a:0c:86:70:ec:93:f7:37:cb:28: d6:3b:9f:f0:be:f6:97:41:24:b0:d1:ea:3f:d5:d6:c9:6c:99: b1:13:3d:42:eb:f7:8c:c8:8a:e7:16:7f:6b:34:76:6a:da:2c: 14:76:60:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5PIhdhaoDcYyKiLy3pv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl MTUzMGQwHhcNMjUxMjI2MjMwMTA2WhcNMjUxMjI3MjMwMTA2WjAzMTEwLwYDVQQD Eyg3MTMzMmRiMGZjNjI5OWZlOTMzODA1YmM3ODNkYTVkZjg1MzRiOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFgp9uR8WeKCwA8sHuCBVnz4mzjZ z9la4SVrs6fCeK93JlmnDnSFjQlVKW2uyN0IOh/fp+1IHptkisr4SkePmQ62xJDk R6mUdynyMaDSspw29PdS/MwD+GECcYnV9JVgSTKbNJZTfGKeUiH7oUSgmCUJpjhv PQsUuC3SQ3GEvwNnnDemB1qPrQWgjbLEymcZPVPUmKZAG+CoYN9yaJQCokJo3m9B B23viaoQBSCvihA4geysl25GhDTB8tO33u4vLlg0wsDRpPKLzefnyVKi4HC7R/Gv 5WQy5FADdiOvU5nrx5ZTxvB+5ce7TI5bt347dxXqfSIvUBuLfUz85ncxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEzLbD8Ypn+kzgFvHg9pd+FNLjoMB8GA1UdIwQY MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0 LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0BPv7x/ BROh8JbaOAWiWlOsT6J1XdTvsHGidaxZM1iCWXLX0rDXLE3G2668+VgSCyWOepCV C3nakHzLyJwc1E2vFjPDZ/Mm77jeP25InkEsTZjSvXwB7BaeAxUZvDUe9RJ1UqsW Z5fi98v/90j49CLAdUJCWAR1Gz/qe7PfHDyp9PoRc/oPhfzKvmEONkEYew8FLtPv J5nxd6ylKcwid7MjnHRG+fVSxTteiHV+YNe+EC8Po349aRW9pA/tJUTTXS/5jxVj 1qdabguDsjl6DIZw7JP3N8so1juf8L72l0EksNHqP9XWyWyZsRM9Quv3jMiK5xZ/ azR2atosFHZgWg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:40:02 2025 by rpki-client