This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json) Hash identifier: Meh1AzmP5Ox129v5BLlaM7wTB0Gc4G53B7t+V8lV6HI= Subject key identifier: DA:7B:31:73:4E:65:8F:B2:02:59:91:10:83:D3:BC:6E:7A:09:86:83 Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Certificate serial: 019B533C8B76C584D35969D027BE2721BE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft Manifest number: 1732 Signing time: Thu 25 Dec 2025 02:00:35 +0000 Manifest this update: Thu 25 Dec 2025 02:00:35 +0000 Manifest next update: Fri 26 Dec 2025 02:00:35 +0000 Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: UAf1LS8YzcA8o2qnc6IEKKu4VcNZZsKCgzWsu07/5fs=) 2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:8b:76:c5:84:d3:59:69:d0:27:be:27:21:be:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Validity Not Before: Dec 25 02:00:35 2025 GMT Not After : Dec 26 02:00:35 2025 GMT Subject: CN=da7b31734e658fb20259911083d3bc6e7a098683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:d2:30:41:79:e2:84:c1:5f:d0:b4:08:fd: f7:33:39:ef:12:f7:c3:30:85:06:c9:b0:0e:59:3c: 20:c5:91:fe:34:00:6d:4a:62:00:51:6e:4d:5f:33: f8:64:80:3b:bb:41:8c:08:73:eb:c1:09:21:ee:46: c2:b2:e0:75:85:b3:6e:65:96:17:2d:99:0b:b8:32: 24:3f:da:4c:08:24:cf:d3:43:2d:64:90:ec:ab:05: 66:79:57:06:bf:b1:f8:2f:2d:98:e5:d1:a3:9d:59: 59:a0:50:20:3f:c7:fa:13:d5:95:e8:ef:71:44:3a: 6b:9a:7a:b6:dc:e4:5a:f6:86:33:e2:c2:15:2e:45: ca:14:84:33:26:52:f7:c5:a1:d7:c2:04:54:81:68: 0b:07:1c:e3:76:bc:5d:a5:56:54:2e:cd:cd:48:c5: 12:16:5b:bf:da:18:78:a9:58:7a:4f:a4:38:f3:c1: 83:c8:bb:69:d9:9b:9c:44:ee:64:3e:a6:17:91:32: 42:61:90:97:a9:ff:de:67:cd:95:f3:3e:e1:22:61: 25:52:cd:82:86:63:36:2c:b9:ab:b0:7b:39:8a:96: 2e:4a:dc:10:f2:bc:d1:76:59:18:be:38:72:7c:dc: 07:f3:2c:66:a2:f0:0f:fa:8c:eb:c9:2d:c7:7e:76: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:31:73:4E:65:8F:B2:02:59:91:10:83:D3:BC:6E:7A:09:86:83 X509v3 Authority Key Identifier: keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:04:8a:9d:9a:40:a3:1d:47:36:36:a6:91:68:c9:18:b7:b9: a6:d6:ad:29:16:43:86:4d:1f:68:b7:c9:81:0f:92:ea:9d:ba: 6a:f2:94:cf:4c:b7:c9:7d:e2:8f:62:a2:46:12:08:0a:72:cf: 65:76:f7:b8:1b:a3:2e:2b:56:16:64:6b:42:7c:2f:02:7b:47: 1a:47:8c:f6:fb:45:05:ae:20:75:0a:d8:fa:6b:85:17:5e:61: e3:3f:e0:17:55:af:78:7f:5d:b3:40:2a:2a:78:97:29:e9:fa: 4f:e0:a8:71:54:84:ce:5f:fe:c1:e7:10:53:c5:2e:23:5f:88: 98:c9:28:0b:20:aa:6f:f5:b4:1b:af:6e:9d:2c:bf:5c:05:15: 69:f2:77:1d:74:f7:8c:81:9a:e9:fe:38:8f:f9:4d:fe:c0:44: 98:eb:9d:6b:6a:83:69:fc:12:16:a0:5a:39:1d:02:83:3c:0a: e5:cd:d5:76:5c:84:44:03:fe:b3:2c:09:27:7a:fe:31:4d:66: fc:f4:be:a8:9c:f8:d0:a2:09:ed:0e:b3:84:41:3e:72:9a:e5: 0d:cb:62:0f:82:8c:41:c6:13:3a:c6:33:c6:b6:82:7a:12:8f: fb:ba:25:40:da:45:93:a5:95:f6:86:23:24:4c:b3:98:cc:4e: 66:b2:b6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPIt2xYTTWWnQJ74nIb41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTQ3NGNlY2RmNWY1MDNhZGFiNjBmYzU1ZWU3Zjc4YTBk YmE5ZjIwHhcNMjUxMjI1MDIwMDM1WhcNMjUxMjI2MDIwMDM1WjAzMTEwLwYDVQQD EyhkYTdiMzE3MzRlNjU4ZmIyMDI1OTkxMTA4M2QzYmM2ZTdhMDk4NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FfSMEF54oTBX9C0CP33MznvEvfD MIUGybAOWTwgxZH+NABtSmIAUW5NXzP4ZIA7u0GMCHPrwQkh7kbCsuB1hbNuZZYX LZkLuDIkP9pMCCTP00MtZJDsqwVmeVcGv7H4Ly2Y5dGjnVlZoFAgP8f6E9WV6O9x RDprmnq23ORa9oYz4sIVLkXKFIQzJlL3xaHXwgRUgWgLBxzjdrxdpVZULs3NSMUS Flu/2hh4qVh6T6Q488GDyLtp2ZucRO5kPqYXkTJCYZCXqf/eZ82V8z7hImElUs2C hmM2LLmrsHs5ipYuStwQ8rzRdlkYvjhyfNwH8yxmovAP+ozryS3HfnYqHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp7MXNOZY+yAlmREIPTvG56CYaDMB8GA1UdIwQY MBaAFAYUdM7N9fUDratg/FXuf3ig26nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUt NTI2ZTdmNmQ3ZjViLzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUtNTI2ZTdmNmQ3ZjVi LzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwSKnZpA ox1HNjamkWjJGLe5ptatKRZDhk0faLfJgQ+S6p26avKUz0y3yX3ij2KiRhIICnLP ZXb3uBujLitWFmRrQnwvAntHGkeM9vtFBa4gdQrY+muFF15h4z/gF1WveH9ds0Aq KniXKen6T+CocVSEzl/+wecQU8UuI1+ImMkoCyCqb/W0G69unSy/XAUVafJ3HXT3 jIGa6f44j/lN/sBEmOuda2qDafwSFqBaOR0CgzwK5c3VdlyERAP+sywJJ3r+MU1m /PS+qJz40KIJ7Q6zhEE+cprlDctiD4KMQcYTOsYzxraCehKP+7olQNpFk6WV9oYj JEyzmMxOZrK23Q== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:25 2025 by rpki-client