This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json) Hash identifier: 09Lpxi6s3VnEXBX7FMnuX0ArYhKg0iSpef6T4+axQKM= Subject key identifier: 99:5B:9E:6B:66:E3:92:57:18:77:29:46:60:03:D6:A5:FE:85:44:F0 Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Certificate serial: 019B514E7021A8D9C173D119CE7389D79957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft Manifest number: 1731 Signing time: Wed 24 Dec 2025 17:00:53 +0000 Manifest this update: Wed 24 Dec 2025 17:00:53 +0000 Manifest next update: Thu 25 Dec 2025 17:00:53 +0000 Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: WVnjIXGhIVddVjImnl40HHI+YMqvBQwr+iK8TJHSxM8=) 2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:70:21:a8:d9:c1:73:d1:19:ce:73:89:d7:99:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Validity Not Before: Dec 24 17:00:53 2025 GMT Not After : Dec 25 17:00:53 2025 GMT Subject: CN=995b9e6b66e39257187729466003d6a5fe8544f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:fe:86:3c:5a:8a:62:7f:27:19:14:22:15: d0:3a:ed:4a:20:d5:37:0b:3e:82:6c:35:60:b1:08: 2a:87:22:64:73:a4:42:e6:8d:65:ff:12:cf:10:7d: 2d:ad:a2:a2:8a:c2:96:41:ec:12:da:b0:ad:03:37: 0f:a2:29:a3:12:25:10:3e:69:b6:3d:25:71:0f:5d: 2e:f8:90:83:36:65:22:1f:18:b7:a5:68:e9:f4:4d: d2:cb:e1:e0:f0:e2:c5:d0:cc:57:e7:86:a0:d9:4d: 88:c3:46:63:1b:5d:49:c6:59:14:c5:f6:f2:89:d2: 24:3b:a1:f8:91:fb:5d:9d:80:e1:ff:3f:d6:1f:c0: 70:78:c9:f9:38:2b:28:12:8f:5b:67:53:b2:f1:44: f5:ff:52:3e:30:d2:42:86:7a:ef:de:d9:d0:10:9d: b5:a5:7f:48:1b:a6:0c:65:fb:ce:40:4f:ec:59:48: de:e6:4c:cf:6c:36:a1:6a:0c:43:71:e2:c2:61:a6: 81:40:25:ad:14:0b:86:e6:a3:ab:13:35:19:ad:7b: 65:8b:5e:bd:cd:15:98:e1:22:19:41:fa:c0:8d:8b: cc:34:96:ed:27:69:3c:a6:8c:eb:07:93:d0:b8:f1: ec:d2:15:7f:75:5c:dd:f4:d7:91:e3:bf:ef:56:1c: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:9E:6B:66:E3:92:57:18:77:29:46:60:03:D6:A5:FE:85:44:F0 X509v3 Authority Key Identifier: keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:0b:b7:81:18:6e:2a:c9:c7:59:de:e6:81:e7:54:95:af: 5d:0a:40:f4:3c:ca:96:b8:50:52:ec:45:6c:57:f5:f5:f8:0f: 10:e4:2c:f5:e7:bb:74:7a:3f:a7:1c:72:1b:2c:31:30:90:d1: c1:d4:e8:0e:78:d3:d3:7f:bb:83:63:9e:5e:74:08:26:20:1a: 59:26:9d:a4:53:46:ff:32:74:91:1e:9a:9c:3f:a3:8a:96:15: bf:3c:cf:61:b1:fa:c6:65:76:46:46:8a:c6:c0:44:1a:0f:68: f0:2a:ac:09:8b:e7:0d:44:90:37:d3:ec:f9:66:c5:d2:8c:ee: 91:53:07:8a:9a:f9:ee:85:75:cd:b7:eb:aa:31:c1:1a:7c:e9: 32:26:71:30:a4:0b:c5:67:f6:9e:e3:e0:63:72:bc:17:0b:55: 82:5d:37:64:3b:dc:f9:bc:61:6e:d0:5a:40:df:7e:02:1f:eb: 1b:87:9b:62:9a:3f:cc:d7:91:27:cd:50:d1:c5:9d:19:8e:f8: a7:fe:c6:7a:32:fa:e5:ac:b9:43:32:e5:d4:b9:77:40:5a:a3: e8:2c:af:3d:79:45:30:3c:0b:99:4f:34:6e:72:ed:6e:11:3e: 8a:71:ab:c9:49:78:a3:8f:e5:07:9f:1e:c2:55:2d:39:15:23: 03:9c:a5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTnAhqNnBc9EZznOJ15lXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTQ3NGNlY2RmNWY1MDNhZGFiNjBmYzU1ZWU3Zjc4YTBk YmE5ZjIwHhcNMjUxMjI0MTcwMDUzWhcNMjUxMjI1MTcwMDUzWjAzMTEwLwYDVQQD Eyg5OTViOWU2YjY2ZTM5MjU3MTg3NzI5NDY2MDAzZDZhNWZlODU0NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllj+hjxaimJ/JxkUIhXQOu1KINU3 Cz6CbDVgsQgqhyJkc6RC5o1l/xLPEH0traKiisKWQewS2rCtAzcPoimjEiUQPmm2 PSVxD10u+JCDNmUiHxi3pWjp9E3Sy+Hg8OLF0MxX54ag2U2Iw0ZjG11JxlkUxfby idIkO6H4kftdnYDh/z/WH8BweMn5OCsoEo9bZ1Oy8UT1/1I+MNJChnrv3tnQEJ21 pX9IG6YMZfvOQE/sWUje5kzPbDahagxDceLCYaaBQCWtFAuG5qOrEzUZrXtli169 zRWY4SIZQfrAjYvMNJbtJ2k8pozrB5PQuPHs0hV/dVzd9NeR47/vVhzUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlbnmtm45JXGHcpRmAD1qX+hUTwMB8GA1UdIwQY MBaAFAYUdM7N9fUDratg/FXuf3ig26nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUt NTI2ZTdmNmQ3ZjViLzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUtNTI2ZTdmNmQ3ZjVi LzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQULt4EY birJx1ne5oHnVJWvXQpA9DzKlrhQUuxFbFf19fgPEOQs9ee7dHo/pxxyGywxMJDR wdToDnjT03+7g2OeXnQIJiAaWSadpFNG/zJ0kR6anD+jipYVvzzPYbH6xmV2RkaK xsBEGg9o8CqsCYvnDUSQN9Ps+WbF0ozukVMHipr57oV1zbfrqjHBGnzpMiZxMKQL xWf2nuPgY3K8FwtVgl03ZDvc+bxhbtBaQN9+Ah/rG4ebYpo/zNeRJ81Q0cWdGY74 p/7GejL65ay5QzLl1Ll3QFqj6CyvPXlFMDwLmU80bnLtbhE+inGryUl4o4/lB58e wlUtORUjA5ylSQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:46:11 2025 by rpki-client