This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json) Hash identifier: p7wRltbkoj8DXYnJBYIcNiCR22Hurxn5LJ4O2t6S9gc= Subject key identifier: 1C:CA:4B:05:EB:C5:43:8B:EB:FB:02:DE:FD:D8:A0:05:E0:A4:02:A7 Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65 Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665 Certificate serial: 019B51F30EA09675E77B3C3A330C8F1731D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 20:00:42 +0000 Manifest this update: Wed 24 Dec 2025 20:00:42 +0000 Manifest next update: Thu 25 Dec 2025 20:00:42 +0000 Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: 1f/FQqBs/m5s+FnO2TWZoN7vMKhZpeelhjPU1vW3q5g=) 2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:0e:a0:96:75:e7:7b:3c:3a:33:0c:8f:17:31:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665 Validity Not Before: Dec 24 20:00:42 2025 GMT Not After : Dec 25 20:00:42 2025 GMT Subject: CN=1cca4b05ebc5438bebfb02defdd8a005e0a402a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:5c:dd:20:90:85:d5:04:94:94:f0:ac:1d: 82:08:41:f1:83:e7:89:1b:6d:48:8e:a9:68:75:b6: cc:cf:c5:c6:ce:00:e2:d8:70:2a:98:31:cd:d2:d3: 23:d9:6b:f9:24:20:17:3f:52:57:a4:5c:f3:b4:f5: 39:e3:e4:b0:32:8b:a8:ab:3a:22:15:fd:20:f7:71: 21:32:40:8f:55:ce:49:f1:ed:c6:cf:8f:c4:7a:4d: 16:61:b9:9e:4e:2a:f8:5e:8a:aa:7f:d6:aa:28:96: 32:64:6e:fb:cc:e3:29:ce:a1:8c:b9:73:d9:34:96: c4:97:a7:47:c8:bb:9b:65:2f:55:3f:c6:9b:06:e8: 1a:b1:61:0b:cc:5c:76:39:fd:58:fb:bf:8d:be:23: d1:83:86:ec:97:6c:bc:37:a4:52:48:a1:7d:ac:68: db:d8:51:6f:34:a7:bf:85:44:ff:3f:43:38:21:f3: 55:cc:11:7d:df:d3:35:56:45:d9:e4:ba:3b:9a:a6: 5c:c9:b7:bd:38:56:4b:05:9e:a1:e4:56:dc:7f:e4: da:b7:6a:f3:37:5d:a8:18:1e:3d:65:a0:63:e6:a1: 80:2d:f7:83:1e:28:31:a2:70:40:46:22:a5:1f:80: 11:54:68:77:1a:40:ac:cd:90:eb:0f:76:8a:2b:c6: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:4B:05:EB:C5:43:8B:EB:FB:02:DE:FD:D8:A0:05:E0:A4:02:A7 X509v3 Authority Key Identifier: keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:65:7a:13:d9:80:c7:a3:02:d8:9b:34:29:c3:3d:19:f0:fc: be:82:bf:41:04:ce:3f:04:b0:34:09:1f:d5:5e:be:ae:2c:b7: 65:91:80:17:09:76:74:37:1f:0a:10:f5:34:50:8f:29:0a:2f: e3:5f:b1:c8:72:84:79:1a:e2:17:b7:05:f8:84:27:e9:9d:e1: 1e:51:b3:33:52:b6:11:fa:c2:44:68:f0:f5:24:97:a7:ff:f0: a3:7f:25:2e:af:a7:c2:9f:45:85:9a:ba:da:33:54:02:c6:9b: 47:e2:ef:9f:e7:20:c2:91:94:be:c7:96:ac:89:ec:6b:b1:ae: fc:55:2b:98:b8:4d:10:b4:bc:11:06:1c:4f:3f:9b:d9:6c:d5: 92:76:aa:0f:fb:5e:b8:20:1d:74:30:5d:7a:28:49:f0:de:1e: 7e:d4:8a:e5:6e:d7:e5:42:ab:ed:bc:89:5a:2d:03:5c:44:2f: ba:01:4a:b3:fb:b7:c3:14:5c:c3:78:74:5d:8d:e0:f7:b3:5e: 47:2d:19:3b:fd:ea:c6:8c:62:17:24:82:e2:62:e4:d6:0d:03: a8:fd:df:a3:2f:b2:6e:a5:e0:05:55:87:96:22:89:cc:5e:92: f3:1f:47:68:07:61:13:82:9c:20:7c:44:6a:55:79:7f:80:27: 59:c7:03:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8w6glnXnezw6MwyPFzHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl YjE2NjUwHhcNMjUxMjI0MjAwMDQyWhcNMjUxMjI1MjAwMDQyWjAzMTEwLwYDVQQD EygxY2NhNGIwNWViYzU0MzhiZWJmYjAyZGVmZGQ4YTAwNWUwYTQwMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZdc3SCQhdUElJTwrB2CCEHxg+eJ G21IjqlodbbMz8XGzgDi2HAqmDHN0tMj2Wv5JCAXP1JXpFzztPU54+SwMouoqzoi Ff0g93EhMkCPVc5J8e3Gz4/Eek0WYbmeTir4Xoqqf9aqKJYyZG77zOMpzqGMuXPZ NJbEl6dHyLubZS9VP8abBugasWELzFx2Of1Y+7+NviPRg4bsl2y8N6RSSKF9rGjb 2FFvNKe/hUT/P0M4IfNVzBF939M1VkXZ5Lo7mqZcybe9OFZLBZ6h5Fbcf+Tat2rz N12oGB49ZaBj5qGALfeDHigxonBARiKlH4ARVGh3GkCszZDrD3aKK8ZgRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzKSwXrxUOL6/sC3v3YoAXgpAKnMB8GA1UdIwQY MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWV6E9mA x6MC2Js0KcM9GfD8voK/QQTOPwSwNAkf1V6+riy3ZZGAFwl2dDcfChD1NFCPKQov 41+xyHKEeRriF7cF+IQn6Z3hHlGzM1K2EfrCRGjw9SSXp//wo38lLq+nwp9FhZq6 2jNUAsabR+Lvn+cgwpGUvseWrInsa7Gu/FUrmLhNELS8EQYcTz+b2WzVknaqD/te uCAddDBdeihJ8N4eftSK5W7X5UKr7byJWi0DXEQvugFKs/u3wxRcw3h0XY3g97Ne Ry0ZO/3qxoxiFySC4mLk1g0DqP3foy+ybqXgBVWHliKJzF6S8x9HaAdhE4KcIHxE alV5f4AnWccDjA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:24 2025 by rpki-client