This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json) Hash identifier: OUOdLpZwPvjkHuBKEJ4uldC2biVXGjyxu7qQ1/KeVYE= Subject key identifier: BB:5E:F5:5E:99:9D:F4:00:5C:A4:18:79:C5:96:5F:F3:D4:38:B7:4E Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643 Certificate serial: 019AF3895E85C5DF4AF688175696AE571006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: EW+zGFgMeQC9UbBVQ3W7F2z/NF2FtW9PUOP3H0NtShw=) 2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5e:85:c5:df:4a:f6:88:17:56:96:ae:57:10:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=bb5ef55e999df4005ca41879c5965ff3d438b74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:af:79:d4:a0:6b:8f:be:6b:b4:e4:91:e0: 21:70:6a:8b:9f:5e:c1:d9:cf:33:d0:1e:f0:c5:c7: f0:39:03:bf:ff:a4:03:45:75:82:b7:fb:51:4b:49: c1:38:13:ba:62:e2:37:ef:5f:ca:66:ba:be:1e:f5: c2:5f:79:5b:b8:63:a6:0b:e8:0e:2c:44:47:fc:79: d3:aa:d4:1d:fd:20:4a:c6:16:d8:dd:12:c4:10:29: a9:b5:65:36:5d:a6:50:34:07:95:a6:d3:f7:46:65: c3:df:b6:76:57:b0:90:76:12:e6:cd:9d:47:89:11: 24:13:80:ec:71:d6:a4:05:e5:87:6b:b0:c9:cc:96: 43:ba:44:80:08:70:d7:40:92:de:6a:fc:66:7b:f6: 57:1e:16:2b:0a:29:1e:b7:9a:57:e9:ef:64:d2:5d: 6d:53:61:fb:86:c6:51:da:c4:1a:ff:b2:9e:89:8d: ff:50:cb:d5:d5:e1:d6:57:af:e7:06:4c:b4:05:eb: db:02:c0:34:8b:79:4b:dc:7b:6b:5a:85:56:9d:b3: 4e:da:06:d3:12:15:da:bc:ab:70:06:51:75:11:57: 5d:8b:ec:df:f6:a7:74:61:9a:76:e7:c9:78:0b:a2: 5d:81:c1:e8:a0:f2:d9:1a:bd:34:8d:a0:d3:c7:4d: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5E:F5:5E:99:9D:F4:00:5C:A4:18:79:C5:96:5F:F3:D4:38:B7:4E X509v3 Authority Key Identifier: keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:13:05:11:8c:52:a3:3b:34:c6:fe:be:80:54:18:df:02: ba:1b:15:15:d8:fc:d2:75:d2:b1:d0:16:bb:a4:4c:73:d7:17: c2:ba:41:0f:61:9f:0d:63:d1:9f:b8:54:dc:b2:10:37:b3:10: cf:3f:46:cc:f0:08:87:37:88:1c:5f:d0:b0:4e:bb:c8:0c:93: c0:d6:2c:78:0f:83:1d:4f:c6:02:28:c4:de:3b:61:d8:48:01: b8:5d:bd:1a:92:48:8b:27:72:b5:cd:62:10:46:a5:5d:08:f7: 27:83:da:34:3e:1e:ed:5c:4e:d1:81:cf:23:ec:50:c4:da:e6: 35:dd:0f:bd:5c:40:6d:15:9e:de:85:1e:0d:94:39:fa:60:55: 5c:57:2f:7e:b4:b7:09:7a:da:03:db:42:30:3b:54:74:25:61: fc:29:70:51:62:4c:08:25:de:a8:4c:20:68:66:54:41:bc:2b: 18:45:97:e9:14:ac:a4:7e:3a:51:64:3a:63:8c:33:51:0d:fe: 10:02:9c:d5:7a:32:ad:b3:f4:7e:ab:66:54:3f:e5:d5:09:21: 14:22:02:3d:2e:b7:67:cd:5c:ed:1b:b4:28:46:50:69:40:8a: e4:53:cb:04:97:e1:9b:08:35:a5:b4:a8:66:8a:8f:55:62:52: e7:ea:01:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV6Fxd9K9ogXVpauVxAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj NTg2NDMwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EyhiYjVlZjU1ZTk5OWRmNDAwNWNhNDE4NzljNTk2NWZmM2Q0MzhiNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzivedSga4++a7TkkeAhcGqLn17B 2c8z0B7wxcfwOQO//6QDRXWCt/tRS0nBOBO6YuI371/KZrq+HvXCX3lbuGOmC+gO LERH/HnTqtQd/SBKxhbY3RLEECmptWU2XaZQNAeVptP3RmXD37Z2V7CQdhLmzZ1H iREkE4DscdakBeWHa7DJzJZDukSACHDXQJLeavxme/ZXHhYrCiket5pX6e9k0l1t U2H7hsZR2sQa/7KeiY3/UMvV1eHWV6/nBky0BevbAsA0i3lL3HtrWoVWnbNO2gbT EhXavKtwBlF1EVddi+zf9qd0YZp258l4C6JdgcHooPLZGr00jaDTx03vIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLte9V6ZnfQAXKQYecWWX/PUOLdOMB8GA1UdIwQY MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt OTdiMjE1N2NiYWQxLzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPwTBRGM UqM7NMb+voBUGN8CuhsVFdj80nXSsdAWu6RMc9cXwrpBD2GfDWPRn7hU3LIQN7MQ zz9GzPAIhzeIHF/QsE67yAyTwNYseA+DHU/GAijE3jth2EgBuF29GpJIiydytc1i EEalXQj3J4PaND4e7VxO0YHPI+xQxNrmNd0PvVxAbRWe3oUeDZQ5+mBVXFcvfrS3 CXraA9tCMDtUdCVh/ClwUWJMCCXeqEwgaGZUQbwrGEWX6RSspH46UWQ6Y4wzUQ3+ EAKc1XoyrbP0fqtmVD/l1QkhFCICPS63Z81c7Ru0KEZQaUCK5FPLBJfhmwg1pbSo ZoqPVWJS5+oBBA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:14 2025 by rpki-client