This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json) Hash identifier: 1CsNcJVNMHqKaPWw8gRaZlcJiCi5sqZjT5IOVcZfhRY= Subject key identifier: EA:E3:F9:22:E1:3D:70:18:62:79:97:34:CF:DC:A9:4E:8C:B9:88:DB Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2 Certificate serial: 019AF2768E2A36F764C2EB012F7722760687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: tGE7QM+Qcs/gGu8BwVJYzCWClLW/0K8FAIPPPGwNoEY=) 2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=) 3: gNi743mJaJJJpWWUxpf7RubXOek.roa (hash: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8e:2a:36:f7:64:c2:eb:01:2f:77:22:76:06:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=eae3f922e13d701862799734cfdca94e8cb988db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:39:5e:9f:36:71:e0:40:26:34:29:18:c8: de:b9:c1:83:11:01:92:c0:60:0f:29:67:a8:e8:ed: 81:16:ee:5f:09:d0:c9:cb:32:de:2d:b6:6b:c3:a2: c7:5d:43:25:df:ad:aa:3a:c0:14:c5:ec:8a:22:66: a8:fa:a9:59:78:c5:5a:51:94:23:81:a7:fd:bd:c9: 79:f7:14:13:91:97:e4:41:9e:e9:2c:99:e2:81:4f: 76:05:af:6e:86:06:49:f9:08:b9:8c:01:99:1f:ed: 31:18:be:43:00:b3:bd:9b:7b:5b:4a:b7:cb:37:29: a7:09:e4:23:29:dc:4b:48:99:6e:c1:21:2f:0a:9f: 55:69:65:3d:6d:14:46:db:2e:68:dd:c6:b0:4c:35: 69:d1:bd:65:02:f1:1f:73:b0:44:60:45:4a:e2:94: e9:be:17:ee:a3:11:d8:70:48:7a:ab:d2:2d:dd:c8: fb:84:95:ad:4b:f3:81:f4:67:40:63:ea:14:89:ee: 35:44:07:27:dd:19:43:58:76:b7:02:35:1c:35:7b: af:c0:06:49:98:b9:9c:4e:95:e6:17:1b:f4:07:56: 88:15:0a:88:76:5f:fa:cd:2c:39:06:a3:86:9a:e4: 71:4f:52:c4:ae:56:71:bb:1b:05:5e:8a:6f:43:fc: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E3:F9:22:E1:3D:70:18:62:79:97:34:CF:DC:A9:4E:8C:B9:88:DB X509v3 Authority Key Identifier: keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:49:ed:fb:e2:19:71:7d:d0:5e:4a:89:bf:25:5e:fe:fc:ee: 68:69:f8:c8:be:4b:d8:d9:a8:79:f3:8b:a7:1a:4c:47:ed:84: 6b:fa:11:5d:65:c5:27:62:f2:75:61:ee:84:a6:09:e1:f9:6b: 88:28:e2:d4:72:89:21:85:ff:e0:8b:94:34:30:28:93:0b:e3: 4a:89:c1:7b:50:4f:06:e0:ac:05:aa:8d:7b:21:56:24:c8:05: 4c:f9:29:0e:a1:b7:f1:e8:f4:46:9e:b7:f4:41:08:07:6c:7f: aa:b4:d7:c9:df:f7:7a:80:8f:a4:da:b3:43:43:36:46:22:08: bf:fb:5b:64:ed:dc:48:2e:01:d6:48:4a:c3:52:22:86:65:16: 29:d2:ee:9f:25:72:f1:1a:4c:50:1b:5e:6d:73:64:99:f6:3b: c2:ef:15:35:7e:20:20:a8:b7:20:ec:82:8e:9f:7b:6d:2c:80: a0:95:27:62:e7:94:6e:dd:ab:73:fb:95:88:a5:45:72:95:c8: 65:82:79:6c:ec:8c:e4:2b:f4:4a:08:7a:3f:d7:1b:21:8e:8c: 41:2d:11:88:b2:24:16:8b:e8:be:26:0f:7d:5a:55:25:5b:23: 6e:cc:1a:12:3e:94:f9:43:94:4e:0e:fd:52:05:9c:50:61:05: 11:e4:b5:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo4qNvdkwusBL3cidgaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky NTdkZjIwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EyhlYWUzZjkyMmUxM2Q3MDE4NjI3OTk3MzRjZmRjYTk0ZThjYjk4OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPI5Xp82ceBAJjQpGMjeucGDEQGS wGAPKWeo6O2BFu5fCdDJyzLeLbZrw6LHXUMl362qOsAUxeyKImao+qlZeMVaUZQj gaf9vcl59xQTkZfkQZ7pLJnigU92Ba9uhgZJ+Qi5jAGZH+0xGL5DALO9m3tbSrfL NymnCeQjKdxLSJluwSEvCp9VaWU9bRRG2y5o3cawTDVp0b1lAvEfc7BEYEVK4pTp vhfuoxHYcEh6q9It3cj7hJWtS/OB9GdAY+oUie41RAcn3RlDWHa3AjUcNXuvwAZJ mLmcTpXmFxv0B1aIFQqIdl/6zSw5BqOGmuRxT1LErlZxuxsFXopvQ/wBUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrj+SLhPXAYYnmXNM/cqU6MuYjbMB8GA1UdIwQY MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0nt++IZ cX3QXkqJvyVe/vzuaGn4yL5L2NmoefOLpxpMR+2Ea/oRXWXFJ2LydWHuhKYJ4flr iCji1HKJIYX/4IuUNDAokwvjSonBe1BPBuCsBaqNeyFWJMgFTPkpDqG38ej0Rp63 9EEIB2x/qrTXyd/3eoCPpNqzQ0M2RiIIv/tbZO3cSC4B1khKw1IihmUWKdLunyVy 8RpMUBtebXNkmfY7wu8VNX4gIKi3IOyCjp97bSyAoJUnYueUbt2rc/uViKVFcpXI ZYJ5bOyM5Cv0Sgh6P9cbIY6MQS0RiLIkFovoviYPfVpVJVsjbswaEj6U+UOUTg79 UgWcUGEFEeS11w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:06 2025 by rpki-client