This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json) Hash identifier: /kCqqtm74D8B33HUh2yrR7n40Iqr8HK7k+Nw2fongOE= Subject key identifier: D8:ED:BB:1D:4C:3D:32:F1:8D:20:A6:81:4B:5F:52:C0:2A:D2:E7:D6 Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2 Certificate serial: 019B24AC93D8F410D79944943240FBB640FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 01:00:48 +0000 Manifest this update: Tue 16 Dec 2025 01:00:48 +0000 Manifest next update: Wed 17 Dec 2025 01:00:48 +0000 Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: F500hzJo4vDvIfgx8GVZ+g1NMsj2QNs8qEC/7CQXeuQ=) 2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=) 3: gNi743mJaJJJpWWUxpf7RubXOek.roa (hash: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:93:d8:f4:10:d7:99:44:94:32:40:fb:b6:40:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2 Validity Not Before: Dec 16 01:00:48 2025 GMT Not After : Dec 17 01:00:48 2025 GMT Subject: CN=d8edbb1d4c3d32f18d20a6814b5f52c02ad2e7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:29:c8:3d:48:d0:ae:b3:2a:66:a5:5d:7a: c6:7e:45:f5:b7:ec:1a:6d:7f:b4:1a:ac:b8:0f:49: ee:e9:a7:de:51:8b:b4:53:35:be:08:8d:56:88:e8: 74:e5:09:81:ae:22:df:bd:cf:8f:b7:a2:fd:e1:44: f6:39:9c:b7:60:64:00:28:1a:21:90:d3:6c:2e:bc: e8:7c:55:03:d1:93:85:d0:f8:7e:d6:31:d5:76:2f: 5c:7d:ef:d1:b5:5a:b8:db:61:c1:e8:0b:f8:2e:b1: a2:66:e7:a4:4d:63:36:3f:97:f6:9f:87:32:75:0e: aa:18:a9:8a:68:e8:02:d6:09:ea:0b:f3:fa:39:ea: f4:84:89:e8:ec:97:26:e7:01:4e:64:c8:55:b0:78: d8:82:a7:0a:1a:f5:d1:55:a1:31:03:51:57:fe:1f: a6:33:ca:6c:18:f1:5c:f5:82:61:cf:81:8b:a9:5e: bf:09:a9:a6:8a:bd:e3:35:b9:a3:66:30:e9:e3:ab: f6:0c:bd:55:0d:78:c6:44:28:01:a7:9b:23:ce:93: c8:e5:f0:8e:31:66:bd:3d:8b:5d:48:67:26:bc:50: 92:34:2a:80:6c:d8:d0:f1:9f:e8:98:d5:80:78:78: 40:b3:b5:f5:2c:73:84:77:2d:50:a9:73:90:9b:3d: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:BB:1D:4C:3D:32:F1:8D:20:A6:81:4B:5F:52:C0:2A:D2:E7:D6 X509v3 Authority Key Identifier: keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:21:0d:14:1d:a4:0c:0f:ac:a8:99:b8:0c:ee:be:b7:28: ca:aa:fe:0c:5e:a7:66:39:61:07:47:a9:c2:b6:94:09:78:a6: e7:5d:21:29:d2:f9:23:c6:fa:d3:87:34:22:65:63:1d:ff:b1: d9:7c:f7:65:fb:5e:c8:7a:0b:0a:0a:2a:b5:20:a1:34:22:be: e8:40:a4:1c:5b:df:fa:20:d7:e6:7c:05:5a:08:f2:43:71:e9: a2:25:23:66:24:37:fc:33:7a:d7:75:81:ea:25:2b:df:01:19: e7:ca:1c:df:16:26:81:97:bb:3d:18:4b:c3:64:53:41:31:a5: 6a:c8:10:5b:cd:a3:b4:9a:a9:52:b0:03:32:a9:35:e3:96:bb: 97:97:cc:4f:64:be:e0:86:30:15:80:aa:98:2c:d9:c7:4e:6a: a0:c6:2c:11:27:f7:20:99:e6:fe:83:2c:45:a2:0d:fc:5c:b2: c6:85:b0:ed:a4:3b:fe:6c:55:c1:28:a5:15:af:09:53:75:9f: 2c:87:0f:d4:e3:35:3d:ab:1b:1e:bd:ad:38:b0:3d:21:45:d5: 16:e1:1d:a7:06:22:99:b5:69:ec:4e:c0:49:05:ac:14:6c:04: 8b:89:bc:62:fa:28:2c:6b:5b:d2:e2:86:18:69:f0:f4:73:af: 99:0b:be:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrJPY9BDXmUSUMkD7tkD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky NTdkZjIwHhcNMjUxMjE2MDEwMDQ4WhcNMjUxMjE3MDEwMDQ4WjAzMTEwLwYDVQQD EyhkOGVkYmIxZDRjM2QzMmYxOGQyMGE2ODE0YjVmNTJjMDJhZDJlN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr8pyD1I0K6zKmalXXrGfkX1t+wa bX+0Gqy4D0nu6afeUYu0UzW+CI1WiOh05QmBriLfvc+Pt6L94UT2OZy3YGQAKBoh kNNsLrzofFUD0ZOF0Ph+1jHVdi9cfe/RtVq422HB6Av4LrGiZuekTWM2P5f2n4cy dQ6qGKmKaOgC1gnqC/P6Oer0hIno7Jcm5wFOZMhVsHjYgqcKGvXRVaExA1FX/h+m M8psGPFc9YJhz4GLqV6/Cammir3jNbmjZjDp46v2DL1VDXjGRCgBp5sjzpPI5fCO MWa9PYtdSGcmvFCSNCqAbNjQ8Z/omNWAeHhAs7X1LHOEdy1QqXOQmz1P5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjtux1MPTLxjSCmgUtfUsAq0ufWMB8GA1UdIwQY MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSIhDRQd pAwPrKiZuAzuvrcoyqr+DF6nZjlhB0epwraUCXim510hKdL5I8b604c0ImVjHf+x 2Xz3ZfteyHoLCgoqtSChNCK+6ECkHFvf+iDX5nwFWgjyQ3HpoiUjZiQ3/DN613WB 6iUr3wEZ58oc3xYmgZe7PRhLw2RTQTGlasgQW82jtJqpUrADMqk145a7l5fMT2S+ 4IYwFYCqmCzZx05qoMYsESf3IJnm/oMsRaIN/FyyxoWw7aQ7/mxVwSilFa8JU3Wf LIcP1OM1PasbHr2tOLA9IUXVFuEdpwYimbVp7E7ASQWsFGwEi4m8YvooLGtb0uKG GGnw9HOvmQu+Ew== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:07 2025 by rpki-client