This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json) Hash identifier: 85qb/swrwRjCXtstseGiFxG0IYSo5sOfXak1X/d9+PY= Subject key identifier: D6:46:25:34:EB:07:54:41:16:5F:74:E7:31:A4:D3:46:C4:88:7E:0C Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c Certificate serial: 019AF389000FBE8741E0F07747147EDDC8DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:00:33 +0000 Manifest this update: Sat 06 Dec 2025 12:00:33 +0000 Manifest next update: Sun 07 Dec 2025 12:00:33 +0000 Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: EFo+7QHVppuQcQ9DwpTpdxhLVTEVdexhpTCmupt5p24=) 2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:00:0f:be:87:41:e0:f0:77:47:14:7e:dd:c8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c Validity Not Before: Dec 6 12:00:33 2025 GMT Not After : Dec 7 12:00:33 2025 GMT Subject: CN=d6462534eb075441165f74e731a4d346c4887e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:66:09:84:76:6d:44:5f:e1:0b:51:e7:32: 5c:35:cb:42:e0:00:c7:6a:9b:15:77:fd:10:6e:94: 6b:2b:80:3d:d7:f8:42:96:be:e8:26:74:12:dd:7f: 4e:cb:f3:79:a7:15:ea:f7:7a:8b:be:ef:19:a4:56: d2:61:ef:68:db:6a:45:b2:58:6f:8a:a9:3a:04:aa: 58:6e:c3:50:31:e2:56:a6:c1:ab:49:b2:84:94:55: 91:97:32:a3:d1:2b:c2:9d:23:e3:11:15:dd:3c:ea: 2b:df:48:a4:47:4a:65:ed:33:32:c8:d5:57:4a:4d: e5:32:9a:e7:1f:63:c6:9f:2b:cc:df:98:e0:0c:a2: a0:ea:33:c6:ac:3b:d1:7a:39:8c:75:9e:79:0a:12: 06:d4:87:8b:ea:7c:56:9d:d6:d9:a3:dc:85:5f:da: ad:8b:bc:5b:0d:0a:08:ed:2b:40:df:90:3d:47:48: 64:f0:91:03:0f:75:80:39:66:75:b0:de:05:f3:bd: 4d:c5:ab:66:76:cd:89:5a:c5:23:8e:cf:58:a9:e3: d0:73:74:f3:2a:e2:fb:91:25:19:1d:a9:de:6a:c3: 07:59:a2:6b:48:8d:d3:a0:2e:97:c9:91:21:00:56: c0:c3:62:9f:6a:e1:ea:49:1a:99:d5:1e:a2:a2:2a: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:25:34:EB:07:54:41:16:5F:74:E7:31:A4:D3:46:C4:88:7E:0C X509v3 Authority Key Identifier: keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:78:aa:82:72:7b:28:02:44:bc:53:dc:b8:f0:64:0e:61: 7a:35:7b:a3:7a:67:25:a0:e9:f9:9a:09:27:e3:38:34:17:7c: 0e:d4:61:a5:a6:9d:78:da:26:37:92:b7:aa:5c:ca:57:48:0a: ad:f4:3b:ab:03:3f:9d:d7:ad:c3:6c:20:89:7c:d7:d0:7f:80: 0a:4a:15:43:bf:98:f7:3d:8b:af:bf:71:0c:dd:69:26:3e:93: 11:fb:0b:53:b2:df:ee:57:b0:c3:29:20:4a:29:6f:95:2d:a6: 78:d2:39:8e:dd:7b:37:8b:25:6e:8b:9f:45:19:fd:fc:e6:61: 2f:c4:fd:b4:12:0b:9d:b0:88:10:64:59:a5:74:80:88:48:5a: 9d:ec:c5:7c:31:7a:1d:20:16:f4:48:21:19:bd:88:14:d9:9e: 95:35:58:e1:ea:2c:16:fd:22:71:ce:e5:80:b4:a8:29:a2:69: d4:c1:aa:cd:f8:6d:bb:dd:17:09:61:75:9b:73:16:e4:ca:ef: dc:de:8f:7f:1e:ac:66:05:4e:bc:e8:0e:8e:9e:64:18:f7:92: c8:1d:dd:12:c7:2f:34:95:50:26:86:e6:42:fa:1a:85:d3:61: e6:1a:cf:73:98:e8:35:a4:f8:88:d1:fe:6c:8b:94:09:e7:e8: 62:68:77:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQAPvodB4PB3RxR+3cjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy M2U2M2MwHhcNMjUxMjA2MTIwMDMzWhcNMjUxMjA3MTIwMDMzWjAzMTEwLwYDVQQD EyhkNjQ2MjUzNGViMDc1NDQxMTY1Zjc0ZTczMWE0ZDM0NmM0ODg3ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+BmCYR2bURf4QtR5zJcNctC4ADH apsVd/0QbpRrK4A91/hClr7oJnQS3X9Oy/N5pxXq93qLvu8ZpFbSYe9o22pFslhv iqk6BKpYbsNQMeJWpsGrSbKElFWRlzKj0SvCnSPjERXdPOor30ikR0pl7TMyyNVX Sk3lMprnH2PGnyvM35jgDKKg6jPGrDvRejmMdZ55ChIG1IeL6nxWndbZo9yFX9qt i7xbDQoI7StA35A9R0hk8JEDD3WAOWZ1sN4F871Nxatmds2JWsUjjs9YqePQc3Tz KuL7kSUZHaneasMHWaJrSI3ToC6XyZEhAFbAw2KfauHqSRqZ1R6ioipGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZGJTTrB1RBFl905zGk00bEiH4MMB8GA1UdIwQY MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt ZWZlNWJmYzc5OTk0LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0 LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdR4qoJy eygCRLxT3LjwZA5hejV7o3pnJaDp+ZoJJ+M4NBd8DtRhpaadeNomN5K3qlzKV0gK rfQ7qwM/ndetw2wgiXzX0H+ACkoVQ7+Y9z2Lr79xDN1pJj6TEfsLU7Lf7lewwykg SilvlS2meNI5jt17N4slboufRRn9/OZhL8T9tBILnbCIEGRZpXSAiEhanezFfDF6 HSAW9EghGb2IFNmelTVY4eosFv0icc7lgLSoKaJp1MGqzfhtu90XCWF1m3MW5Mrv 3N6Pfx6sZgVOvOgOjp5kGPeSyB3dEscvNJVQJobmQvoahdNh5hrPc5joNaT4iNH+ bIuUCefoYmh3ng== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:01 2025 by rpki-client