This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json) Hash identifier: SrFh7sWoeUOehWH+K4GqPoSTdSi4zYU54u4iHgukgRE= Subject key identifier: D3:2F:8A:02:B2:AB:A6:6F:86:60:79:8E:75:F8:FC:8B:14:36:CE:D1 Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392 Certificate serial: 019AF1D1AC4069DDDA59CB0CB7E49E3ABA2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: BXvczxaXn4BQkms4aplYwoyozlBOQJquwPSi5jz5nCo=) 2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=) 3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ac:40:69:dd:da:59:cb:0c:b7:e4:9e:3a:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=d32f8a02b2aba66f8660798e75f8fc8b1436ced1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:5f:25:c7:ac:e4:4a:da:1e:cd:a1:ac:12: a2:bf:6b:d6:ca:51:82:4f:d3:31:27:f3:a9:3e:a3: bf:67:1e:32:a9:ff:b2:5a:eb:18:de:10:38:a7:03: 21:b6:80:09:93:3c:5f:5d:22:23:8d:2d:30:3e:f2: 17:18:96:63:b1:85:95:11:61:9d:16:e7:dc:ba:55: 5b:83:85:3c:b0:1f:66:0a:ef:06:cd:65:b1:94:27: 32:2e:75:60:e9:c7:65:b3:78:15:2e:59:a5:dd:67: 23:9f:75:90:d2:23:7a:40:98:23:04:3b:27:2b:8a: 1a:39:6b:f4:73:56:2b:47:25:5e:95:36:19:97:5a: ba:38:2d:21:f7:d9:ca:e3:4c:f9:dc:6d:39:07:08: 5c:de:b2:46:63:6c:2c:e2:26:86:1f:68:5e:9e:42: f9:af:f8:33:c0:15:01:75:8b:58:1b:3e:15:32:6a: e2:08:5e:60:b3:8c:cc:95:38:f9:36:d9:63:5e:3b: b7:07:29:bd:5a:16:37:7c:b0:33:b9:8a:da:82:e3: 38:59:dc:e3:21:a3:c0:34:46:23:dc:3c:92:7d:08: 44:be:4a:4d:94:ed:57:fb:d9:2e:7d:21:f4:2c:39: cb:16:e1:78:76:6a:b8:69:f3:8d:3a:fe:7d:59:62: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:8A:02:B2:AB:A6:6F:86:60:79:8E:75:F8:FC:8B:14:36:CE:D1 X509v3 Authority Key Identifier: keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:bc:a6:d4:68:74:cb:b6:61:f1:67:7a:e7:8a:1d:a6:65:e5: 7e:96:cf:4e:f4:87:e8:b1:17:a4:ac:24:24:14:77:95:1f:f7: db:cc:34:17:86:48:3c:b8:88:3b:96:23:ca:3d:bc:98:c5:cd: fc:3e:76:d5:00:d7:f7:32:58:05:aa:3c:b6:0c:d4:79:32:4c: f2:6e:1b:0e:10:83:4d:2c:f6:40:ac:0a:b7:0c:17:a7:cc:bf: d7:82:1f:b3:cc:93:6f:24:56:dd:ba:08:21:ff:32:a3:2d:08: 3d:36:97:f5:31:df:2f:7f:e0:8c:e3:96:21:e2:30:3d:93:38: 7b:5c:e8:60:5a:b6:2f:e8:bc:92:d7:d0:93:d3:f1:90:59:44: 14:c7:5f:39:a7:df:59:40:08:c4:59:37:bd:c8:4e:94:2e:cb: 81:27:93:bb:05:ae:d9:d1:53:29:1c:6a:ac:c6:af:ce:71:fd: 85:19:d5:07:b2:8a:47:80:03:c2:f5:16:0b:80:54:c0:7a:8f: 4f:7a:09:29:2c:20:72:22:50:20:94:d2:da:f9:f9:fc:57:1a: 9a:de:da:40:f8:b2:4e:e0:49:06:c4:0a:d4:c2:eb:f1:39:37: 6c:41:66:60:43:53:f9:47:0e:c3:3f:69:cd:6e:a5:3a:93:ca: c5:af:9e:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0axAad3aWcsMt+SeOroqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTFmYTVlZmYzNzBiYzM2ZDBlMzkyOTYyNWUzNDE0MDgx YTIzOTIwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhkMzJmOGEwMmIyYWJhNjZmODY2MDc5OGU3NWY4ZmM4YjE0MzZjZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFfJces5EraHs2hrBKiv2vWylGC T9MxJ/OpPqO/Zx4yqf+yWusY3hA4pwMhtoAJkzxfXSIjjS0wPvIXGJZjsYWVEWGd FufculVbg4U8sB9mCu8GzWWxlCcyLnVg6cdls3gVLlml3Wcjn3WQ0iN6QJgjBDsn K4oaOWv0c1YrRyVelTYZl1q6OC0h99nK40z53G05Bwhc3rJGY2ws4iaGH2henkL5 r/gzwBUBdYtYGz4VMmriCF5gs4zMlTj5NtljXju3Bym9WhY3fLAzuYraguM4Wdzj IaPANEYj3DySfQhEvkpNlO1X+9kufSH0LDnLFuF4dmq4afONOv59WWJm8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNMvigKyq6ZvhmB5jnX4/IsUNs7RMB8GA1UdIwQY MBaAFPgR+l7/NwvDbQ45KWJeNBQIGiOSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CSDZYdjgzQzhOdERqa3BZbDQwRkFnYUk1SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIx LTFjYzUwNTUwMWEwZi8xLzEtQkg2WHY4M0M4TnREamtwWWw0MEZBZ2FJNUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhLzRhMjkzZC0yYWQzLTQxMTQtYTJiMS0xY2M1MDU1MDFh MGYvMS8xLUJINlh2ODNDOE50RGprcFlsNDBGQWdhSTVJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLym 1Gh0y7Zh8Wd654odpmXlfpbPTvSH6LEXpKwkJBR3lR/328w0F4ZIPLiIO5Yjyj28 mMXN/D521QDX9zJYBao8tgzUeTJM8m4bDhCDTSz2QKwKtwwXp8y/14Ifs8yTbyRW 3boIIf8yoy0IPTaX9THfL3/gjOOWIeIwPZM4e1zoYFq2L+i8ktfQk9PxkFlEFMdf OaffWUAIxFk3vchOlC7LgSeTuwWu2dFTKRxqrMavznH9hRnVB7KKR4ADwvUWC4BU wHqPT3oJKSwgciJQIJTS2vn5/Fcamt7aQPiyTuBJBsQK1MLr8Tk3bEFmYENT+UcO wz9pzW6lOpPKxa+e2A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:34 2025 by rpki-client