This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json) Hash identifier: Vc5fQIELlMSkndBbRlD+3nzcwgLMMFaJ8mYhZpbd7SE= Subject key identifier: A9:4A:30:A8:7A:3D:10:77:21:90:89:26:C0:D6:A0:FE:FC:8F:04:F8 Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Certificate serial: 019AF5409556EAD7EC238F68B7100AB30407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:00:41 +0000 Manifest this update: Sat 06 Dec 2025 20:00:41 +0000 Manifest next update: Sun 07 Dec 2025 20:00:41 +0000 Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: hvutDLLwQAHjZ1KUgmKIJLYR/1U/fYcNEEowdesgQ9o=) 2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:95:56:ea:d7:ec:23:8f:68:b7:10:0a:b3:04:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Validity Not Before: Dec 6 20:00:41 2025 GMT Not After : Dec 7 20:00:41 2025 GMT Subject: CN=a94a30a87a3d107721908926c0d6a0fefc8f04f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:35:54:21:da:05:3c:bd:f8:89:28:f1:a2: 25:96:2a:3a:17:51:98:76:80:0b:89:6e:30:f2:4b: 09:60:1b:65:38:0a:c2:cd:93:a6:0a:e8:fd:29:78: 95:5e:6f:e1:c6:03:d3:57:67:86:e8:92:e9:18:fe: 51:ce:be:bf:5c:be:10:a1:92:a4:02:d8:e1:58:81: e0:86:31:94:ff:03:94:20:85:03:d4:6d:60:7e:46: ee:f6:7a:5a:57:d7:5d:25:98:a4:c4:96:53:b9:20: bd:60:49:97:8d:24:6e:e0:21:99:7b:aa:23:55:76: 39:91:1b:81:84:db:ed:af:84:20:5c:ea:50:e3:e7: c6:47:37:e2:67:c8:57:fb:eb:54:b5:82:9d:ee:c5: e6:f5:76:a5:19:b6:e2:fe:68:3d:b2:0f:f6:4c:6c: 9f:eb:fa:00:fc:ce:6d:a4:87:e6:87:87:25:08:29: 9e:74:a3:3b:f8:2c:f9:c3:38:80:47:5d:48:d7:51: 5a:e0:f5:07:c8:03:7e:65:30:6c:fd:64:f9:85:e6: a8:ef:42:f7:c3:79:31:1b:86:b6:8a:43:f7:25:fc: d4:4b:da:d9:87:cf:a7:38:b1:ba:b5:ca:89:dd:25: 25:d7:36:e7:e1:31:56:c9:79:e6:51:2e:53:f0:32: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:30:A8:7A:3D:10:77:21:90:89:26:C0:D6:A0:FE:FC:8F:04:F8 X509v3 Authority Key Identifier: keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:66:4f:10:b8:4d:6c:d5:40:a1:57:19:21:22:ab:2b:9e:4d: 6b:0a:ed:10:65:0b:df:7f:45:23:ea:96:e5:93:ca:9c:34:44: d4:cf:3a:b1:d6:54:63:31:ff:c0:62:15:17:25:fe:dc:00:d4: 4b:87:e4:8e:d5:d2:5e:b0:fb:ef:09:33:4f:35:56:11:b7:cd: 3a:7a:1e:71:a6:c5:d3:a8:1f:ae:8e:cf:aa:68:f5:32:6d:63: fa:4f:4d:00:54:da:bd:ea:ef:c2:55:4b:ee:8e:1c:9e:ac:46: c0:29:da:f7:e9:4f:0f:7c:e7:34:01:73:f3:b0:15:94:5e:b7: a5:10:5f:ca:72:61:53:de:ba:c2:b1:68:c3:1e:ac:84:c6:c7: ff:75:71:a9:e6:79:7b:72:f7:a3:f6:98:ff:1d:ce:06:a8:8c: 9d:ef:6b:d7:9d:11:80:94:b4:d6:c0:40:19:f7:85:04:6a:44: 00:05:24:ca:94:70:44:7e:0c:ee:9c:2b:17:66:54:7d:bd:0a: cf:48:93:55:69:bc:64:15:28:4c:eb:ef:f6:4b:a7:a7:8e:3f: 9a:65:1d:e8:50:50:77:22:1c:e3:81:24:be:df:5c:77:19:cd: 67:87:45:5f:b5:16:ed:dd:97:d2:2a:11:a4:b5:a5:eb:74:fe: e8:32:d9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJVW6tfsI49otxAKswQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk YmMyNjYwHhcNMjUxMjA2MjAwMDQxWhcNMjUxMjA3MjAwMDQxWjAzMTEwLwYDVQQD EyhhOTRhMzBhODdhM2QxMDc3MjE5MDg5MjZjMGQ2YTBmZWZjOGYwNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudk1VCHaBTy9+Iko8aIllio6F1GY doALiW4w8ksJYBtlOArCzZOmCuj9KXiVXm/hxgPTV2eG6JLpGP5Rzr6/XL4QoZKk AtjhWIHghjGU/wOUIIUD1G1gfkbu9npaV9ddJZikxJZTuSC9YEmXjSRu4CGZe6oj VXY5kRuBhNvtr4QgXOpQ4+fGRzfiZ8hX++tUtYKd7sXm9XalGbbi/mg9sg/2TGyf 6/oA/M5tpIfmh4clCCmedKM7+Cz5wziAR11I11Fa4PUHyAN+ZTBs/WT5heao70L3 w3kxG4a2ikP3JfzUS9rZh8+nOLG6tcqJ3SUl1zbn4TFWyXnmUS5T8DIs3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlKMKh6PRB3IZCJJsDWoP78jwT4MB8GA1UdIwQY MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt MDQ5MjUxOTRjNWU2LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2 LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGZPELhN bNVAoVcZISKrK55NawrtEGUL339FI+qW5ZPKnDRE1M86sdZUYzH/wGIVFyX+3ADU S4fkjtXSXrD77wkzTzVWEbfNOnoecabF06gfro7Pqmj1Mm1j+k9NAFTavervwlVL 7o4cnqxGwCna9+lPD3znNAFz87AVlF63pRBfynJhU966wrFowx6shMbH/3VxqeZ5 e3L3o/aY/x3OBqiMne9r150RgJS01sBAGfeFBGpEAAUkypRwRH4M7pwrF2ZUfb0K z0iTVWm8ZBUoTOvv9kunp44/mmUd6FBQdyIc44Ekvt9cdxnNZ4dFX7UW7d2X0ioR pLWl63T+6DLZ4w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:46 2025 by rpki-client