This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json) Hash identifier: 3WpDppwYVJsGeGnNNYjQwL7JojbvcHKXVMIBKFhaCrA= Subject key identifier: 32:F2:24:7E:8B:70:4D:5B:A5:45:DB:57:13:37:BB:45:8A:85:52:6B Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05 Certificate serial: 019AF20950B82710A26A6F66449838F43F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft Manifest number: 0AE0 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=) 2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: 75sF6guLan4tgPJnPe3Ab1AHcNLT6K6D/rtpUWa+Yy4=) 3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:50:b8:27:10:a2:6a:6f:66:44:98:38:f4:3f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=32f2247e8b704d5ba545db571337bb458a85526b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ac:4e:2e:20:5e:a1:2d:7a:42:7d:1e:9d:26: 74:19:65:a1:35:c9:68:be:89:83:55:b9:df:6c:2c: 39:0a:6e:7a:27:91:81:ab:64:96:5c:9d:c9:d6:3e: 7b:af:e1:7f:bf:ef:ff:2d:ca:27:68:8b:58:d9:52: c2:d8:88:b0:c3:1f:dd:66:ff:02:4e:af:18:24:ea: 83:02:13:7b:05:94:69:18:a4:19:0a:8f:fd:f4:2b: 2d:58:6c:cb:ca:fa:57:5d:7a:d3:0f:a6:03:15:05: 73:e0:b5:17:21:d8:e5:11:f1:73:78:a4:32:d8:3d: c3:4c:39:46:8e:35:fa:4f:38:e0:2b:77:06:f3:12: 9f:9e:bd:6e:74:d1:69:7f:78:e2:ee:66:d5:97:50: dd:5b:3b:8a:36:b0:5d:d8:99:af:35:1f:d7:76:d6: 7e:94:7a:5c:a7:cb:75:17:ed:59:63:7d:17:d0:37: 80:21:cf:69:5b:07:d1:2d:e2:e4:25:e6:8c:86:03: 38:89:76:a1:69:a0:f7:5f:6e:d2:1c:91:3b:d1:53: 21:83:bc:d3:f7:a2:8c:c4:57:9d:e3:60:b3:ce:84: 1f:b2:ff:46:fb:e3:14:82:f1:5d:3d:e2:37:16:b2: 54:36:13:f2:c0:11:68:e9:f1:04:0e:38:67:30:cb: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:24:7E:8B:70:4D:5B:A5:45:DB:57:13:37:BB:45:8A:85:52:6B X509v3 Authority Key Identifier: keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5c:c8:ba:a1:2d:f6:3b:46:5f:79:ed:fa:17:c2:fe:15:e0: 8a:1b:1e:f2:2d:16:75:08:8e:67:2f:25:f6:8d:d0:3a:5f:bf: 32:62:f4:e1:45:b9:26:bb:46:5b:df:9a:17:fa:e5:4c:82:dc: aa:2f:d0:bf:e4:bc:cf:78:16:88:a2:d3:8f:41:32:ab:52:74: 13:2e:9e:48:0f:22:a9:f6:35:3f:49:6c:c8:12:22:4a:cf:32: 9d:17:37:64:ad:f9:6a:e0:a0:5a:ca:5e:cb:19:c2:d7:d4:48: cb:b4:84:ab:6f:e0:49:99:fd:62:37:30:3f:fe:7c:65:6d:84: e6:af:07:5e:8e:39:ba:16:eb:0c:c0:3d:33:19:22:64:1f:9f: 1e:d0:2d:f5:33:ac:f6:4d:b1:00:28:30:95:46:f7:ef:64:71: 22:98:fa:71:00:c0:3f:6c:56:da:4a:35:07:b0:19:8c:28:c3: 72:5a:e6:eb:4e:77:08:96:5c:3a:6b:de:d4:eb:2a:d0:54:bd: 5e:9c:27:d8:0f:40:df:40:b2:33:00:97:4f:24:10:12:8a:0c: d6:56:7c:9c:0d:72:81:9a:1d:63:31:93:6e:57:a0:df:c1:40: cf:e9:d8:fc:9d:db:10:d5:85:47:45:b6:17:42:03:2d:3b:63: b8:c5:91:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVC4JxCiam9mRJg49D8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5 ODZmMDUwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EygzMmYyMjQ3ZThiNzA0ZDViYTU0NWRiNTcxMzM3YmI0NThhODU1MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KxOLiBeoS16Qn0enSZ0GWWhNclo vomDVbnfbCw5Cm56J5GBq2SWXJ3J1j57r+F/v+//LconaItY2VLC2Iiwwx/dZv8C Tq8YJOqDAhN7BZRpGKQZCo/99CstWGzLyvpXXXrTD6YDFQVz4LUXIdjlEfFzeKQy 2D3DTDlGjjX6TzjgK3cG8xKfnr1udNFpf3ji7mbVl1DdWzuKNrBd2JmvNR/XdtZ+ lHpcp8t1F+1ZY30X0DeAIc9pWwfRLeLkJeaMhgM4iXahaaD3X27SHJE70VMhg7zT 96KMxFed42CzzoQfsv9G++MUgvFdPeI3FrJUNhPywBFo6fEEDjhnMMtKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLyJH6LcE1bpUXbVxM3u0WKhVJrMB8GA1UdIwQY MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut MjliMDM4MDg0YWE2LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2 LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1zIuqEt 9jtGX3nt+hfC/hXgihse8i0WdQiOZy8l9o3QOl+/MmL04UW5JrtGW9+aF/rlTILc qi/Qv+S8z3gWiKLTj0Eyq1J0Ey6eSA8iqfY1P0lsyBIiSs8ynRc3ZK35auCgWspe yxnC19RIy7SEq2/gSZn9YjcwP/58ZW2E5q8HXo45uhbrDMA9MxkiZB+fHtAt9TOs 9k2xACgwlUb372RxIpj6cQDAP2xW2ko1B7AZjCjDclrm6053CJZcOmve1Osq0FS9 Xpwn2A9A30CyMwCXTyQQEooM1lZ8nA1ygZodYzGTbleg38FAz+nY/J3bENWFR0W2 F0IDLTtjuMWRdA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:45 2025 by rpki-client