This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json) Hash identifier: 0UIuPK5bxC2yglP4pR2/c+YeqjympbDJoBJ4NODUHXQ= Subject key identifier: 82:D8:14:A7:26:A8:8F:7C:03:84:F9:18:F6:F7:AD:61:EF:2C:D1:5A Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Certificate serial: 019AF2ADC5EC1C5ABAA59F25FE141490D7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: 4xARYA1GvIvqAz2vFPE4zV54yPpGrjZ3BrdjcH5n0Vc=) 2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c5:ec:1c:5a:ba:a5:9f:25:fe:14:14:90:d7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=82d814a726a88f7c0384f918f6f7ad61ef2cd15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:cc:cb:0f:78:95:6e:6d:d1:0a:67:67:26: 18:b8:07:54:6e:69:a1:5a:7a:40:9a:a0:69:17:1b: e6:37:75:28:37:d9:d1:2b:ee:21:c1:53:20:53:8c: 75:43:9f:11:49:9e:36:b2:e4:cb:2a:cf:9d:98:5e: 08:48:f4:c9:b0:bc:07:48:2e:e8:73:1b:6e:30:cd: 91:0f:03:2e:66:35:f9:ab:d6:65:69:ca:db:8f:0f: d5:22:64:77:37:d4:98:42:b4:42:26:30:aa:f7:fb: 4a:00:14:45:0c:c7:a4:36:82:5a:c2:83:3e:27:3d: 39:87:ad:71:65:03:77:0e:88:79:bc:78:ca:91:eb: 08:01:04:56:b2:76:83:38:a7:73:39:98:59:4d:ab: 30:c3:b2:2c:75:3b:66:8a:43:49:c6:6a:c0:f5:26: ff:0d:86:d6:03:e4:c6:92:a0:f7:5e:ba:24:74:49: 17:36:32:10:66:30:39:d5:10:ac:23:a0:02:5b:4f: 2a:f7:66:d1:7a:7f:45:52:5a:66:dd:ed:a6:fb:39: 9b:c7:ac:90:a9:b7:07:66:da:2a:1c:65:e0:f0:28: bf:a4:e0:8b:12:a2:d9:b6:3e:82:8b:39:48:59:95: 50:15:0d:ff:6b:99:88:c0:14:b2:67:9c:d5:23:6a: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D8:14:A7:26:A8:8F:7C:03:84:F9:18:F6:F7:AD:61:EF:2C:D1:5A X509v3 Authority Key Identifier: keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:35:d6:d9:84:ec:4f:c1:07:76:ad:7c:e3:bc:10:1d:46: d9:12:de:a4:8c:03:e4:22:71:d6:1b:45:8e:a8:0f:2b:54:16: 27:3d:81:4c:02:a3:98:bf:6f:a9:46:46:89:8a:5a:be:fe:5b: 1a:1d:b3:f1:80:9f:7c:86:b4:14:a5:f0:c4:29:38:43:19:0e: 68:ea:60:5e:91:92:ea:43:1c:d3:61:4d:fd:9f:a5:c0:5d:ac: 20:fb:56:bc:6b:58:ec:76:9d:c1:ce:d4:68:9a:86:1a:36:bb: 2d:52:9b:7b:4f:85:7f:95:b8:1d:ca:3a:f7:b3:c4:f4:57:2d: 9d:8e:89:df:58:0b:81:80:a2:9b:59:38:c2:c1:49:eb:25:5d: f3:9c:e6:c5:c2:c3:5e:6a:eb:77:ae:98:57:cf:f8:67:eb:b1: e4:b5:6e:e7:67:bb:88:68:67:02:cf:75:9f:e6:ab:1d:26:6c: 13:85:77:e7:79:0b:ed:55:ce:c1:7f:ae:61:79:e6:cd:51:04: 63:64:66:ad:5e:1e:74:83:35:7d:fd:e3:8c:6c:fd:f7:72:d0: 45:51:d0:dd:5d:8b:ec:6d:90:32:fa:57:c1:f7:7b:0d:d6:35: 39:0e:0d:58:07:88:dc:c2:97:59:8a:e2:d0:a3:0d:20:83:34: d7:0c:2d:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcXsHFq6pZ8l/hQUkNffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1 ZDE3MDkwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD Eyg4MmQ4MTRhNzI2YTg4ZjdjMDM4NGY5MThmNmY3YWQ2MWVmMmNkMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngTMyw94lW5t0QpnZyYYuAdUbmmh WnpAmqBpFxvmN3UoN9nRK+4hwVMgU4x1Q58RSZ42suTLKs+dmF4ISPTJsLwHSC7o cxtuMM2RDwMuZjX5q9Zlacrbjw/VImR3N9SYQrRCJjCq9/tKABRFDMekNoJawoM+ Jz05h61xZQN3Doh5vHjKkesIAQRWsnaDOKdzOZhZTasww7IsdTtmikNJxmrA9Sb/ DYbWA+TGkqD3XrokdEkXNjIQZjA51RCsI6ACW08q92bRen9FUlpm3e2m+zmbx6yQ qbcHZtoqHGXg8Ci/pOCLEqLZtj6CizlIWZVQFQ3/a5mIwBSyZ5zVI2rIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILYFKcmqI98A4T5GPb3rWHvLNFaMB8GA1UdIwQY MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt NGM1MWM2Nzk3YzFmLzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1Q11tmE 7E/BB3atfOO8EB1G2RLepIwD5CJx1htFjqgPK1QWJz2BTAKjmL9vqUZGiYpavv5b Gh2z8YCffIa0FKXwxCk4QxkOaOpgXpGS6kMc02FN/Z+lwF2sIPtWvGtY7Hadwc7U aJqGGja7LVKbe0+Ff5W4Hco697PE9FctnY6J31gLgYCim1k4wsFJ6yVd85zmxcLD Xmrrd66YV8/4Z+ux5LVu52e7iGhnAs91n+arHSZsE4V353kL7VXOwX+uYXnmzVEE Y2RmrV4edIM1ff3jjGz993LQRVHQ3V2L7G2QMvpXwfd7DdY1OQ4NWAeI3MKXWYri 0KMNIIM01wwteg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:29 2025 by rpki-client