This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json) Hash identifier: aQrf7W+ExwI8wUsHSeiOHMrswl4kyBuPo/p7NIpkMUk= Subject key identifier: 1B:F8:F4:46:77:82:5F:FA:EF:AE:D7:AD:E0:BF:CF:1F:ED:20:0C:31 Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Certificate serial: 019AF5AF0596F1B5885697659AC8273BC87C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:01:19 +0000 Manifest this update: Sat 06 Dec 2025 22:01:19 +0000 Manifest next update: Sun 07 Dec 2025 22:01:19 +0000 Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=) 2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: JNeu+aAz3gWq55AGxxGSQiUTQGNGCdNNFy6q2/S6RU4=) 3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:05:96:f1:b5:88:56:97:65:9a:c8:27:3b:c8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Validity Not Before: Dec 6 22:01:19 2025 GMT Not After : Dec 7 22:01:19 2025 GMT Subject: CN=1bf8f44677825ffaefaed7ade0bfcf1fed200c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:58:5a:5d:e5:cf:65:5b:c3:4b:df:c6:a8: a2:39:c5:dd:12:8f:6c:9c:4b:71:9b:9e:7a:33:fd: c1:12:73:68:60:a1:30:4e:48:c5:c2:eb:cc:35:c7: 61:cc:8f:1e:bb:74:00:ef:e3:c6:ea:59:33:a0:8a: e7:3f:1b:cf:5f:e9:15:fd:1c:0e:48:90:54:ef:5c: 12:94:60:18:4b:d1:b9:45:5d:37:ca:59:7e:3e:61: 71:82:51:0c:09:00:56:e2:47:78:45:c2:95:9f:09: 27:48:e9:ea:05:b4:5c:5c:9b:49:23:c5:b1:ac:7c: ea:f0:ca:91:70:c4:ab:e6:2c:b0:90:97:ef:7a:fe: 93:cc:17:f7:40:89:c2:35:80:59:b3:ca:0f:a3:d8: 40:c3:eb:4c:8c:5e:06:aa:29:68:f3:e7:42:22:b3: 1b:20:23:1f:34:38:85:33:df:26:fe:3c:cf:b8:ba: 79:ac:55:6b:16:ea:db:16:2c:31:43:85:44:44:1a: 8d:e8:a3:12:83:f0:d1:0b:f8:65:7f:82:1d:41:a8: 4d:a9:a3:f5:d9:7b:64:dc:bd:ce:ae:91:2c:38:2f: bc:15:40:3f:a0:b5:41:f0:02:b2:93:61:37:83:d9: f1:7e:df:bc:c0:77:c7:7f:5e:94:91:90:c8:ac:05: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F8:F4:46:77:82:5F:FA:EF:AE:D7:AD:E0:BF:CF:1F:ED:20:0C:31 X509v3 Authority Key Identifier: keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0e:46:69:b4:65:31:16:9b:ef:ba:e3:c6:aa:db:ef:e7:ed: 28:8f:2a:3d:6f:31:41:88:97:2c:2b:85:b7:e2:6e:27:22:64: e2:26:27:e9:75:70:09:36:8b:90:f1:94:d4:d2:03:36:78:4f: 85:a2:b5:7f:88:7a:cd:26:87:b5:91:51:8a:99:73:b1:48:3b: 71:24:5f:a3:09:52:61:38:75:af:de:36:df:b0:14:b9:4e:3a: 5b:e5:a8:c0:ea:30:6e:33:76:90:95:c9:d0:72:92:26:e8:0d: ea:95:a9:f6:23:d3:2f:78:57:9d:f4:7a:4a:30:b7:5c:82:44: 05:94:5b:66:aa:d9:31:e3:fd:bc:76:03:e4:00:0d:3a:4d:63: d4:79:e4:98:bc:e9:2c:da:a2:cb:df:f4:0e:b1:10:85:87:03: 58:d4:dd:02:35:31:bb:75:95:13:93:74:1c:7c:d8:65:1c:e4: da:9e:52:fe:41:80:2f:f0:2e:94:d3:b8:90:79:f6:30:11:bf: c9:e7:4b:0c:cc:a2:32:e6:ab:34:a6:8e:23:23:9a:f6:dc:dc: 87:93:33:44:0b:a9:a0:fe:af:4d:6d:d7:29:60:cf:6b:0c:b0: 7d:5a:fa:36:8b:4f:13:bb:6c:51:33:7e:26:4a:44:65:dc:77: ef:57:97:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwWW8bWIVpdlmsgnO8h8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl ZTgwYWQwHhcNMjUxMjA2MjIwMTE5WhcNMjUxMjA3MjIwMTE5WjAzMTEwLwYDVQQD EygxYmY4ZjQ0Njc3ODI1ZmZhZWZhZWQ3YWRlMGJmY2YxZmVkMjAwYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA545YWl3lz2Vbw0vfxqiiOcXdEo9s nEtxm556M/3BEnNoYKEwTkjFwuvMNcdhzI8eu3QA7+PG6lkzoIrnPxvPX+kV/RwO SJBU71wSlGAYS9G5RV03yll+PmFxglEMCQBW4kd4RcKVnwknSOnqBbRcXJtJI8Wx rHzq8MqRcMSr5iywkJfvev6TzBf3QInCNYBZs8oPo9hAw+tMjF4Gqilo8+dCIrMb ICMfNDiFM98m/jzPuLp5rFVrFurbFiwxQ4VERBqN6KMSg/DRC/hlf4IdQahNqaP1 2Xtk3L3OrpEsOC+8FUA/oLVB8AKyk2E3g9nxft+8wHfHf16UkZDIrAXNJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv49EZ3gl/6767XreC/zx/tIAwxMB8GA1UdIwQY MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4 LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw5GabRl MRab77rjxqrb7+ftKI8qPW8xQYiXLCuFt+JuJyJk4iYn6XVwCTaLkPGU1NIDNnhP haK1f4h6zSaHtZFRiplzsUg7cSRfowlSYTh1r94237AUuU46W+WowOowbjN2kJXJ 0HKSJugN6pWp9iPTL3hXnfR6SjC3XIJEBZRbZqrZMeP9vHYD5AANOk1j1HnkmLzp LNqiy9/0DrEQhYcDWNTdAjUxu3WVE5N0HHzYZRzk2p5S/kGAL/AulNO4kHn2MBG/ yedLDMyiMuarNKaOIyOa9tzch5MzRAupoP6vTW3XKWDPawywfVr6NotPE7tsUTN+ JkpEZdx371eX5g== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:23 2025 by rpki-client