This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json) Hash identifier: giK89j0InABagnbbTzZiKaxuh+rFrGkLNYA03UJhWr8= Subject key identifier: 07:97:AA:E2:8D:8C:D7:7C:CA:C9:27:95:00:27:E9:FA:91:E4:73:03 Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Certificate serial: 019BF5E314719CBCD5F1100A7F82AB226B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 16:00:58 +0000 Manifest this update: Sun 25 Jan 2026 16:00:58 +0000 Manifest next update: Mon 26 Jan 2026 16:00:58 +0000 Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: VasHV86Hbxo1U34gYdLwvHOgoh6ZGe7xw0TH7O1saJU=) 2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=) 3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:14:71:9c:bc:d5:f1:10:0a:7f:82:ab:22:6b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Validity Not Before: Jan 25 16:00:58 2026 GMT Not After : Jan 26 16:00:58 2026 GMT Subject: CN=0797aae28d8cd77ccac927950027e9fa91e47303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:04:87:57:d6:83:bf:83:c6:b4:b0:32:fb: 7b:dc:fc:83:3c:cf:94:d6:b9:e9:25:c0:25:92:c9: 84:2e:7c:d1:1d:11:97:78:88:2b:cd:c3:2c:9b:71: 49:5b:03:49:9d:7e:aa:07:c2:73:c6:bb:9a:69:76: 85:e5:c5:9e:b1:dc:4b:61:45:b8:89:62:b0:4b:81: e6:11:a9:f0:0e:cf:4e:91:31:8a:db:47:da:15:5b: fd:cd:1d:2a:79:4d:07:8d:40:7b:80:e0:1f:fd:bc: 0d:1e:10:7d:3c:52:d1:6c:49:61:e1:d2:4b:ea:99: 22:fc:61:cf:d5:81:2c:a8:71:b9:81:18:cc:ad:39: 9e:99:2c:51:c5:ee:96:c2:b7:7e:27:f5:ee:d3:fa: 19:86:36:ff:3e:14:d3:94:83:82:84:73:97:e6:86: de:9d:12:f1:a2:a1:0f:8e:10:9e:36:85:2e:17:8f: ab:cd:f7:94:e1:78:9b:af:64:6f:50:5c:f9:91:70: 60:45:eb:ae:f7:e8:93:ba:25:cb:e5:d4:70:9a:a7: 31:64:5c:a6:00:e5:82:a0:1a:a7:bd:fa:31:55:71: d1:4e:ab:87:98:9b:3f:f5:0b:b9:5b:56:6a:71:4c: ed:98:73:ad:ea:9e:3b:01:1b:76:ac:c8:04:43:7d: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:97:AA:E2:8D:8C:D7:7C:CA:C9:27:95:00:27:E9:FA:91:E4:73:03 X509v3 Authority Key Identifier: keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:e1:d0:d9:b7:dc:3e:0e:46:d0:d9:0e:6b:07:fe:89:54: be:7c:bb:30:ec:6f:dc:83:2a:04:a8:c3:a0:1c:52:dd:e4:c0: 87:c4:f3:9a:ed:d0:50:15:08:9c:00:fd:b6:2c:8a:63:84:6e: 60:8f:61:2a:71:9d:7b:5d:39:8c:7c:e6:c2:44:51:58:23:44: 29:10:69:8d:7a:16:e7:03:9b:bd:28:a4:a8:36:5b:70:bc:97: 04:39:da:72:ce:81:3f:1a:72:27:3d:95:ab:f3:d1:41:c1:09: 25:18:9e:38:36:a0:9f:0d:1e:1b:9f:00:b9:c9:28:76:51:65: 2e:b2:55:d8:2c:c4:a1:b7:0a:64:ef:77:fa:97:d4:41:40:42: 3e:72:bd:75:e4:c0:de:ea:a1:51:b1:cb:e7:88:e6:7d:c1:f6: 1f:aa:44:6d:90:88:ba:e1:9d:62:ad:06:25:15:4b:8d:d2:68: 51:e7:a9:1e:36:a5:0b:cd:2c:f1:2c:f8:a8:d3:a9:e3:77:7a: f2:66:41:eb:3f:c5:24:80:a6:13:8d:48:d8:83:91:38:1b:50: 5b:33:db:c3:75:a5:a4:1e:7d:b0:36:32:6e:8c:97:dd:9b:2f: cc:a1:f5:38:cf:4c:0d:d5:77:a4:62:72:94:96:16:39:72:31: cd:1d:83:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14xRxnLzV8RAKf4KrImtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl ZTgwYWQwHhcNMjYwMTI1MTYwMDU4WhcNMjYwMTI2MTYwMDU4WjAzMTEwLwYDVQQD EygwNzk3YWFlMjhkOGNkNzdjY2FjOTI3OTUwMDI3ZTlmYTkxZTQ3MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCYEh1fWg7+DxrSwMvt73PyDPM+U 1rnpJcAlksmELnzRHRGXeIgrzcMsm3FJWwNJnX6qB8JzxruaaXaF5cWesdxLYUW4 iWKwS4HmEanwDs9OkTGK20faFVv9zR0qeU0HjUB7gOAf/bwNHhB9PFLRbElh4dJL 6pki/GHP1YEsqHG5gRjMrTmemSxRxe6Wwrd+J/Xu0/oZhjb/PhTTlIOChHOX5obe nRLxoqEPjhCeNoUuF4+rzfeU4Xibr2RvUFz5kXBgReuu9+iTuiXL5dRwmqcxZFym AOWCoBqnvfoxVXHRTquHmJs/9Qu5W1ZqcUztmHOt6p47ARt2rMgEQ31K7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeXquKNjNd8ysknlQAn6fqR5HMDMB8GA1UdIwQY MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4 LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG7h0Nm3 3D4ORtDZDmsH/olUvny7MOxv3IMqBKjDoBxS3eTAh8Tzmu3QUBUInAD9tiyKY4Ru YI9hKnGde105jHzmwkRRWCNEKRBpjXoW5wObvSikqDZbcLyXBDnacs6BPxpyJz2V q/PRQcEJJRieODagnw0eG58AuckodlFlLrJV2CzEobcKZO93+pfUQUBCPnK9deTA 3uqhUbHL54jmfcH2H6pEbZCIuuGdYq0GJRVLjdJoUeepHjalC80s8Sz4qNOp43d6 8mZB6z/FJICmE41I2IOROBtQWzPbw3WlpB59sDYyboyX3ZsvzKH1OM9MDdV3pGJy lJYWOXIxzR2DYg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:05 2026 by rpki-client