This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json) Hash identifier: 0BK5ZWYlwGxv1pkPwdY2LMBDHCStuDU0DpHumtXR4Ro= Subject key identifier: B5:31:3C:FD:39:56:58:5E:BD:15:DF:38:D6:32:E4:49:CC:52:0D:4D Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Certificate serial: 019AF12F33FB7E247752AAE142242BA7B347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft Manifest number: 1068 Signing time: Sat 06 Dec 2025 01:03:13 +0000 Manifest this update: Sat 06 Dec 2025 01:03:13 +0000 Manifest next update: Sun 07 Dec 2025 01:03:13 +0000 Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=) 2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: klUb5rHyBKLSSo8Ah4awyx64NFWg4AqlGK6ORxPHUR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:33:fb:7e:24:77:52:aa:e1:42:24:2b:a7:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Validity Not Before: Dec 6 01:03:13 2025 GMT Not After : Dec 7 01:03:13 2025 GMT Subject: CN=b5313cfd3956585ebd15df38d632e449cc520d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:a6:30:76:01:7f:47:fa:92:a1:3a:48:ce: 16:b0:af:33:01:61:3f:d7:59:0d:c8:aa:ec:1b:e5: ca:1f:eb:e4:48:7d:e4:c5:0d:e0:48:19:ce:88:fc: 8f:ae:37:0c:58:54:ed:a6:88:8b:73:3c:68:a3:70: b5:5f:a0:5a:8f:e8:fa:1d:99:7b:08:87:42:21:c8: 9a:f9:e5:b0:1c:73:ba:07:3a:5e:53:fa:b8:d7:83: 0b:38:7b:3d:0e:fc:05:00:98:c9:71:9c:26:63:92: 8a:90:2b:fd:51:b0:46:c6:da:55:7c:86:69:7a:a8: 14:27:57:01:86:69:19:3f:32:da:f4:24:f5:87:17: 10:0b:75:18:06:24:ba:a9:6a:f6:93:8b:3f:46:1f: 6b:b8:61:aa:2f:3f:1e:50:ee:a1:1b:d2:08:9e:12: 30:f0:40:f7:9f:78:e6:ad:e9:5d:4b:c9:af:27:1c: f7:dd:b4:dd:f8:06:a0:f5:35:91:c1:52:2b:aa:e7: e6:04:5c:15:6a:da:d3:08:fe:a4:25:44:1e:97:43: cc:d7:66:45:3e:8d:b3:b9:f5:22:76:da:f1:33:60: 67:93:22:12:b8:b6:93:be:54:ad:d1:ae:80:0c:c6: 29:52:0d:92:74:a2:8f:ec:23:b9:28:b4:6b:25:d2: 80:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:3C:FD:39:56:58:5E:BD:15:DF:38:D6:32:E4:49:CC:52:0D:4D X509v3 Authority Key Identifier: keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e2:28:1b:54:22:ae:86:9d:fe:3f:c8:d5:39:45:88:a1:b3: f3:3d:08:0c:95:be:17:83:8f:66:0f:29:e1:3a:0b:f8:3c:c6: 38:fa:83:d2:4a:43:d5:59:16:b2:48:f0:dd:23:01:92:e1:97: f8:7a:94:d2:5c:50:40:38:47:a3:32:ef:95:7a:f5:81:11:df: c1:a3:51:6a:5a:4a:d4:8f:fe:02:ae:8d:76:34:51:c3:c9:e0: b5:a4:d4:09:79:08:b6:af:be:16:a8:33:3b:e5:92:aa:23:bb: 37:d1:b0:51:ee:5b:0d:1d:78:6c:65:f7:a0:2d:a4:4e:54:89: 96:b6:d7:71:91:e6:05:0c:0c:ae:83:bc:f3:f4:62:b1:28:9b: 17:60:66:bf:b4:37:fc:47:c0:7c:f4:0b:9a:25:d5:dd:7f:ce: d1:3f:00:cc:8e:1c:4e:a0:40:cd:db:15:2a:f8:ce:1b:6e:ef: cc:f2:71:9d:75:da:a8:97:61:2e:2d:88:22:60:fd:13:01:02: de:48:33:f0:6b:34:26:77:96:92:31:a5:a6:ba:d4:8d:75:bf: cd:b3:55:a5:7b:cd:2b:a5:44:48:75:8c:74:23:37:49:0e:e3: ae:a9:b4:62:1d:ca:6b:15:80:c3:58:16:c9:4b:5b:2b:17:6b: da:65:5b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzP7fiR3UqrhQiQrp7NHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTg3MGZjMTg1NGEzYjA5MzkzOGMwOWNmNjA2NTFiYTk5 M2ZmYzYwHhcNMjUxMjA2MDEwMzEzWhcNMjUxMjA3MDEwMzEzWjAzMTEwLwYDVQQD EyhiNTMxM2NmZDM5NTY1ODVlYmQxNWRmMzhkNjMyZTQ0OWNjNTIwZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAGmMHYBf0f6kqE6SM4WsK8zAWE/ 11kNyKrsG+XKH+vkSH3kxQ3gSBnOiPyPrjcMWFTtpoiLczxoo3C1X6Baj+j6HZl7 CIdCIcia+eWwHHO6BzpeU/q414MLOHs9DvwFAJjJcZwmY5KKkCv9UbBGxtpVfIZp eqgUJ1cBhmkZPzLa9CT1hxcQC3UYBiS6qWr2k4s/Rh9ruGGqLz8eUO6hG9IInhIw 8ED3n3jmreldS8mvJxz33bTd+Aag9TWRwVIrqufmBFwVatrTCP6kJUQel0PM12ZF Po2zufUidtrxM2BnkyISuLaTvlSt0a6ADMYpUg2SdKKP7CO5KLRrJdKAJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUxPP05VlhevRXfONYy5EnMUg1NMB8GA1UdIwQY MBaAFKQYcPwYVKOwk5OMCc9gZRupk//GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYt NzljOGEyNDcyYTBjLzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYtNzljOGEyNDcyYTBj LzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeIoG1Qi road/j/I1TlFiKGz8z0IDJW+F4OPZg8p4ToL+DzGOPqD0kpD1VkWskjw3SMBkuGX +HqU0lxQQDhHozLvlXr1gRHfwaNRalpK1I/+Aq6NdjRRw8ngtaTUCXkItq++Fqgz O+WSqiO7N9GwUe5bDR14bGX3oC2kTlSJlrbXcZHmBQwMroO88/RisSibF2Bmv7Q3 /EfAfPQLmiXV3X/O0T8AzI4cTqBAzdsVKvjOG27vzPJxnXXaqJdhLi2IImD9EwEC 3kgz8Gs0JneWkjGlprrUjXW/zbNVpXvNK6VESHWMdCM3SQ7jrqm0Yh3KaxWAw1gW yUtbKxdr2mVbUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:36 2025 by rpki-client