This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json) Hash identifier: aos+BfnUl7M6PIB0KLtceXIemhJYyeEF843S/lLnz1o= Subject key identifier: 22:EC:D9:EF:8B:06:50:D7:BA:80:B0:B4:B8:92:24:71:A1:19:7F:70 Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Certificate serial: 019AF0BF158177A9B14DF161610663AC36E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft Manifest number: 16FF Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: sMsyebcBPbFjuTPQUdxRSXjtLt92Ck38THNssg0l9Lc=) 2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:15:81:77:a9:b1:4d:f1:61:61:06:63:ac:36:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=22ecd9ef8b0650d7ba80b0b4b8922471a1197f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:62:85:7f:62:b5:4f:a5:c0:ce:93:f0:33: ad:1e:0e:69:14:9e:22:a1:77:2d:35:ed:45:be:10: b1:ab:54:6f:49:3f:4f:3b:a0:30:56:19:b1:51:ff: 7b:65:49:25:5b:47:cd:01:6a:7a:ca:94:ff:02:d4: 34:9e:41:7d:bd:4b:b8:3c:48:2f:0e:39:d8:83:8c: 2f:cc:c9:69:c1:87:32:a9:72:bc:3c:01:82:1a:ce: fa:68:d5:39:7d:9c:5e:fb:e3:bf:94:3f:89:83:a1: c8:75:d1:ec:5c:c5:f4:ee:73:a5:b9:ec:d0:8b:6b: 0c:59:ab:dd:3e:ba:97:2b:c4:60:e4:92:7a:82:9d: 02:d3:4e:09:08:55:0f:8c:c1:d7:37:a9:ee:9e:b0: 8b:44:d3:b5:05:a6:03:0e:9f:4c:17:c6:f1:34:25: c6:fb:52:e5:bd:47:7a:46:44:45:ca:3c:99:33:d1: f0:2f:09:f9:31:c1:8a:66:22:b9:eb:b3:8f:40:14: 59:5e:61:14:46:1d:9c:20:33:fb:8e:bb:58:6a:0c: f8:1f:59:99:57:35:b6:3f:19:22:03:f5:61:1a:93: 20:26:ed:b7:4d:96:a6:a0:28:1c:2b:7e:ba:cd:19: d0:c9:7f:82:88:e5:46:98:5b:d4:0c:ac:8f:2d:4e: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EC:D9:EF:8B:06:50:D7:BA:80:B0:B4:B8:92:24:71:A1:19:7F:70 X509v3 Authority Key Identifier: keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d9:e8:bc:75:a6:0c:de:d1:f7:c5:68:fa:5f:8b:89:31:9f: b2:e8:59:07:2f:82:bb:24:9f:20:aa:b5:78:90:14:8e:a7:49: 56:b1:7f:93:2f:80:8b:4d:f5:72:d2:c0:98:45:e9:17:51:52: c6:f3:1d:63:65:d0:c5:c8:c9:91:9b:30:2e:40:e9:d9:e8:3d: 56:fa:6a:8d:2f:c2:00:a2:a8:b0:04:7b:01:0b:28:49:ee:c8: c6:ba:a4:17:a3:c6:55:7e:e9:f6:3a:bf:49:30:b6:05:24:50: b6:c4:3e:48:7e:6d:3a:99:16:fe:50:76:ee:4d:6b:87:52:1e: ef:b5:3b:61:e5:cf:da:ec:6b:a3:87:8d:51:95:9b:0c:7e:f2: 74:62:0e:4c:f9:15:e5:c5:de:19:95:b6:ae:8d:d3:42:e3:00: 48:93:c7:a0:c8:02:1d:7c:d3:51:24:2e:33:a6:7d:25:00:28: a7:0d:3f:8a:16:84:91:cb:1c:ed:b5:42:e7:1f:af:55:6c:39: d7:51:f7:33:65:81:1d:f4:0c:b7:14:42:86:73:3b:d5:f1:77: db:91:d4:df:1e:0a:68:2f:15:cb:ba:fc:3b:82:00:66:e4:22: 57:81:4b:6e:0a:91:67:3b:00:cf:33:da:99:6b:02:05:72:c2: b1:81:ef:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxWBd6mxTfFhYQZjrDblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTQ3NGNlY2RmNWY1MDNhZGFiNjBmYzU1ZWU3Zjc4YTBk YmE5ZjIwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD EygyMmVjZDllZjhiMDY1MGQ3YmE4MGIwYjRiODkyMjQ3MWExMTk3ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9FihX9itU+lwM6T8DOtHg5pFJ4i oXctNe1FvhCxq1RvST9PO6AwVhmxUf97ZUklW0fNAWp6ypT/AtQ0nkF9vUu4PEgv DjnYg4wvzMlpwYcyqXK8PAGCGs76aNU5fZxe++O/lD+Jg6HIddHsXMX07nOluezQ i2sMWavdPrqXK8Rg5JJ6gp0C004JCFUPjMHXN6nunrCLRNO1BaYDDp9MF8bxNCXG +1LlvUd6RkRFyjyZM9HwLwn5McGKZiK567OPQBRZXmEURh2cIDP7jrtYagz4H1mZ VzW2PxkiA/VhGpMgJu23TZamoCgcK366zRnQyX+CiOVGmFvUDKyPLU4yAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLs2e+LBlDXuoCwtLiSJHGhGX9wMB8GA1UdIwQY MBaAFAYUdM7N9fUDratg/FXuf3ig26nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUt NTI2ZTdmNmQ3ZjViLzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUtNTI2ZTdmNmQ3ZjVi LzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9novHWm DN7R98Vo+l+LiTGfsuhZBy+CuySfIKq1eJAUjqdJVrF/ky+Ai031ctLAmEXpF1FS xvMdY2XQxcjJkZswLkDp2eg9VvpqjS/CAKKosAR7AQsoSe7IxrqkF6PGVX7p9jq/ STC2BSRQtsQ+SH5tOpkW/lB27k1rh1Ie77U7YeXP2uxro4eNUZWbDH7ydGIOTPkV 5cXeGZW2ro3TQuMASJPHoMgCHXzTUSQuM6Z9JQAopw0/ihaEkcsc7bVC5x+vVWw5 11H3M2WBHfQMtxRChnM71fF325HU3x4KaC8Vy7r8O4IAZuQiV4FLbgqRZzsAzzPa mWsCBXLCsYHvmA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:15 2025 by rpki-client