This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json) Hash identifier: +gvOAvCGSnG55lGDDEF7dFbJbVkEXI/ZMP4zkx7vz2E= Subject key identifier: FE:F2:05:74:2A:86:BD:C6:36:25:A1:85:21:A5:12:53:5F:8B:58:F9 Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e Certificate serial: 019AF3523AF7BCC337E9F01B5197AB01ED8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft Manifest number: 0425 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: jAUvFbFhg76ZO8OR3/HxJqvi1fu6f/zkY7xjRVjxiKE=) 2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3a:f7:bc:c3:37:e9:f0:1b:51:97:ab:01:ed:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=fef205742a86bdc63625a18521a512535f8b58f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:62:35:4f:1b:13:c4:23:94:d0:52:c4:e2: 40:d4:75:13:5e:a7:80:97:a4:7a:6f:86:7c:7a:21: f7:c9:fb:b6:75:25:92:aa:14:d0:53:d8:9e:af:03: 56:1f:6e:63:94:92:c5:70:e0:2e:6a:a4:f7:4c:5e: 28:6c:90:5c:77:d5:87:18:3e:93:33:29:79:6b:8b: 51:e2:50:18:07:ff:1d:ba:ac:64:a9:98:16:9b:13: 98:1d:0d:4e:8a:7e:2a:15:5a:ab:c4:08:54:ea:9b: 44:0c:a7:b5:ca:60:fe:f6:43:cb:a8:6a:46:7f:de: aa:1b:96:6f:9c:22:e9:06:6d:9e:6a:ef:7a:c6:70: dd:9d:ce:8a:82:b7:1d:38:e1:13:ec:f5:c7:e7:8e: 53:29:ed:48:5e:ed:3d:33:18:19:ae:c8:c7:da:62: 34:83:63:35:19:84:0d:f7:dd:ec:76:c5:ac:20:bc: eb:fe:c6:6a:d8:2d:75:41:5f:28:43:88:ca:a3:76: 43:68:49:3f:a8:30:b7:84:2e:d8:46:cd:05:3d:a6: 24:20:7b:38:0b:39:49:19:cf:02:34:f1:71:ae:1b: c4:28:8d:d8:d6:4e:ba:32:af:78:95:cf:95:ba:e9: 56:36:66:32:84:bc:63:30:ee:03:d3:2c:00:21:c6: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:05:74:2A:86:BD:C6:36:25:A1:85:21:A5:12:53:5F:8B:58:F9 X509v3 Authority Key Identifier: keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:19:b2:96:8c:43:4f:3e:f0:17:dc:4e:b0:03:63:62:30:51: 71:da:5f:b4:9e:a8:ba:13:4f:29:f6:cc:7b:6d:a9:37:f7:d4: c7:49:65:11:ef:2f:cb:89:83:0e:0e:0f:93:4d:79:eb:7d:e7: 7a:6b:50:75:00:8b:fb:1c:8e:6e:bf:8a:3c:da:e1:b9:75:d9: 79:9d:0c:b2:c0:eb:8c:63:62:39:b7:70:14:48:76:97:ea:af: 6c:77:5e:3c:50:d7:83:01:94:b9:da:48:3c:e4:d7:61:e3:ea: 4e:6c:48:e1:67:c5:24:74:eb:bc:88:7a:a9:4f:67:b3:ca:90: 5c:bb:96:95:e9:ed:86:f8:3b:f9:b6:eb:f0:ab:c4:31:fa:62: e8:24:cf:b0:ce:bb:6a:49:63:9a:3d:b2:41:86:3d:a0:e3:93: 76:b8:6f:56:97:ed:6f:28:07:b6:7c:bd:9a:f8:b6:d2:0c:e2: 4f:87:24:5f:01:36:c7:73:c6:e7:0d:d0:22:c2:be:8a:45:59: 75:3e:fd:8e:87:0c:0b:c2:93:7a:fd:9b:74:18:5f:1a:f4:ea: c6:04:91:56:d7:3d:3c:97:33:86:79:68:3d:4d:12:21:07:b1: 2e:b1:a1:c0:ab:9c:18:22:22:76:68:4a:df:ad:a4:90:98:86: 74:a1:5f:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjr3vMM36fAbUZerAe2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTg4YWRmZDE2NDQ1YTJhMDE0ZTAxMmU3MzliYjgxMmZl OWNkMGUwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD EyhmZWYyMDU3NDJhODZiZGM2MzYyNWExODUyMWE1MTI1MzVmOGI1OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW1iNU8bE8QjlNBSxOJA1HUTXqeA l6R6b4Z8eiH3yfu2dSWSqhTQU9ierwNWH25jlJLFcOAuaqT3TF4obJBcd9WHGD6T Myl5a4tR4lAYB/8duqxkqZgWmxOYHQ1Oin4qFVqrxAhU6ptEDKe1ymD+9kPLqGpG f96qG5ZvnCLpBm2eau96xnDdnc6KgrcdOOET7PXH545TKe1IXu09MxgZrsjH2mI0 g2M1GYQN993sdsWsILzr/sZq2C11QV8oQ4jKo3ZDaEk/qDC3hC7YRs0FPaYkIHs4 CzlJGc8CNPFxrhvEKI3Y1k66Mq94lc+VuulWNmYyhLxjMO4D0ywAIcZanwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7yBXQqhr3GNiWhhSGlElNfi1j5MB8GA1UdIwQY MBaAFAYYit/RZEWioBTgEuc5u4Ev6c0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEt ZGY2Y2FiNGU0NWI0LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEtZGY2Y2FiNGU0NWI0 LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohmyloxD Tz7wF9xOsANjYjBRcdpftJ6ouhNPKfbMe22pN/fUx0llEe8vy4mDDg4Pk015633n emtQdQCL+xyObr+KPNrhuXXZeZ0MssDrjGNiObdwFEh2l+qvbHdePFDXgwGUudpI POTXYePqTmxI4WfFJHTrvIh6qU9ns8qQXLuWlenthvg7+bbr8KvEMfpi6CTPsM67 akljmj2yQYY9oOOTdrhvVpftbygHtny9mvi20gziT4ckXwE2x3PG5w3QIsK+ikVZ dT79jocMC8KTev2bdBhfGvTqxgSRVtc9PJczhnloPU0SIQexLrGhwKucGCIidmhK 362kkJiGdKFf5A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:45 2025 by rpki-client