This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json) Hash identifier: QIX9NYMdxraqcdJu0ilQroHYT7Ie13OZMlGHsg01Uxg= Subject key identifier: FE:A6:87:E9:AA:DF:0B:3B:2C:46:AB:61:2E:F5:40:64:93:A9:6F:A3 Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0 Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0 Certificate serial: 019B405B2D622A7D88671F0B5006D6D7D24F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:15 +0000 Manifest this update: Sun 21 Dec 2025 10:01:15 +0000 Manifest next update: Mon 22 Dec 2025 10:01:15 +0000 Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: HeKQjr8I3QjIZJVAnjgrtskUNCWvfqTif8Qm7aTYBPk=) 2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=) 3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:2d:62:2a:7d:88:67:1f:0b:50:06:d6:d7:d2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0 Validity Not Before: Dec 21 10:01:15 2025 GMT Not After : Dec 22 10:01:15 2025 GMT Subject: CN=fea687e9aadf0b3b2c46ab612ef5406493a96fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:f0:70:3b:da:73:83:5e:b3:6a:5c:7e:e6: ef:73:28:e4:33:17:f7:a9:9f:5c:f8:8f:d2:95:69: 9b:41:fc:f9:d5:30:c8:cb:d8:a8:d2:18:59:3a:62: 14:cf:f1:85:bf:77:c8:87:4c:6d:e6:72:fd:a6:13: 4d:eb:35:50:5e:f5:8c:44:73:7e:ca:56:9e:41:fb: 1a:94:c0:81:50:45:ec:de:e5:6a:d0:0d:3e:03:20: dd:98:76:f2:70:eb:15:da:a5:a0:6b:89:f7:7d:ae: bb:a0:99:13:3f:8f:14:23:d4:7f:0b:1f:d1:e3:64: f3:2d:3e:a2:44:c1:04:9b:cc:4f:91:8f:7b:e0:7d: 37:33:91:7d:1c:a7:fa:13:11:a1:8d:39:0a:c4:64: 75:b1:11:be:02:1e:7b:f1:d8:f0:82:58:6f:fc:ef: a5:0a:78:4f:11:a0:47:2c:28:54:59:0b:e5:14:e5: 32:8e:dc:f8:20:f5:ca:f5:c7:27:2e:b5:bc:2a:4b: d3:62:00:f8:03:e7:cf:15:c5:11:de:6f:e8:71:7a: 3a:78:88:c3:f9:22:89:f2:03:c7:e2:30:9f:df:ed: 71:e4:a7:af:8d:6e:b8:ec:c8:c3:eb:36:e3:5e:2f: 5f:d6:64:03:86:3f:dc:1a:e2:84:c5:c2:a4:55:ef: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A6:87:E9:AA:DF:0B:3B:2C:46:AB:61:2E:F5:40:64:93:A9:6F:A3 X509v3 Authority Key Identifier: keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b2:38:48:09:9f:35:f2:a6:98:95:75:93:72:df:85:c4:da: b2:c8:d1:43:6e:62:55:c5:d5:51:25:e6:2e:4c:a4:e2:07:0f: c4:5f:19:22:5f:a6:11:52:62:51:90:2c:b0:e6:a3:14:58:54: f6:cf:10:d9:f9:5e:b2:27:cc:d6:75:74:92:09:af:e7:59:ab: 99:a6:d3:86:d3:16:44:64:29:25:5d:1f:ff:a1:fc:65:8d:02: 2a:21:4f:22:4c:22:1b:39:4c:5e:08:4d:91:d3:58:8f:af:44: 0d:6b:7f:af:aa:d6:84:a6:28:f8:b2:67:2e:85:04:d8:71:60: a2:cc:4e:9b:42:82:b7:4a:c4:84:1c:9a:a9:11:b7:aa:5c:ee: d1:e0:ce:c1:e8:a5:90:4c:60:4d:ff:de:42:cf:01:c6:6d:a0: c2:09:a3:b2:7e:f8:af:27:30:b9:12:b0:52:ee:f6:75:60:da: fc:16:d7:b4:ec:14:61:f9:7a:0d:a7:a8:9d:a6:20:ae:05:c9: b2:8d:e5:82:a5:21:06:d4:ad:e4:14:df:23:59:45:f4:af:7f: 77:8e:b8:95:f1:47:a8:49:38:c5:5b:18:1f:d5:35:c4:44:8d: 08:4f:bb:79:d9:45:27:f8:63:d5:cd:7a:b2:4b:b7:96:c8:13: d8:8d:d7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWy1iKn2IZx8LUAbW19JPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5 ZGI3ZDAwHhcNMjUxMjIxMTAwMTE1WhcNMjUxMjIyMTAwMTE1WjAzMTEwLwYDVQQD EyhmZWE2ODdlOWFhZGYwYjNiMmM0NmFiNjEyZWY1NDA2NDkzYTk2ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnHwcDvac4Nes2pcfubvcyjkMxf3 qZ9c+I/SlWmbQfz51TDIy9io0hhZOmIUz/GFv3fIh0xt5nL9phNN6zVQXvWMRHN+ ylaeQfsalMCBUEXs3uVq0A0+AyDdmHbycOsV2qWga4n3fa67oJkTP48UI9R/Cx/R 42TzLT6iRMEEm8xPkY974H03M5F9HKf6ExGhjTkKxGR1sRG+Ah578djwglhv/O+l CnhPEaBHLChUWQvlFOUyjtz4IPXK9ccnLrW8KkvTYgD4A+fPFcUR3m/ocXo6eIjD +SKJ8gPH4jCf3+1x5KevjW647MjD6zbjXi9f1mQDhj/cGuKExcKkVe8KjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6mh+mq3ws7LEarYS71QGSTqW+jMB8GA1UdIwQY MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7I4SAmf NfKmmJV1k3LfhcTassjRQ25iVcXVUSXmLkyk4gcPxF8ZIl+mEVJiUZAssOajFFhU 9s8Q2flesifM1nV0kgmv51mrmabThtMWRGQpJV0f/6H8ZY0CKiFPIkwiGzlMXghN kdNYj69EDWt/r6rWhKYo+LJnLoUE2HFgosxOm0KCt0rEhByaqRG3qlzu0eDOweil kExgTf/eQs8Bxm2gwgmjsn74rycwuRKwUu72dWDa/BbXtOwUYfl6DaeonaYgrgXJ so3lgqUhBtSt5BTfI1lF9K9/d464lfFHqEk4xVsYH9U1xESNCE+7edlFJ/hj1c16 sku3lsgT2I3XLg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:57 2025 by rpki-client