This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft File: BhJClTAYPA_O3K258VBVg5LwG4k.mft (raw, json) Hash identifier: /c7AnTnq4FWuvUEHWa+nMNllLhiP+u3GG3Sc4QqkeJs= Subject key identifier: 8D:D3:88:41:41:B7:80:08:86:48:A0:09:73:9C:EE:6A:3A:1D:65:B7 Authority key identifier: 06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89 Certificate issuer: /CN=0612429530183c0fcedcadb9f150558392f01b89 Certificate serial: 019B5A51B4033B0D295BD9566FEB345836C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft Manifest number: 013C Signing time: Fri 26 Dec 2025 11:01:02 +0000 Manifest this update: Fri 26 Dec 2025 11:01:02 +0000 Manifest next update: Sat 27 Dec 2025 11:01:02 +0000 Files and hashes: 1: BhJClTAYPA_O3K258VBVg5LwG4k.crl (hash: O3Mfa2rpls0pNxTsohtazp7OipCUAUHFDnLTHepdXtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:b4:03:3b:0d:29:5b:d9:56:6f:eb:34:58:36:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0612429530183c0fcedcadb9f150558392f01b89 Validity Not Before: Dec 26 11:01:02 2025 GMT Not After : Dec 27 11:01:02 2025 GMT Subject: CN=8dd3884141b780088648a009739cee6a3a1d65b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d6:29:1b:8e:45:0f:32:12:84:83:19:16:5c: c3:d2:94:67:48:89:17:39:60:cd:0e:51:02:c2:f6: 01:6d:b2:9f:b7:5e:9a:6e:d4:0f:88:b2:db:64:6b: 5f:81:7a:b3:cd:f5:3d:ce:c6:68:7b:d9:aa:37:5b: 6f:c9:fb:c8:4e:2e:b9:9b:9f:4a:fd:1c:32:75:ac: fc:fb:da:9c:af:0e:c9:ea:b0:cc:14:8f:fe:1d:04: c3:12:03:a1:d8:6f:da:f0:f9:2b:ba:1f:9d:37:12: 27:c3:d3:a3:c0:46:d1:7b:73:30:7d:48:15:65:f5: b5:39:08:62:e2:3b:b0:d5:3c:0d:33:78:e8:74:7c: 1e:0e:9e:7d:04:2a:a5:5a:d4:3a:64:47:28:82:64: 4e:fb:7e:e7:15:b1:69:0c:91:da:94:5e:4b:a7:92: d1:00:57:71:b6:ed:c6:bf:65:84:e1:e6:5a:8a:f9: 5c:e0:bb:dd:a9:28:80:c2:41:c3:8b:04:f3:ff:6f: df:51:b7:82:31:fe:70:f8:38:d5:bb:fd:48:32:a3: 11:18:fe:1a:b5:63:05:5f:6d:e3:2d:80:14:3a:82: 97:82:0f:d6:f4:2d:5e:ea:03:21:ef:ad:ea:ca:11: 90:9c:c5:91:e0:a5:2b:13:19:0b:a9:56:89:f0:ee: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D3:88:41:41:B7:80:08:86:48:A0:09:73:9C:EE:6A:3A:1D:65:B7 X509v3 Authority Key Identifier: keyid:06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:16:bf:03:77:47:10:f0:0d:2d:e1:ae:12:04:2e:eb:23: 08:6a:90:22:97:83:a2:b5:95:52:41:50:7f:1d:8d:26:ae:36: cb:4c:1b:a9:b0:c2:41:3d:96:87:ca:26:b6:17:3f:77:de:14: 5f:5d:72:98:24:7d:20:2b:ea:9b:c8:0b:20:e8:2a:6c:2f:1e: 5d:26:21:b4:0a:17:c0:c4:ab:f4:17:86:a4:0d:2e:74:4a:59: 42:40:3a:57:00:55:8e:cc:20:2a:fb:2d:29:06:95:bd:76:80: aa:de:c0:04:98:96:97:c1:1b:8c:c0:c4:4e:8c:88:60:7e:32: e2:cc:27:90:99:c2:5f:f3:b4:df:4b:3e:fe:03:b8:2a:1c:5a: 77:83:5d:12:08:e6:23:35:59:e0:66:1b:80:48:5d:74:3e:22: 28:aa:5c:16:0b:37:59:77:a6:10:b9:9c:f1:48:c2:c6:57:69: 88:09:54:4f:3d:46:b1:7e:3d:7d:e6:f6:10:fe:d3:03:0b:ab: bb:ce:2b:09:82:77:50:cc:0f:4e:8b:7e:db:ef:92:d2:ca:4c: 30:a6:c1:26:66:e5:6c:f8:9b:32:d2:64:5b:17:a7:7b:35:b6: d5:6c:3a:04:d8:d5:75:47:a4:95:c2:a5:b8:d8:4c:85:5d:b7: 1e:ad:b0:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbQDOw0pW9lWb+s0WDbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTI0Mjk1MzAxODNjMGZjZWRjYWRiOWYxNTA1NTgzOTJm MDFiODkwHhcNMjUxMjI2MTEwMTAyWhcNMjUxMjI3MTEwMTAyWjAzMTEwLwYDVQQD Eyg4ZGQzODg0MTQxYjc4MDA4ODY0OGEwMDk3MzljZWU2YTNhMWQ2NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dYpG45FDzIShIMZFlzD0pRnSIkX OWDNDlECwvYBbbKft16abtQPiLLbZGtfgXqzzfU9zsZoe9mqN1tvyfvITi65m59K /Rwydaz8+9qcrw7J6rDMFI/+HQTDEgOh2G/a8Pkruh+dNxInw9OjwEbRe3MwfUgV ZfW1OQhi4juw1TwNM3jodHweDp59BCqlWtQ6ZEcogmRO+37nFbFpDJHalF5Lp5LR AFdxtu3Gv2WE4eZaivlc4LvdqSiAwkHDiwTz/2/fUbeCMf5w+DjVu/1IMqMRGP4a tWMFX23jLYAUOoKXgg/W9C1e6gMh763qyhGQnMWR4KUrExkLqVaJ8O4OoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3TiEFBt4AIhkigCXOc7mo6HWW3MB8GA1UdIwQY MBaAFAYSQpUwGDwPztytufFQVYOS8BuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAt ZTNiM2ZjYzVlYzIzLzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xYzM3ZmEtMDVlOC00NDExLWExNDAtZTNiM2ZjYzVlYzIz LzEvQmhKQ2xUQVlQQV9PM0syNThWQlZnNUx3RzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXUWvwN3 RxDwDS3hrhIELusjCGqQIpeDorWVUkFQfx2NJq42y0wbqbDCQT2Wh8omthc/d94U X11ymCR9ICvqm8gLIOgqbC8eXSYhtAoXwMSr9BeGpA0udEpZQkA6VwBVjswgKvst KQaVvXaAqt7ABJiWl8EbjMDEToyIYH4y4swnkJnCX/O030s+/gO4Khxad4NdEgjm IzVZ4GYbgEhddD4iKKpcFgs3WXemELmc8UjCxldpiAlUTz1GsX49feb2EP7TAwur u84rCYJ3UMwPTot+2++S0spMMKbBJmblbPibMtJkWxenezW21Ww6BNjVdUeklcKl uNhMhV23Hq2wIA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:21 2025 by rpki-client