This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json) Hash identifier: 1meMy/PIIQU02BD/Jur7ZTWWTsp4F/gCs1R3E/02xmA= Subject key identifier: EB:7B:C9:23:9D:38:D8:30:30:EE:35:8B:B1:24:5C:EA:57:30:95:6E Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2 Certificate serial: 019B19166B159989AE406252FB8D4617B5E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 19:00:58 +0000 Manifest this update: Sat 13 Dec 2025 19:00:58 +0000 Manifest next update: Sun 14 Dec 2025 19:00:58 +0000 Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: 7jEfsMiOUuXfb6HknyPtEL954Zk4862DVInulPciC3w=) 2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=) 3: gNi743mJaJJJpWWUxpf7RubXOek.roa (hash: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:6b:15:99:89:ae:40:62:52:fb:8d:46:17:b5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2 Validity Not Before: Dec 13 19:00:58 2025 GMT Not After : Dec 14 19:00:58 2025 GMT Subject: CN=eb7bc9239d38d83030ee358bb1245cea5730956e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:83:6b:4f:33:0b:09:fd:7c:3e:19:fb:c7: b6:84:30:3b:1c:87:a3:45:ee:70:3a:a0:54:f2:86: d5:bf:10:06:fb:80:cc:0a:aa:b1:cc:fa:37:d4:d2: 72:60:20:20:d0:da:0b:06:00:db:cc:3b:b6:f9:97: ad:d9:d0:21:c7:67:fb:e8:7c:2f:b9:82:b5:00:51: 8f:7d:92:aa:9f:b4:b5:c3:81:0e:a1:17:30:14:cd: e4:e1:59:4a:b9:ba:24:0b:db:1f:18:dc:14:6c:dc: ef:0f:22:ac:52:f1:3f:83:45:ad:df:46:79:45:14: 63:c9:da:bb:d4:eb:6a:93:2a:10:c4:76:7d:55:e4: 29:2d:0d:46:b9:3f:85:c3:18:3c:83:40:97:b4:cf: 20:98:cb:e1:b9:b5:8e:8f:b4:a5:e3:36:87:e0:7a: a8:83:2f:3d:7e:65:6a:13:92:ad:02:51:41:5d:68: 81:e4:af:9a:e8:55:90:0a:d2:01:c3:0b:de:17:e1: a9:b0:56:e4:da:04:aa:85:75:a1:16:89:bc:65:af: 9b:c8:2e:41:6e:5c:ad:6f:26:8f:01:ef:7b:b5:12: 1a:bc:ec:c2:2c:2b:ee:ec:0e:f2:d2:81:6f:77:ff: af:8c:a0:d6:03:35:07:8c:15:a1:cd:3d:be:a2:f9: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7B:C9:23:9D:38:D8:30:30:EE:35:8B:B1:24:5C:EA:57:30:95:6E X509v3 Authority Key Identifier: keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:20:b6:d1:c2:7c:53:04:9a:c7:34:07:f5:92:eb:12:b8: d8:b5:a3:ee:94:7d:86:24:cd:0b:1f:1e:ee:6b:d1:f7:4f:84: ed:27:96:e0:2f:e8:99:f2:02:ca:43:5c:d2:b1:86:31:59:5b: b9:35:9f:bd:a6:59:17:10:df:39:0b:64:8a:07:f3:22:d5:9d: eb:d3:cf:de:5b:0f:fd:97:a1:60:cb:20:8c:d5:05:87:5c:08: 13:31:9b:d1:3e:d5:63:39:6e:e6:ea:7a:14:e3:fd:a6:a1:97: 9e:3a:37:5a:3b:cb:2e:d7:ab:e2:12:07:a8:8a:b1:55:6e:df: 35:c3:80:84:06:e6:a2:21:cc:59:b5:37:dc:a8:d3:39:ef:2b: 37:26:99:a4:ba:62:a2:83:3a:79:30:ce:c7:05:f9:46:f3:18: 81:2f:d2:6c:b7:3c:40:7d:12:2b:fe:38:af:1e:15:dc:6d:45: 80:53:d4:a2:23:25:a7:43:02:86:93:0c:fb:e7:2f:0e:b4:81: a7:b7:c8:ca:ea:ef:48:1e:c7:05:44:8b:0a:0c:c3:a3:c8:05: c1:67:9b:32:d1:e4:b7:43:77:fa:ea:33:e2:62:46:3a:6d:30: 82:5e:9e:3a:05:69:3b:a8:a2:c3:ba:0c:5a:8c:9b:0a:75:5b: cd:a6:db:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFmsVmYmuQGJS+41GF7XoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky NTdkZjIwHhcNMjUxMjEzMTkwMDU4WhcNMjUxMjE0MTkwMDU4WjAzMTEwLwYDVQQD EyhlYjdiYzkyMzlkMzhkODMwMzBlZTM1OGJiMTI0NWNlYTU3MzA5NTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJKDa08zCwn9fD4Z+8e2hDA7HIej Re5wOqBU8obVvxAG+4DMCqqxzPo31NJyYCAg0NoLBgDbzDu2+Zet2dAhx2f76Hwv uYK1AFGPfZKqn7S1w4EOoRcwFM3k4VlKubokC9sfGNwUbNzvDyKsUvE/g0Wt30Z5 RRRjydq71OtqkyoQxHZ9VeQpLQ1GuT+Fwxg8g0CXtM8gmMvhubWOj7Sl4zaH4Hqo gy89fmVqE5KtAlFBXWiB5K+a6FWQCtIBwwveF+GpsFbk2gSqhXWhFom8Za+byC5B blytbyaPAe97tRIavOzCLCvu7A7y0oFvd/+vjKDWAzUHjBWhzT2+ovllCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt7ySOdONgwMO41i7EkXOpXMJVuMB8GA1UdIwQY MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI20gttHC fFMEmsc0B/WS6xK42LWj7pR9hiTNCx8e7mvR90+E7SeW4C/omfICykNc0rGGMVlb uTWfvaZZFxDfOQtkigfzItWd69PP3lsP/ZehYMsgjNUFh1wIEzGb0T7VYzlu5up6 FOP9pqGXnjo3WjvLLter4hIHqIqxVW7fNcOAhAbmoiHMWbU33KjTOe8rNyaZpLpi ooM6eTDOxwX5RvMYgS/SbLc8QH0SK/44rx4V3G1FgFPUoiMlp0MChpMM++cvDrSB p7fIyurvSB7HBUSLCgzDo8gFwWebMtHkt0N3+uoz4mJGOm0wgl6eOgVpO6iiw7oM WoybCnVbzabbBA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:06 2025 by rpki-client