This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json) Hash identifier: N+Sa/XPrzZkrst02BXH0m3vhvOqcgUx4FjRgBL8l6+8= Subject key identifier: 34:35:71:56:91:24:E4:4D:41:F6:B6:60:62:34:A3:EB:92:8A:04:FF Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Certificate serial: 019B3CB55281ACE532DC97194417DAA9DF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 17:01:14 +0000 Manifest this update: Sat 20 Dec 2025 17:01:14 +0000 Manifest next update: Sun 21 Dec 2025 17:01:14 +0000 Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: LtJfYGXtzSdr+SsvLmk8W8t5YiuzgozVFRkO5XWG7sE=) 2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:52:81:ac:e5:32:dc:97:19:44:17:da:a9:df:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Validity Not Before: Dec 20 17:01:14 2025 GMT Not After : Dec 21 17:01:14 2025 GMT Subject: CN=343571569124e44d41f6b6606234a3eb928a04ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:b6:24:26:9c:ea:e7:6b:e8:ac:0b:c4:1e: 10:8d:09:a8:09:0b:95:69:ce:d0:5b:a9:3b:a8:20: e0:4f:6e:ec:ce:71:ba:ec:9f:c5:ed:03:79:22:84: 6b:85:b0:df:25:42:f2:65:1e:c4:23:50:fe:b8:6e: f8:76:4d:75:8b:fb:e3:88:a6:35:9a:03:31:b9:0c: 3e:6c:b0:41:9e:2e:1e:20:7a:6f:ec:dc:08:d3:22: c0:87:70:f9:87:68:60:56:11:95:0d:8b:ce:7d:71: 44:d4:51:18:57:14:c9:88:4d:10:c9:fa:f8:a9:51: 68:21:05:35:86:94:3e:18:c5:9e:10:69:46:b2:cf: f0:47:4e:d9:bb:37:27:1d:3e:f8:76:38:3a:58:50: 2e:6e:da:d6:b3:37:63:9e:ad:9c:89:3d:92:b5:19: 19:98:db:b4:55:25:38:87:7c:f5:56:27:0e:95:1f: e0:ed:d2:d4:1d:ae:c8:b3:0f:9b:56:8a:91:de:42: c1:a7:00:6a:c3:e3:24:91:56:60:cb:55:1c:95:89: aa:e2:92:94:70:76:2a:1f:14:1a:36:95:e6:8f:b6: 86:38:b1:9d:75:6b:0f:76:3f:c4:a2:2b:8b:90:fd: 37:be:45:f5:77:e2:4a:86:07:4d:5f:fd:2b:15:c9: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:71:56:91:24:E4:4D:41:F6:B6:60:62:34:A3:EB:92:8A:04:FF X509v3 Authority Key Identifier: keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cd:42:ca:56:00:9c:b0:8d:5d:5c:78:0e:f5:83:bf:3c:f0: b0:48:46:30:6a:4e:a7:b7:33:dc:7f:ae:87:3d:65:39:6d:e0: b8:69:b9:82:50:50:25:41:81:df:c8:ec:05:48:18:d7:b1:01: 8e:b2:e6:f1:85:1d:a8:44:ef:01:15:cc:73:bd:2e:92:63:1c: 63:1f:df:23:62:f3:6d:49:f6:4d:67:36:70:82:94:c5:ab:21: f2:74:6a:33:d2:5b:04:fc:6d:7a:49:52:a8:34:9c:66:f1:d1: 74:89:e3:cc:06:a4:9f:e1:56:12:f0:f8:c9:ed:38:b4:09:e2: 0f:73:c7:26:90:e5:ed:36:73:7d:1a:e7:69:58:4c:11:a1:24: bc:75:8a:7a:a0:aa:b6:68:79:d1:b0:d6:bc:22:54:f3:b5:dd: 02:da:73:f3:91:7a:17:49:20:4d:52:88:49:da:37:5f:85:b5: 4e:c4:58:f4:2a:ba:c5:16:53:41:32:72:b5:c5:49:d6:d9:0b: 03:72:f5:e5:6a:7e:d4:7c:89:cc:df:e3:2f:48:b9:eb:29:fa: c2:3c:fb:93:61:76:3c:69:de:5c:b0:94:2e:b6:1e:20:b4:a0: 30:26:79:5d:e1:dd:03:39:19:13:1c:4d:9a:29:c2:e1:8d:76: db:a6:ef:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVKBrOUy3JcZRBfaqd8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk YmMyNjYwHhcNMjUxMjIwMTcwMTE0WhcNMjUxMjIxMTcwMTE0WjAzMTEwLwYDVQQD EygzNDM1NzE1NjkxMjRlNDRkNDFmNmI2NjA2MjM0YTNlYjkyOGEwNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6a2JCac6udr6KwLxB4QjQmoCQuV ac7QW6k7qCDgT27sznG67J/F7QN5IoRrhbDfJULyZR7EI1D+uG74dk11i/vjiKY1 mgMxuQw+bLBBni4eIHpv7NwI0yLAh3D5h2hgVhGVDYvOfXFE1FEYVxTJiE0Qyfr4 qVFoIQU1hpQ+GMWeEGlGss/wR07ZuzcnHT74djg6WFAubtrWszdjnq2ciT2StRkZ mNu0VSU4h3z1VicOlR/g7dLUHa7Isw+bVoqR3kLBpwBqw+MkkVZgy1UclYmq4pKU cHYqHxQaNpXmj7aGOLGddWsPdj/EoiuLkP03vkX1d+JKhgdNX/0rFclAfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ1cVaRJORNQfa2YGI0o+uSigT/MB8GA1UdIwQY MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt MDQ5MjUxOTRjNWU2LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2 LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmc1CylYA nLCNXVx4DvWDvzzwsEhGMGpOp7cz3H+uhz1lOW3guGm5glBQJUGB38jsBUgY17EB jrLm8YUdqETvARXMc70ukmMcYx/fI2LzbUn2TWc2cIKUxash8nRqM9JbBPxteklS qDScZvHRdInjzAakn+FWEvD4ye04tAniD3PHJpDl7TZzfRrnaVhMEaEkvHWKeqCq tmh50bDWvCJU87XdAtpz85F6F0kgTVKISdo3X4W1TsRY9Cq6xRZTQTJytcVJ1tkL A3L15Wp+1HyJzN/jL0i56yn6wjz7k2F2PGneXLCULrYeILSgMCZ5XeHdAzkZExxN minC4Y1226bv+w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:26 2025 by rpki-client