This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json) Hash identifier: JS35V5yEK/RLSdN7PlMCP+eKbooI6cRrkf7yNombBt0= Subject key identifier: 08:8C:53:12:FB:BB:48:97:79:4B:B2:B0:3E:1C:5A:A3:C3:30:6D:EF Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Certificate serial: 019AEF75B7A66DF1F28B57DB66E25FE37E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft Manifest number: 0A1D Signing time: Fri 05 Dec 2025 17:01:00 +0000 Manifest this update: Fri 05 Dec 2025 17:01:00 +0000 Manifest next update: Sat 06 Dec 2025 17:01:00 +0000 Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=) 2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: I4zlMhv2tasGu4zU16H8P3J4Z395aEUY9Ssm4e6IKyA=) 3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:75:b7:a6:6d:f1:f2:8b:57:db:66:e2:5f:e3:7e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Validity Not Before: Dec 5 17:01:00 2025 GMT Not After : Dec 6 17:01:00 2025 GMT Subject: CN=088c5312fbbb4897794bb2b03e1c5aa3c3306def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:05:07:bb:8a:2c:bf:b1:2b:97:f9:53:44: 8e:3c:46:90:20:c6:2d:d8:43:5a:22:96:54:25:70: 69:62:fb:89:0f:6d:7f:9d:5a:6c:0c:44:72:d0:d9: 74:a5:6b:42:5d:12:af:90:a9:d5:0f:26:0c:56:44: 8a:cd:e3:8e:98:ab:f8:2b:94:40:ef:96:82:16:8b: fa:8c:30:61:36:55:27:3b:8c:c6:4c:d1:8f:c9:e9: a3:94:67:9d:66:d0:ef:58:66:07:d4:1c:f1:b7:df: f6:61:14:39:d4:35:a0:b3:f6:9a:94:11:27:f4:e9: dc:9c:17:36:e3:53:fa:04:93:3e:29:e0:e0:86:c5: bf:ec:0a:1d:c9:21:f4:bc:a0:ea:11:63:20:22:49: ce:f2:ea:2c:12:32:17:66:4f:d9:46:59:5d:60:81: c2:80:ac:43:37:aa:66:d1:41:cf:5d:ca:f9:26:ce: 1f:59:10:90:87:ba:e2:68:2f:ea:ff:02:d9:12:19: 73:e0:8e:37:ea:5a:13:41:40:f0:80:ba:10:f5:8a: ad:27:bf:b7:fc:7e:36:cf:6f:7f:2f:90:a0:e1:9a: 1e:52:fd:2e:8a:ef:5c:c8:a7:d0:04:74:c4:29:0f: 6a:13:4d:ea:24:08:78:19:15:6b:c8:b5:2f:ee:89: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8C:53:12:FB:BB:48:97:79:4B:B2:B0:3E:1C:5A:A3:C3:30:6D:EF X509v3 Authority Key Identifier: keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cd:74:20:32:a9:84:55:81:ca:26:04:a8:c7:4f:34:ce:da: fa:84:2d:ef:78:63:61:55:8d:92:5f:47:04:6a:ac:6d:45:eb: a0:89:32:b3:6c:4e:59:6f:25:24:c0:53:88:69:93:15:9c:18: 43:04:d8:10:40:d1:23:42:bd:5d:90:60:5e:96:5a:9a:1a:93: aa:62:97:73:ca:00:f4:18:c4:40:1a:5e:36:a2:2d:4a:71:7d: 1b:f5:88:5e:bd:cd:55:e8:0a:e3:9d:db:60:f7:9b:a8:ba:89: ce:60:4f:8c:1b:2d:5b:6b:bb:e1:39:22:55:d3:8f:c0:e1:d2: d5:53:b0:eb:35:ba:9a:37:a8:ea:51:38:a5:5b:46:5c:1b:2a: be:d2:eb:b3:1f:18:c6:8c:67:5a:12:19:e1:38:07:95:03:f8: 02:7a:20:d8:08:77:aa:6a:7e:e8:0f:f1:99:7e:9f:47:4a:16: dc:f9:e0:55:cf:d6:f3:79:1b:08:90:71:37:e9:ee:51:67:59: f7:1f:f4:20:5c:56:ee:c7:bd:2a:e6:67:38:70:67:2c:9e:23: 30:bb:4a:bf:7e:07:c1:cf:78:81:c0:4d:24:f8:a0:1e:0c:ff: fb:1a:cc:1a:8f:9b:ca:0b:89:42:31:2a:bd:bb:ec:ad:9f:7b: 96:6e:89:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdbembfHyi1fbZuJf4350MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3 NjA4ZjYwHhcNMjUxMjA1MTcwMTAwWhcNMjUxMjA2MTcwMTAwWjAzMTEwLwYDVQQD EygwODhjNTMxMmZiYmI0ODk3Nzk0YmIyYjAzZTFjNWFhM2MzMzA2ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFQFB7uKLL+xK5f5U0SOPEaQIMYt 2ENaIpZUJXBpYvuJD21/nVpsDERy0Nl0pWtCXRKvkKnVDyYMVkSKzeOOmKv4K5RA 75aCFov6jDBhNlUnO4zGTNGPyemjlGedZtDvWGYH1Bzxt9/2YRQ51DWgs/aalBEn 9OncnBc241P6BJM+KeDghsW/7AodySH0vKDqEWMgIknO8uosEjIXZk/ZRlldYIHC gKxDN6pm0UHPXcr5Js4fWRCQh7riaC/q/wLZEhlz4I436loTQUDwgLoQ9YqtJ7+3 /H42z29/L5Cg4ZoeUv0uiu9cyKfQBHTEKQ9qE03qJAh4GRVryLUv7olmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiMUxL7u0iXeUuysD4cWqPDMG3vMB8GA1UdIwQY MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3 LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV810IDKp hFWByiYEqMdPNM7a+oQt73hjYVWNkl9HBGqsbUXroIkys2xOWW8lJMBTiGmTFZwY QwTYEEDRI0K9XZBgXpZamhqTqmKXc8oA9BjEQBpeNqItSnF9G/WIXr3NVegK453b YPebqLqJzmBPjBstW2u74TkiVdOPwOHS1VOw6zW6mjeo6lE4pVtGXBsqvtLrsx8Y xoxnWhIZ4TgHlQP4Anog2Ah3qmp+6A/xmX6fR0oW3PngVc/W83kbCJBxN+nuUWdZ 9x/0IFxW7se9KuZnOHBnLJ4jMLtKv34Hwc94gcBNJPigHgz/+xrMGo+byguJQjEq vbvsrZ97lm6JJw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:45:36 2025 by rpki-client