This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json) Hash identifier: Ih9lopXg5GzYPuzT1wdLYHoQVD9jH/8+wGYjEf9xHSc= Subject key identifier: 7E:9C:E2:A6:38:58:75:97:AA:8A:1C:47:A2:60:6A:93:7B:A6:F5:25 Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Certificate serial: 019B0EC9DA319F85DAE3C3D24E048E52E77B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 19:01:08 +0000 Manifest this update: Thu 11 Dec 2025 19:01:08 +0000 Manifest next update: Fri 12 Dec 2025 19:01:08 +0000 Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=) 2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: do+uixFPPEX0cD3hWbbmiZqhI9B7tjKmYr4e9bFYNIc=) 3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:da:31:9f:85:da:e3:c3:d2:4e:04:8e:52:e7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Validity Not Before: Dec 11 19:01:08 2025 GMT Not After : Dec 12 19:01:08 2025 GMT Subject: CN=7e9ce2a638587597aa8a1c47a2606a937ba6f525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:41:dd:b6:bf:06:d4:a6:80:83:85:d5:a6: b5:00:14:bd:11:be:53:15:38:1a:a7:29:a0:86:03: 47:04:cb:11:ef:db:83:28:51:2f:7c:72:0b:68:ab: 56:cf:86:31:d9:2a:8f:3a:7f:23:35:e8:16:a9:cd: 94:85:41:e7:3c:4f:89:52:5e:ee:e8:46:39:57:f4: e3:1d:54:75:4c:d2:94:25:1a:44:09:26:ed:4e:01: 29:d3:7c:78:59:47:0f:9b:aa:cd:ed:a5:32:1f:1a: 2a:c3:82:79:e8:5a:44:1d:d2:56:d8:10:ee:af:75: 60:36:72:11:fa:3a:49:19:7f:7b:e0:d9:a6:8f:47: cf:18:88:18:28:f2:8b:47:7a:b4:16:67:be:e8:6e: a4:11:be:20:19:b8:30:46:84:8b:9c:24:38:b2:df: a0:ff:c4:72:87:d2:d3:d8:fe:65:b9:41:0b:19:ae: d6:f1:b6:e6:b3:bb:65:53:0e:cc:39:71:9c:d8:6a: 64:77:c6:9a:0f:fb:8c:72:f7:68:e9:7d:b0:09:f5: 9a:15:6e:b3:21:ac:73:9b:e5:4d:7f:33:e5:63:e8: ec:23:00:2a:62:af:6f:0e:14:b7:07:d6:98:75:69: bb:d9:3e:6b:35:37:5c:27:6c:9e:94:15:ca:1e:d5: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:E2:A6:38:58:75:97:AA:8A:1C:47:A2:60:6A:93:7B:A6:F5:25 X509v3 Authority Key Identifier: keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:43:b4:a3:83:53:e8:8b:27:10:14:a1:98:bc:67:14:e9:8a: c3:30:cb:69:53:d9:3d:d3:22:d6:06:2e:5f:f4:25:6f:19:68: da:0d:89:c9:05:92:9d:7d:d1:be:14:42:ec:1d:c9:7c:44:57: 0d:3f:fc:0e:12:ef:87:a4:7d:db:25:43:a8:44:59:5e:17:89: d4:78:54:5a:33:f7:1c:63:cd:c1:e5:d8:c9:8a:b6:c4:c9:5e: e5:f7:6e:65:1f:c3:17:4a:e5:fa:c3:f3:79:79:a6:ab:7f:22: 11:cf:69:d6:01:2e:7c:a4:d4:fd:c5:c9:a2:78:8e:55:c0:5e: 41:b8:bf:5e:d9:94:b4:6d:da:11:90:96:59:d9:8e:ef:b8:08: 4d:c2:56:a8:c6:76:2c:01:df:28:45:87:82:d5:8f:78:c6:20: d2:dc:66:dc:75:b2:01:3c:53:57:83:0a:cf:32:1f:0f:20:82: 8b:43:4c:1b:69:c3:6e:49:0c:f1:4e:16:da:8c:05:e7:ad:2c: a1:51:6b:81:e7:e5:48:ad:02:e7:7e:35:b5:45:45:09:75:60: d2:2a:ea:86:20:be:ea:3e:87:70:67:11:7d:a5:e7:5c:59:c2: 5a:4a:7e:b7:65:07:f4:d8:79:18:93:4e:c0:02:70:b1:17:b6: ae:ce:04:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOydoxn4Xa48PSTgSOUud7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl ZTgwYWQwHhcNMjUxMjExMTkwMTA4WhcNMjUxMjEyMTkwMTA4WjAzMTEwLwYDVQQD Eyg3ZTljZTJhNjM4NTg3NTk3YWE4YTFjNDdhMjYwNmE5MzdiYTZmNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR5B3ba/BtSmgIOF1aa1ABS9Eb5T FTgapymghgNHBMsR79uDKFEvfHILaKtWz4Yx2SqPOn8jNegWqc2UhUHnPE+JUl7u 6EY5V/TjHVR1TNKUJRpECSbtTgEp03x4WUcPm6rN7aUyHxoqw4J56FpEHdJW2BDu r3VgNnIR+jpJGX974Nmmj0fPGIgYKPKLR3q0Fme+6G6kEb4gGbgwRoSLnCQ4st+g /8Ryh9LT2P5luUELGa7W8bbms7tlUw7MOXGc2Gpkd8aaD/uMcvdo6X2wCfWaFW6z Iaxzm+VNfzPlY+jsIwAqYq9vDhS3B9aYdWm72T5rNTdcJ2yelBXKHtWHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6c4qY4WHWXqoocR6JgapN7pvUlMB8GA1UdIwQY MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4 LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUO0o4NT 6IsnEBShmLxnFOmKwzDLaVPZPdMi1gYuX/Qlbxlo2g2JyQWSnX3RvhRC7B3JfERX DT/8DhLvh6R92yVDqERZXheJ1HhUWjP3HGPNweXYyYq2xMle5fduZR/DF0rl+sPz eXmmq38iEc9p1gEufKTU/cXJoniOVcBeQbi/XtmUtG3aEZCWWdmO77gITcJWqMZ2 LAHfKEWHgtWPeMYg0txm3HWyATxTV4MKzzIfDyCCi0NMG2nDbkkM8U4W2owF560s oVFrgeflSK0C5341tUVFCXVg0irqhiC+6j6HcGcRfaXnXFnCWkp+t2UH9Nh5GJNO wAJwsRe2rs4E7g== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:40 2025 by rpki-client