This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json) Hash identifier: kWen7R0XBNiXgZaHUd8jj9fYtoAypNaZeXh2ENm8NSw= Subject key identifier: 75:39:57:71:19:E5:DC:12:18:44:DF:B3:7D:34:99:E0:05:B7:A2:45 Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Certificate serial: 019B32D6CAEBC65CF7568B9E199B0EA09652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft Manifest number: 108A Signing time: Thu 18 Dec 2025 19:01:35 +0000 Manifest this update: Thu 18 Dec 2025 19:01:35 +0000 Manifest next update: Fri 19 Dec 2025 19:01:35 +0000 Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=) 2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: SRq4oOg4DJga00IJrh1pulheKILvfhLAr7wu6rLR8L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ca:eb:c6:5c:f7:56:8b:9e:19:9b:0e:a0:96:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6 Validity Not Before: Dec 18 19:01:35 2025 GMT Not After : Dec 19 19:01:35 2025 GMT Subject: CN=7539577119e5dc121844dfb37d3499e005b7a245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:6c:1e:5e:ad:69:9c:2e:3e:0f:4b:19:a8: a6:8e:b5:2f:78:b0:57:e9:53:c9:cd:75:28:74:41: 72:57:47:fc:55:47:91:25:a2:9b:05:bd:98:ea:58: c5:36:f4:78:16:ba:b1:cb:ae:f7:30:3d:ad:a1:5c: 87:a3:26:92:06:50:32:2f:73:9a:29:61:51:4b:ee: 99:3d:5f:90:16:3d:45:f4:7a:45:41:3f:77:1d:b7: 7b:f8:46:8e:d7:8c:65:16:eb:3b:2e:77:cf:77:31: 96:b3:1d:31:c1:59:b1:a3:b4:64:0b:51:3e:55:f7: 76:ee:57:30:54:68:67:69:01:90:42:78:c7:fb:ab: 9e:db:90:44:c5:24:ed:e7:dd:31:c9:df:e6:25:d0: 3d:a1:6e:e8:af:42:eb:9f:84:fa:25:e8:9b:83:47: 2c:02:ba:61:c3:6c:06:bb:04:38:87:05:51:a0:53: 19:af:c6:77:bf:e8:ad:47:c6:87:fa:86:c1:b7:0f: 63:02:6a:44:4a:9a:78:40:a9:b0:55:22:c9:0e:ac: 3f:43:6b:86:25:b3:0b:07:c0:8b:4d:e6:a9:5f:3c: a7:5d:22:5e:fc:56:8b:b8:aa:87:ed:f4:90:d6:6d: 78:af:21:e1:78:e5:42:09:15:9d:b3:d6:4c:c8:64: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:57:71:19:E5:DC:12:18:44:DF:B3:7D:34:99:E0:05:B7:A2:45 X509v3 Authority Key Identifier: keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:8e:70:e6:64:f3:5c:dd:89:dc:82:b8:be:94:02:3a:9f: 51:a0:7d:46:11:63:2a:38:c4:72:6f:f4:11:5c:72:ec:db:46: d7:4e:ef:9e:2a:41:d1:2e:4c:9b:d3:99:35:91:f6:14:35:cc: 1d:0b:00:cb:54:6b:e7:de:c9:e6:58:0a:d3:3b:86:50:12:c4: 19:4c:8e:d7:a0:eb:dc:eb:fd:c8:f4:c1:05:fb:a8:9f:6b:ca: 77:0e:f1:4a:32:91:e5:d9:81:8a:23:e9:4c:48:76:56:6a:5a: 74:ef:b8:95:65:e7:16:19:88:6c:56:0a:eb:f4:2b:20:c7:b7: 9c:8f:6c:66:eb:f7:5a:b6:cb:e6:67:0a:a8:cd:13:5d:97:38: f5:9f:0e:b8:b0:79:1d:bc:95:4c:c7:b2:09:54:68:ea:00:ec: 03:5b:16:f4:66:c7:c9:66:dd:3b:ce:01:7b:1e:10:26:b6:7a: f0:2b:e5:c8:6e:2e:08:84:37:e9:61:55:2e:92:82:03:da:39: e6:70:6c:a4:d1:fe:4f:ff:d4:c4:e8:63:8d:74:6d:10:b7:43: 46:74:de:90:f2:89:f2:69:5e:06:78:25:ad:d8:9d:d1:b5:c5: 8a:b0:8f:64:8e:cf:d2:5c:4f:25:87:29:2c:73:48:5b:fc:b2: 44:a5:3c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1srrxlz3VoueGZsOoJZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTg3MGZjMTg1NGEzYjA5MzkzOGMwOWNmNjA2NTFiYTk5 M2ZmYzYwHhcNMjUxMjE4MTkwMTM1WhcNMjUxMjE5MTkwMTM1WjAzMTEwLwYDVQQD Eyg3NTM5NTc3MTE5ZTVkYzEyMTg0NGRmYjM3ZDM0OTllMDA1YjdhMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoktsHl6taZwuPg9LGaimjrUveLBX 6VPJzXUodEFyV0f8VUeRJaKbBb2Y6ljFNvR4Frqxy673MD2toVyHoyaSBlAyL3Oa KWFRS+6ZPV+QFj1F9HpFQT93Hbd7+EaO14xlFus7LnfPdzGWsx0xwVmxo7RkC1E+ Vfd27lcwVGhnaQGQQnjH+6ue25BExSTt590xyd/mJdA9oW7or0Lrn4T6Jeibg0cs Arphw2wGuwQ4hwVRoFMZr8Z3v+itR8aH+obBtw9jAmpESpp4QKmwVSLJDqw/Q2uG JbMLB8CLTeapXzynXSJe/FaLuKqH7fSQ1m14ryHheOVCCRWds9ZMyGTtyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU5V3EZ5dwSGETfs300meAFt6JFMB8GA1UdIwQY MBaAFKQYcPwYVKOwk5OMCc9gZRupk//GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYt NzljOGEyNDcyYTBjLzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYtNzljOGEyNDcyYTBj LzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVeOcOZk 81zdidyCuL6UAjqfUaB9RhFjKjjEcm/0EVxy7NtG107vnipB0S5Mm9OZNZH2FDXM HQsAy1Rr597J5lgK0zuGUBLEGUyO16Dr3Ov9yPTBBfuon2vKdw7xSjKR5dmBiiPp TEh2VmpadO+4lWXnFhmIbFYK6/QrIMe3nI9sZuv3WrbL5mcKqM0TXZc49Z8OuLB5 HbyVTMeyCVRo6gDsA1sW9GbHyWbdO84Bex4QJrZ68CvlyG4uCIQ36WFVLpKCA9o5 5nBspNH+T//UxOhjjXRtELdDRnTekPKJ8mleBnglrdid0bXFirCPZI7P0lxPJYcp LHNIW/yyRKU8kQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:40 2025 by rpki-client