This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json) Hash identifier: qhNsaIrb7pWcWBJs9Up0mIAq1pOOEZqzHxoxybSJg18= Subject key identifier: 71:23:77:41:E6:C2:F7:8A:EA:D0:81:F0:47:01:AC:C5:F0:49:54:03 Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e Certificate serial: 019B19F20C2ACD2790A15CE19745EDC45FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft Manifest number: 0439 Signing time: Sat 13 Dec 2025 23:00:51 +0000 Manifest this update: Sat 13 Dec 2025 23:00:51 +0000 Manifest next update: Sun 14 Dec 2025 23:00:51 +0000 Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: CHkFcNlZK+JFFpHBOvRxnJB25lJIZWVtiuyellBpOME=) 2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:0c:2a:cd:27:90:a1:5c:e1:97:45:ed:c4:5f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e Validity Not Before: Dec 13 23:00:51 2025 GMT Not After : Dec 14 23:00:51 2025 GMT Subject: CN=71237741e6c2f78aead081f04701acc5f0495403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:93:89:44:c6:d1:67:58:76:ac:fe:1d:d2: 5a:c6:f8:45:8b:66:cb:21:36:a9:1e:ec:04:b5:66: 8f:f6:4a:85:61:5a:1f:a1:bc:a8:b8:d5:9f:c2:20: cb:c9:99:1f:49:23:b6:42:8a:36:eb:95:6d:fe:e5: 30:5c:a4:5d:63:75:cb:15:80:f0:65:c5:12:f1:fc: e5:19:1b:b3:df:c1:67:f4:ea:73:5f:e4:11:65:17: 1b:33:00:07:6a:15:fd:fd:08:aa:dc:09:24:e5:1a: 2a:58:d4:44:54:00:a3:71:a9:20:6d:3b:32:2a:d4: 25:32:9e:0e:df:1e:1a:e4:35:05:29:5c:c3:1f:36: a8:67:7b:70:02:ce:b8:99:0d:ae:58:e1:06:55:12: fa:e5:a4:fb:66:ef:81:1a:fd:cf:e2:2e:30:4c:8c: 5e:07:4a:d3:6a:65:11:e3:37:e4:5f:32:b3:91:5d: 1f:61:a0:d1:70:59:cc:d5:f4:8d:ac:17:c6:d1:9c: 68:3b:6f:a4:fc:cc:8a:6b:98:27:b3:8c:58:2c:ce: f3:c4:6e:e6:8c:d4:e4:9a:48:26:70:d0:db:ed:b3: 98:e1:ad:ac:63:43:73:6d:0d:ec:f5:1c:2c:b7:06: 6d:49:17:a5:f6:f4:5a:97:49:4e:e1:36:0a:a4:9b: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:77:41:E6:C2:F7:8A:EA:D0:81:F0:47:01:AC:C5:F0:49:54:03 X509v3 Authority Key Identifier: keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1b:fa:38:8c:88:10:be:8d:9f:d9:33:fa:0f:e7:a1:73:00: 30:f5:5a:70:3b:56:98:58:e2:70:ad:7a:57:d0:07:b8:1b:e6: 5c:57:89:81:6f:b0:dd:fb:72:91:22:cf:5c:96:aa:a9:ec:19: 69:8e:b5:a3:ed:f6:41:8c:b6:ef:7c:c7:4f:ec:35:3e:0c:a2: 7d:7e:46:e4:fa:7d:6f:e6:34:a5:f3:ab:d3:53:ea:ef:6b:e6: 53:94:57:69:1d:8b:49:1f:ee:bf:3c:c3:f6:4f:3d:4d:b9:74: b9:e2:3f:2a:89:7e:32:1b:34:04:f7:71:4a:a2:20:e4:63:44: 7b:1d:5b:4c:ea:fa:8d:9f:96:db:e2:fd:d3:32:de:3d:b7:50: 8d:ba:ed:35:23:af:18:90:ac:70:79:f5:07:3e:b7:1c:2f:34: 9e:69:aa:10:a9:f1:d8:2f:fe:64:e0:8a:25:7c:8c:30:64:73: d3:b9:14:8d:b1:0e:61:c2:de:d4:d1:4d:77:c6:ed:29:04:67: 2d:22:2f:30:41:83:91:d1:74:d3:ef:0b:4b:80:c4:27:d6:b9: ec:99:28:04:29:ac:c6:19:67:da:8f:78:28:7b:b0:be:c3:b2: 32:16:cd:e2:68:59:d8:4c:0a:b0:92:82:d1:32:bf:68:cd:bd: 37:3a:7f:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8gwqzSeQoVzhl0XtxF/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTg4YWRmZDE2NDQ1YTJhMDE0ZTAxMmU3MzliYjgxMmZl OWNkMGUwHhcNMjUxMjEzMjMwMDUxWhcNMjUxMjE0MjMwMDUxWjAzMTEwLwYDVQQD Eyg3MTIzNzc0MWU2YzJmNzhhZWFkMDgxZjA0NzAxYWNjNWYwNDk1NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJmTiUTG0WdYdqz+HdJaxvhFi2bL ITapHuwEtWaP9kqFYVofobyouNWfwiDLyZkfSSO2Qoo265Vt/uUwXKRdY3XLFYDw ZcUS8fzlGRuz38Fn9OpzX+QRZRcbMwAHahX9/Qiq3Akk5RoqWNREVACjcakgbTsy KtQlMp4O3x4a5DUFKVzDHzaoZ3twAs64mQ2uWOEGVRL65aT7Zu+BGv3P4i4wTIxe B0rTamUR4zfkXzKzkV0fYaDRcFnM1fSNrBfG0ZxoO2+k/MyKa5gns4xYLM7zxG7m jNTkmkgmcNDb7bOY4a2sY0NzbQ3s9RwstwZtSRel9vRal0lO4TYKpJsgwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEjd0HmwveK6tCB8EcBrMXwSVQDMB8GA1UdIwQY MBaAFAYYit/RZEWioBTgEuc5u4Ev6c0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEt ZGY2Y2FiNGU0NWI0LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xY2YwYTgtMWJlMi00OWZhLTgxNTEtZGY2Y2FiNGU0NWI0 LzEvQmhpSzM5RmtSYUtnRk9BUzV6bTdnU19welE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRv6OIyI EL6Nn9kz+g/noXMAMPVacDtWmFjicK16V9AHuBvmXFeJgW+w3ftykSLPXJaqqewZ aY61o+32QYy273zHT+w1PgyifX5G5Pp9b+Y0pfOr01Pq72vmU5RXaR2LSR/uvzzD 9k89Tbl0ueI/Kol+Mhs0BPdxSqIg5GNEex1bTOr6jZ+W2+L90zLePbdQjbrtNSOv GJCscHn1Bz63HC80nmmqEKnx2C/+ZOCKJXyMMGRz07kUjbEOYcLe1NFNd8btKQRn LSIvMEGDkdF00+8LS4DEJ9a57JkoBCmsxhln2o94KHuwvsOyMhbN4mhZ2EwKsJKC 0TK/aM29Nzp/xg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:15 2025 by rpki-client