This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json) Hash identifier: 8HlKMecdfqBlPCKV+1NZIMmE04CMB6wMAVA5dc/UUro= Subject key identifier: 2F:05:8B:83:CD:94:7C:08:9F:A2:41:7A:76:06:6C:8B:A0:89:63:64 Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65 Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665 Certificate serial: 019B59AC955851D07D25DC076F01062DEA09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: Yk4UZ/hPboZIcQSPS5/oL82VdlBAOFQyzlj0ieS7lMU=) 2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:95:58:51:d0:7d:25:dc:07:6f:01:06:2d:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665 Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=2f058b83cd947c089fa2417a76066c8ba0896364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:a1:3c:82:69:7b:5d:a5:fd:42:f2:0f:f0: 54:87:6a:3b:3f:41:b1:aa:0d:13:ec:24:d0:7a:d8: 89:bd:36:5b:a6:dd:23:4b:58:93:d7:3a:fe:4d:79: da:cc:a2:c3:29:4e:28:44:66:39:f9:ee:af:0f:2a: bc:c6:18:61:1f:d0:bc:86:c5:4c:98:37:70:70:f3: a8:65:ef:60:98:0b:2a:a5:45:fd:61:a0:c8:cc:08: 21:83:c7:86:73:fc:a6:4b:2a:c2:b9:e3:ad:51:56: 7b:9d:cd:86:e3:61:31:e2:88:a7:a2:3c:d7:83:f4: 9b:59:49:c0:6a:a5:af:90:39:0b:7a:0f:ae:27:f2: 4d:b9:93:b3:da:f5:76:91:10:75:8a:04:ca:d4:ab: 52:f0:ff:0d:3a:3e:8a:dd:5e:e9:29:01:0f:b6:61: 2e:87:7d:e2:65:ad:29:94:5d:63:40:e1:7a:b8:cb: c5:52:4a:c2:60:9c:ca:00:5a:cd:68:3b:8f:23:16: 06:53:33:d5:ff:c7:ca:ef:f7:3d:d5:76:64:63:a1: d6:14:47:30:a2:e5:c9:f1:bc:9d:1b:04:c3:28:db: 5a:7a:1c:25:95:25:b4:b4:3b:9c:ff:fe:7e:65:73: a3:f6:df:9d:77:1e:be:70:93:b6:74:9c:fb:49:58: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:8B:83:CD:94:7C:08:9F:A2:41:7A:76:06:6C:8B:A0:89:63:64 X509v3 Authority Key Identifier: keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2d:a6:e0:b7:e0:68:32:16:3d:82:68:2a:d1:d6:63:b3:93: c6:bb:97:82:ea:c3:ef:1d:4d:cd:5c:b5:f7:e2:42:2a:bf:25: 4a:3b:c3:a4:3b:d8:62:fb:32:51:ce:e7:76:1c:aa:4d:03:a2: 78:6e:14:4e:5f:4e:4c:34:36:78:68:4b:ba:74:52:10:93:6d: d7:49:72:aa:ec:5f:30:80:d7:83:89:cc:fa:21:57:6a:3e:5f: 73:c7:85:ca:bd:01:6f:68:26:e0:f0:47:1e:bc:27:8f:55:5e: 6e:19:55:7a:07:67:a0:a9:10:16:9e:23:39:94:83:8a:27:96: fe:3e:07:96:e7:af:3b:8f:02:17:db:86:a3:87:20:01:e8:a2: 17:5a:46:1c:3a:c8:b8:2c:f7:cd:57:fe:f1:43:55:a3:82:bb: ad:72:ff:a3:19:9e:7b:fa:5e:e0:a7:89:61:27:7d:9e:a6:6d: 59:e9:b7:cb:97:3d:69:01:16:78:87:fe:46:a1:19:7b:8f:71: da:a5:8b:dd:a8:aa:69:67:cf:42:01:02:5f:2e:03:ed:38:cc: ce:1c:c1:d2:38:5f:91:62:db:62:f8:fb:04:d0:7c:aa:0a:18: ba:4d:e9:22:54:a4:5f:da:89:a7:b1:4f:42:17:e0:ab:5f:36: b4:e4:10:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJVYUdB9JdwHbwEGLeoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl YjE2NjUwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD EygyZjA1OGI4M2NkOTQ3YzA4OWZhMjQxN2E3NjA2NmM4YmEwODk2MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrShPIJpe12l/ULyD/BUh2o7P0Gx qg0T7CTQetiJvTZbpt0jS1iT1zr+TXnazKLDKU4oRGY5+e6vDyq8xhhhH9C8hsVM mDdwcPOoZe9gmAsqpUX9YaDIzAghg8eGc/ymSyrCueOtUVZ7nc2G42Ex4oinojzX g/SbWUnAaqWvkDkLeg+uJ/JNuZOz2vV2kRB1igTK1KtS8P8NOj6K3V7pKQEPtmEu h33iZa0plF1jQOF6uMvFUkrCYJzKAFrNaDuPIxYGUzPV/8fK7/c91XZkY6HWFEcw ouXJ8bydGwTDKNtaehwllSW0tDuc//5+ZXOj9t+ddx6+cJO2dJz7SVgUtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8Fi4PNlHwIn6JBenYGbIugiWNkMB8GA1UdIwQY MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy2m4Lfg aDIWPYJoKtHWY7OTxruXgurD7x1NzVy19+JCKr8lSjvDpDvYYvsyUc7ndhyqTQOi eG4UTl9OTDQ2eGhLunRSEJNt10lyquxfMIDXg4nM+iFXaj5fc8eFyr0Bb2gm4PBH Hrwnj1VebhlVegdnoKkQFp4jOZSDiieW/j4HluevO48CF9uGo4cgAeiiF1pGHDrI uCz3zVf+8UNVo4K7rXL/oxmee/pe4KeJYSd9nqZtWem3y5c9aQEWeIf+RqEZe49x 2qWL3aiqaWfPQgECXy4D7TjMzhzB0jhfkWLbYvj7BNB8qgoYuk3pIlSkX9qJp7FP Qhfgq182tOQQRw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:20 2025 by rpki-client