This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json) Hash identifier: 1OxXG5MjnbZHwmZADF9tqm7OULtzTa2B9Czr3aEUbC4= Subject key identifier: BF:E2:5D:3C:1D:BD:9C:0E:82:D7:FA:C5:74:53:20:B1:27:E5:9D:52 Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c Certificate serial: 019B1A28A5AEE0488C4800C507DC6F15A5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft Manifest number: 045E Signing time: Sun 14 Dec 2025 00:00:29 +0000 Manifest this update: Sun 14 Dec 2025 00:00:29 +0000 Manifest next update: Mon 15 Dec 2025 00:00:29 +0000 Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: NIxgBTOF7S7UN2efBYpVNfxiJ+yzqpuVqGxVQNzd6nc=) 2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:a5:ae:e0:48:8c:48:00:c5:07:dc:6f:15:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c Validity Not Before: Dec 14 00:00:29 2025 GMT Not After : Dec 15 00:00:29 2025 GMT Subject: CN=bfe25d3c1dbd9c0e82d7fac5745320b127e59d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:8e:2b:3d:88:96:2e:bf:08:13:27:3c:a6: 41:a5:5c:d1:11:95:c9:68:fb:e7:39:4a:06:9d:73: e6:da:87:f4:83:cc:b7:95:17:00:bb:56:3f:65:ec: 8e:48:44:eb:48:34:9f:66:6c:1a:2d:95:1f:33:5e: d8:cc:5d:e7:7d:0e:bf:86:b7:e0:1f:c0:b5:b4:ff: 55:33:c1:d9:08:bf:6f:f7:85:51:dc:ea:cc:89:a4: d7:4f:b7:4d:72:d5:ba:88:27:ac:20:12:3e:fd:88: 75:91:a3:ad:fb:24:48:a9:4f:3e:39:ae:be:1a:c1: e3:4c:a3:a4:0a:d4:ed:d2:9f:e5:c5:58:3a:29:b2: 60:b9:9d:b0:0a:56:d4:2a:63:6d:c8:66:62:66:35: 81:c6:ad:e9:aa:33:7d:6d:33:1c:31:43:82:53:a9: a1:a6:c4:46:40:32:a1:83:7f:ed:93:8d:5f:d5:6d: 2a:57:e2:43:32:e3:f3:4b:a8:d3:6b:bc:47:2f:b1: da:6f:b5:b5:ec:94:1d:36:a9:27:68:d7:f6:ae:c2: ae:0b:f4:9b:45:f3:39:62:f9:92:7a:7e:9a:e4:98: ee:33:db:d0:df:18:e4:ec:86:4d:c1:42:ae:23:fb: 70:10:54:78:7a:1d:f7:fb:da:b8:d9:97:34:32:dd: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E2:5D:3C:1D:BD:9C:0E:82:D7:FA:C5:74:53:20:B1:27:E5:9D:52 X509v3 Authority Key Identifier: keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:71:5c:8a:87:3e:0e:80:e1:78:88:33:c8:4f:15:e0:ff: f8:dd:10:4b:b8:ed:17:05:21:2c:ed:e7:76:de:80:6b:6a:98: 2a:9c:51:18:c5:d6:f8:23:2f:4e:96:dc:c3:03:89:ef:ac:da: 0b:0c:c2:87:18:f6:95:45:c8:88:e9:c1:b7:5d:93:07:79:52: 5e:3e:f4:87:62:d0:93:ab:6c:2e:c4:a6:6d:3f:44:04:a6:3d: 42:6e:18:a6:36:ca:fc:aa:f9:63:b4:aa:c2:ce:db:f1:0e:9e: 46:cd:fa:93:34:31:38:52:a7:98:8f:89:f4:20:f4:37:4c:04: 65:ae:8f:10:4c:3f:dc:74:99:20:5a:8f:6a:7a:b6:eb:e1:24: 7d:0e:14:d2:5f:2c:b8:61:a6:ec:07:08:f5:64:f7:0f:48:0d: a0:09:fc:3c:21:5e:9f:26:3f:d1:4c:ed:8d:f6:f0:ce:79:1f: eb:d8:5e:d3:4f:ed:4f:7f:ad:60:ff:80:52:b4:8e:54:66:85: cf:5a:50:6e:c8:47:6a:36:ff:46:28:6e:5d:8f:36:7b:5c:86: b6:19:40:71:bd:6e:f8:ef:3d:4a:fd:48:3f:e0:07:04:1a:7a: 68:70:85:68:ef:2e:54:33:a5:09:c8:13:61:08:17:86:29:b2: 36:d5:4d:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKKWu4EiMSADFB9xvFaXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjQ4YjUyZDIzZWJkMjM3YjhhOGI2ZTYzZWRkMDJkZmVl Zjk4NGMwHhcNMjUxMjE0MDAwMDI5WhcNMjUxMjE1MDAwMDI5WjAzMTEwLwYDVQQD EyhiZmUyNWQzYzFkYmQ5YzBlODJkN2ZhYzU3NDUzMjBiMTI3ZTU5ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTyOKz2Ili6/CBMnPKZBpVzREZXJ aPvnOUoGnXPm2of0g8y3lRcAu1Y/ZeyOSETrSDSfZmwaLZUfM17YzF3nfQ6/hrfg H8C1tP9VM8HZCL9v94VR3OrMiaTXT7dNctW6iCesIBI+/Yh1kaOt+yRIqU8+Oa6+ GsHjTKOkCtTt0p/lxVg6KbJguZ2wClbUKmNtyGZiZjWBxq3pqjN9bTMcMUOCU6mh psRGQDKhg3/tk41f1W0qV+JDMuPzS6jTa7xHL7Hab7W17JQdNqknaNf2rsKuC/Sb RfM5YvmSen6a5JjuM9vQ3xjk7IZNwUKuI/twEFR4eh33+9q42Zc0Mt0P3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/iXTwdvZwOgtf6xXRTILEn5Z1SMB8GA1UdIwQY MBaAFAcki1LSPr0je4qLbmPt0C3+75hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYt MWIyZTQxMDVlYjdlLzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYtMWIyZTQxMDVlYjdl LzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLZxXIqH Pg6A4XiIM8hPFeD/+N0QS7jtFwUhLO3ndt6Aa2qYKpxRGMXW+CMvTpbcwwOJ76za CwzChxj2lUXIiOnBt12TB3lSXj70h2LQk6tsLsSmbT9EBKY9Qm4YpjbK/Kr5Y7Sq ws7b8Q6eRs36kzQxOFKnmI+J9CD0N0wEZa6PEEw/3HSZIFqPanq26+EkfQ4U0l8s uGGm7AcI9WT3D0gNoAn8PCFenyY/0Uztjfbwznkf69he00/tT3+tYP+AUrSOVGaF z1pQbshHajb/RihuXY82e1yGthlAcb1u+O89Sv1IP+AHBBp6aHCFaO8uVDOlCcgT YQgXhimyNtVNcA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:24 2025 by rpki-client