This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json) Hash identifier: Ozbk+Av4VdIw/YdUCEkZgGhI6NEqz/yHD96ay6v7cC4= Subject key identifier: 6A:4D:FF:47:6F:97:8A:59:FE:A7:64:47:E5:99:65:E9:C6:58:0B:66 Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Certificate serial: 019B0EC9F9BADECE48A2EC445AB7B4958FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft Manifest number: 0F3B Signing time: Thu 11 Dec 2025 19:01:15 +0000 Manifest this update: Thu 11 Dec 2025 19:01:15 +0000 Manifest next update: Fri 12 Dec 2025 19:01:15 +0000 Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=) 2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: TftKong9jzfh7Fr2LXNwC+6nwE3Ff6VnGgDsNOAlE9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:f9:ba:de:ce:48:a2:ec:44:5a:b7:b4:95:8f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Validity Not Before: Dec 11 19:01:15 2025 GMT Not After : Dec 12 19:01:15 2025 GMT Subject: CN=6a4dff476f978a59fea76447e59965e9c6580b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:97:f1:44:e8:4b:7d:0b:7e:bb:69:b4:2f: 8f:88:c8:de:3d:14:73:93:19:90:83:22:e9:23:01: cc:de:ec:6f:2e:6c:d2:3b:1b:0a:fe:d5:52:11:85: 3e:8d:b7:6b:70:ef:9d:76:d8:70:1a:e1:8f:b5:01: 98:3b:f3:ab:2a:c7:79:5a:63:fd:8b:41:16:25:17: f3:18:53:b1:78:20:e5:44:d0:f6:8c:2b:0c:82:7c: be:f7:d2:4a:5d:7e:c9:b7:9e:49:9e:4a:29:fc:b0: dc:02:0f:a5:e2:8f:7c:e7:0d:6a:f8:b4:c7:77:cf: 42:fa:ef:1a:54:43:c0:00:df:d0:9a:38:b0:fb:87: 4b:c2:0f:4e:03:0b:af:32:fe:cd:f6:a1:07:4d:fb: 79:f1:67:30:f0:85:aa:6d:6b:dd:82:06:e9:bd:ad: 23:9a:73:c4:4f:46:5f:b2:ec:54:37:ad:0f:70:00: 5e:71:d3:77:47:b0:4c:51:0e:b4:55:bd:59:04:9a: 34:3d:c4:8c:c4:73:d2:3f:19:5c:57:8f:1e:57:f4: cb:67:3c:09:f0:96:19:7c:3e:d9:7e:40:a2:5d:19: 2c:0a:16:92:47:ad:6c:89:f1:50:5e:5e:8d:b7:e8: f8:ec:2f:d5:d0:96:87:0d:6d:93:eb:c1:08:71:9e: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4D:FF:47:6F:97:8A:59:FE:A7:64:47:E5:99:65:E9:C6:58:0B:66 X509v3 Authority Key Identifier: keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0d:6d:a3:d8:e9:01:24:5a:94:b6:ab:d6:0e:e8:8a:13:7a: f7:de:7e:7a:50:b6:71:34:2b:4e:cb:fe:00:f6:b6:7e:17:73: a9:ab:41:f4:72:75:71:aa:96:9d:c5:71:03:38:c0:ff:64:40: ce:81:fe:0c:7f:8a:4d:68:6a:9e:f3:7e:f3:8d:db:50:5b:fb: 7e:29:7e:5c:84:56:41:b7:61:14:87:8e:ba:8e:7f:02:77:fa: 75:71:1b:c9:56:a1:1f:67:73:ca:8c:9a:20:3d:22:82:35:a1: 3e:6e:f5:12:52:51:c0:08:82:0b:87:77:b1:fd:54:b0:df:a7: e6:b0:c5:6d:a4:db:8e:0c:8a:28:cf:91:18:ef:1e:be:9d:99: 44:89:56:b1:ed:2b:c8:df:3a:c1:50:72:a0:ff:1a:f9:bb:95: cb:4d:30:28:54:8f:60:56:e5:91:3f:86:ca:1d:16:5a:5e:0b: fc:a8:20:c5:4a:56:b2:e4:dc:6e:7e:ed:51:df:79:ab:19:23: b5:45:7c:35:87:5a:0a:84:2d:89:85:84:6f:82:63:a0:e9:fd: c3:e0:e6:5b:f3:1f:81:b6:f6:5e:6a:89:4d:8d:bc:3d:13:ac: 05:84:82:d0:8d:ee:e3:6f:c2:59:b0:47:7f:73:2c:4b:de:a0: 5f:32:20:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyfm63s5IouxEWre0lY/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz NmUyNmQwHhcNMjUxMjExMTkwMTE1WhcNMjUxMjEyMTkwMTE1WjAzMTEwLwYDVQQD Eyg2YTRkZmY0NzZmOTc4YTU5ZmVhNzY0NDdlNTk5NjVlOWM2NTgwYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn2X8UToS30LfrtptC+PiMjePRRz kxmQgyLpIwHM3uxvLmzSOxsK/tVSEYU+jbdrcO+ddthwGuGPtQGYO/OrKsd5WmP9 i0EWJRfzGFOxeCDlRND2jCsMgny+99JKXX7Jt55Jnkop/LDcAg+l4o985w1q+LTH d89C+u8aVEPAAN/Qmjiw+4dLwg9OAwuvMv7N9qEHTft58Wcw8IWqbWvdggbpva0j mnPET0ZfsuxUN60PcABecdN3R7BMUQ60Vb1ZBJo0PcSMxHPSPxlcV48eV/TLZzwJ 8JYZfD7ZfkCiXRksChaSR61sifFQXl6Nt+j47C/V0JaHDW2T68EIcZ4TGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpN/0dvl4pZ/qdkR+WZZenGWAtmMB8GA1UdIwQY MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA1to9jp ASRalLar1g7oihN6995+elC2cTQrTsv+APa2fhdzqatB9HJ1caqWncVxAzjA/2RA zoH+DH+KTWhqnvN+843bUFv7fil+XIRWQbdhFIeOuo5/Anf6dXEbyVahH2dzyoya ID0igjWhPm71ElJRwAiCC4d3sf1UsN+n5rDFbaTbjgyKKM+RGO8evp2ZRIlWse0r yN86wVByoP8a+buVy00wKFSPYFblkT+Gyh0WWl4L/KggxUpWsuTcbn7tUd95qxkj tUV8NYdaCoQtiYWEb4JjoOn9w+DmW/Mfgbb2XmqJTY28PROsBYSC0I3u42/CWbBH f3MsS96gXzIg7Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:34 2025 by rpki-client