This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json) Hash identifier: cNo9mh9XqPSt0oiWfF31eYJp7GhaHnQSgBhUUkYuW0c= Subject key identifier: 2C:81:E1:6E:E3:87:99:59:05:7A:27:A5:85:37:27:F1:EA:69:2D:80 Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6 Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6 Certificate serial: 019B5ABF778A6A67A0390FE9B741F714B021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 13:00:55 +0000 Manifest this update: Fri 26 Dec 2025 13:00:55 +0000 Manifest next update: Sat 27 Dec 2025 13:00:55 +0000 Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: G93f+H8Uxb+TEmdk4X0E3HebxASVWokvzQ30f2hY2Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:77:8a:6a:67:a0:39:0f:e9:b7:41:f7:14:b0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6 Validity Not Before: Dec 26 13:00:55 2025 GMT Not After : Dec 27 13:00:55 2025 GMT Subject: CN=2c81e16ee3879959057a27a5853727f1ea692d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:af:ad:f6:d0:e3:76:94:8b:b1:02:67:84: e5:54:a2:7c:3a:17:97:f3:1a:fc:ad:76:9c:78:aa: 81:81:89:dd:7d:3b:c8:cb:dd:f6:fc:30:51:4f:db: ec:bc:10:23:1d:7c:0f:dd:66:3d:ab:7e:7f:16:91: fd:f2:08:ee:6e:fb:ca:8b:29:21:cf:ee:a2:73:d5: 0c:15:c2:a5:44:98:cb:6e:eb:a4:a7:a4:eb:68:ad: 91:cd:a2:64:0d:07:5b:bd:85:7c:f2:cf:52:e9:27: be:88:42:bc:3b:d4:f8:27:03:8c:6b:8a:f5:79:36: 56:18:ff:9a:25:19:2e:56:47:a0:bb:e7:75:cd:c3: fc:d3:07:82:34:fa:be:9f:27:d9:74:19:9e:d8:89: 86:6b:43:6c:d6:97:a5:ee:9c:5a:bb:59:1e:0a:ed: 3a:7a:ab:94:ec:c9:65:96:ec:06:8d:43:9d:ba:bc: 4b:05:99:28:b0:51:23:1f:d1:91:62:f7:b5:a5:4e: df:14:81:e6:b7:79:94:dd:18:d9:f8:de:49:cf:72: 24:ce:2c:30:6a:85:6d:e7:b6:09:8b:8b:29:98:3e: c5:60:2c:bf:9b:b7:d1:b7:e5:8f:30:7e:87:ed:39: fb:78:b3:59:24:8b:a4:4d:54:6a:9f:bd:a3:06:a4: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:81:E1:6E:E3:87:99:59:05:7A:27:A5:85:37:27:F1:EA:69:2D:80 X509v3 Authority Key Identifier: keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1f:12:7f:c7:fd:12:3b:cf:c2:6a:75:80:0e:5b:dd:8c:0e: 1d:07:d8:2f:b7:31:b2:8b:29:7b:21:70:1e:f5:78:15:67:d1: e5:30:70:d3:aa:88:e9:9a:ee:21:c0:e7:34:84:04:9d:30:2e: 51:43:ee:ba:85:e0:f2:ce:8b:7e:96:90:48:8b:71:d9:28:a7: fc:68:54:98:75:af:57:51:4f:9a:31:d1:7f:eb:8e:e5:b9:5f: 8a:d2:fe:ae:e7:a2:58:4f:13:c9:92:fd:be:a7:b9:b1:85:07: 23:33:3d:20:a2:22:9c:5b:4e:ff:18:89:ab:d9:fe:11:a0:40: a9:54:36:b7:39:5c:8e:86:5e:77:cb:fc:6b:b3:a4:b8:c0:f9: 3f:ee:08:fb:89:00:80:69:f0:c9:3d:9e:6d:60:d2:df:18:b8: 8e:23:f3:af:3b:67:8b:47:1d:92:7f:7e:bc:7c:15:d4:d3:29: 44:3b:7d:bc:9e:07:9e:df:5a:5d:a9:d4:4f:24:9f:64:94:d1: 04:88:0b:ed:02:66:7a:8e:e7:47:0a:17:92:7a:eb:c4:3d:50: cd:da:af:85:bf:5d:27:0f:c6:cc:a9:56:4e:24:cf:47:33:01: 47:2b:0d:6c:3f:e1:91:b2:59:36:03:e4:9f:45:f9:e4:24:a5: f3:70:eb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3eKamegOQ/pt0H3FLAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2M5MzAxYmYzZDJlMTU2MGNmYWY3ZWRjNDFhN2MzZWM4 YTE2YTYwHhcNMjUxMjI2MTMwMDU1WhcNMjUxMjI3MTMwMDU1WjAzMTEwLwYDVQQD EygyYzgxZTE2ZWUzODc5OTU5MDU3YTI3YTU4NTM3MjdmMWVhNjkyZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRmvrfbQ43aUi7ECZ4TlVKJ8OheX 8xr8rXaceKqBgYndfTvIy932/DBRT9vsvBAjHXwP3WY9q35/FpH98gjubvvKiykh z+6ic9UMFcKlRJjLbuukp6TraK2RzaJkDQdbvYV88s9S6Se+iEK8O9T4JwOMa4r1 eTZWGP+aJRkuVkegu+d1zcP80weCNPq+nyfZdBme2ImGa0Ns1pel7pxau1keCu06 equU7MllluwGjUOdurxLBZkosFEjH9GRYve1pU7fFIHmt3mU3RjZ+N5Jz3Ikziww aoVt57YJi4spmD7FYCy/m7fRt+WPMH6H7Tn7eLNZJIukTVRqn72jBqRntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyB4W7jh5lZBXonpYU3J/HqaS2AMB8GA1UdIwQY MBaAFAY8kwG/PS4VYM+vftxBp8PsihamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAt YjFkNzM3OTdhMjlmLzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAtYjFkNzM3OTdhMjlm LzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR8Sf8f9 EjvPwmp1gA5b3YwOHQfYL7cxsospeyFwHvV4FWfR5TBw06qI6ZruIcDnNIQEnTAu UUPuuoXg8s6LfpaQSItx2Sin/GhUmHWvV1FPmjHRf+uO5blfitL+rueiWE8TyZL9 vqe5sYUHIzM9IKIinFtO/xiJq9n+EaBAqVQ2tzlcjoZed8v8a7OkuMD5P+4I+4kA gGnwyT2ebWDS3xi4jiPzrztni0cdkn9+vHwV1NMpRDt9vJ4Hnt9aXanUTySfZJTR BIgL7QJmeo7nRwoXknrrxD1Qzdqvhb9dJw/GzKlWTiTPRzMBRysNbD/hkbJZNgPk n0X55CSl83DrYg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:16 2025 by rpki-client