This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json) Hash identifier: PgjILZfaog16seMVPB5ccvtgRUFq9oE+yaigUHNds3A= Subject key identifier: 79:5D:15:92:AD:C0:AF:38:87:8E:B0:CF:44:57:16:51:57:51:EB:C0 Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Certificate serial: 019B397D7BA58EB4F1CB49C74078E5EC6867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft Manifest number: 14A1 Signing time: Sat 20 Dec 2025 02:01:23 +0000 Manifest this update: Sat 20 Dec 2025 02:01:23 +0000 Manifest next update: Sun 21 Dec 2025 02:01:23 +0000 Files and hashes: 1: QgMdlf1ORmMjO3p07bMNw0KtDT8.roa (hash: lUvtRAtiQocAdClmm634qLmiwHU9zHgeeS2TA8kr2JQ=) 2: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: IOsvTFySZFwUXz1OffuJA9vkSkGFesDw8Iy+h1tcgwM=) 3: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=) 4: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:7b:a5:8e:b4:f1:cb:49:c7:40:78:e5:ec:68:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Validity Not Before: Dec 20 02:01:23 2025 GMT Not After : Dec 21 02:01:23 2025 GMT Subject: CN=795d1592adc0af38878eb0cf445716515751ebc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:6e:ad:4e:2e:7b:4f:cc:e5:e4:87:b1:59: 2e:c7:53:de:5d:21:04:3a:2e:a5:bc:c5:97:69:4d: 72:18:dc:14:48:e2:9b:d0:5f:71:7b:c4:73:1a:bd: 90:6d:55:f8:fa:da:6e:23:4b:25:c7:ec:43:ab:e0: 73:5b:41:6e:4f:21:eb:db:f1:ef:0e:8b:6d:35:bf: 40:ac:f0:08:66:23:89:5e:a2:29:9d:74:ec:48:ba: 82:b5:60:1e:58:33:0f:62:48:75:e5:75:3c:85:94: 6e:27:86:9b:1e:52:bb:5f:a7:f3:6d:cc:79:70:c8: cc:33:dc:0b:57:12:90:ce:b3:f3:36:d9:03:98:6c: 24:93:af:f3:bc:7d:c7:8b:11:7b:e5:56:49:73:90: 61:d7:e1:d3:6c:ef:95:24:a0:d0:b6:56:b7:20:3e: 1c:63:9f:42:6d:59:bc:89:82:4d:86:20:8c:ac:7e: 17:59:93:cb:be:4b:c6:1d:37:ae:42:75:70:68:c0: 1e:34:45:79:c9:b9:4c:8d:88:a8:c2:0a:df:d4:11: d9:bd:a8:53:64:4e:80:42:08:ce:56:c7:e8:ca:50: dd:f8:aa:a8:a7:52:22:a4:40:fa:df:4b:6d:fe:b6: 54:0a:84:7c:aa:c2:78:c1:87:50:c1:29:cc:40:5c: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:15:92:AD:C0:AF:38:87:8E:B0:CF:44:57:16:51:57:51:EB:C0 X509v3 Authority Key Identifier: keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3a:05:61:df:23:ee:1d:fd:99:3a:29:71:56:79:ce:e2:0b: 13:a5:3a:c3:6f:27:57:48:f0:d9:85:86:27:c3:9f:5c:34:ed: e3:16:2f:05:b7:be:73:fd:c8:45:8f:32:fe:15:e5:43:95:aa: 7b:dc:15:a2:b2:ad:04:be:7b:8f:9b:f6:25:a4:fb:2d:cb:d0: e0:d8:44:c9:cd:27:3e:b7:70:d9:3c:da:7b:39:61:8c:c8:4b: a8:8c:a8:33:1f:9a:f2:85:dd:79:10:8a:ea:86:09:2c:73:04: ce:21:9d:89:f8:b5:88:75:55:32:a2:b0:16:a4:cb:51:50:50: a8:d5:f7:ab:07:62:7c:7a:b9:cd:7d:b3:a9:ad:b2:6e:31:36: a3:43:0b:ef:8c:b5:d8:08:e2:c8:52:2b:a9:68:43:35:a6:d1: 69:c9:3c:dc:62:b4:47:b1:95:de:d0:e7:f8:01:9a:ee:b9:ac: 6c:05:7d:79:b3:07:08:91:15:24:7a:7c:e3:81:71:36:14:f2: f1:67:7f:35:3d:f4:9f:df:14:b1:f7:94:6b:e1:b4:e7:ad:70: 29:20:0d:5b:72:0b:f7:53:d3:45:a3:27:19:59:23:28:49:c2: b3:c5:0c:a7:48:7f:da:2a:cf:a8:d1:c9:fc:9b:74:8b:60:cb: 0c:b2:13:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fXuljrTxy0nHQHjl7GhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3 ZjIwZTUwHhcNMjUxMjIwMDIwMTIzWhcNMjUxMjIxMDIwMTIzWjAzMTEwLwYDVQQD Eyg3OTVkMTU5MmFkYzBhZjM4ODc4ZWIwY2Y0NDU3MTY1MTU3NTFlYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3FurU4ue0/M5eSHsVkux1PeXSEE Oi6lvMWXaU1yGNwUSOKb0F9xe8RzGr2QbVX4+tpuI0slx+xDq+BzW0FuTyHr2/Hv DottNb9ArPAIZiOJXqIpnXTsSLqCtWAeWDMPYkh15XU8hZRuJ4abHlK7X6fzbcx5 cMjMM9wLVxKQzrPzNtkDmGwkk6/zvH3HixF75VZJc5Bh1+HTbO+VJKDQtla3ID4c Y59CbVm8iYJNhiCMrH4XWZPLvkvGHTeuQnVwaMAeNEV5yblMjYiowgrf1BHZvahT ZE6AQgjOVsfoylDd+Kqop1IipED630tt/rZUCoR8qsJ4wYdQwSnMQFx6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHldFZKtwK84h46wz0RXFlFXUevAMB8GA1UdIwQY MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt NjdhZDYwZDM4NmRkLzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbToFYd8j 7h39mTopcVZ5zuILE6U6w28nV0jw2YWGJ8OfXDTt4xYvBbe+c/3IRY8y/hXlQ5Wq e9wVorKtBL57j5v2JaT7LcvQ4NhEyc0nPrdw2TzaezlhjMhLqIyoMx+a8oXdeRCK 6oYJLHMEziGdifi1iHVVMqKwFqTLUVBQqNX3qwdifHq5zX2zqa2ybjE2o0ML74y1 2AjiyFIrqWhDNabRack83GK0R7GV3tDn+AGa7rmsbAV9ebMHCJEVJHp844FxNhTy 8Wd/NT30n98UsfeUa+G0561wKSANW3IL91PTRaMnGVkjKEnCs8UMp0h/2irPqNHJ /Jt0i2DLDLIT5w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:37 2025 by rpki-client