This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json) Hash identifier: /I7aipOhkKz+P0ou7pMD/dRRgFDS/pbtE4DQXT1klak= Subject key identifier: D9:85:DD:CB:97:2B:B1:BC:16:88:DA:A5:75:F3:DF:BE:33:62:81:00 Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Certificate serial: 019B330CEA6E7DB0C8854665ABB317580565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft Manifest number: 16B8 Signing time: Thu 18 Dec 2025 20:00:42 +0000 Manifest this update: Thu 18 Dec 2025 20:00:42 +0000 Manifest next update: Fri 19 Dec 2025 20:00:42 +0000 Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: XYLpzwHBuY0gBsuDf401qkjVk2XPXORgQ5ejmPJ0N/M=) 2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:ea:6e:7d:b0:c8:85:46:65:ab:b3:17:58:05:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Validity Not Before: Dec 18 20:00:42 2025 GMT Not After : Dec 19 20:00:42 2025 GMT Subject: CN=d985ddcb972bb1bc1688daa575f3dfbe33628100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:44:7e:9d:4d:05:3a:e9:59:3c:9d:fb:ab: 59:d8:82:ed:3f:ef:a7:87:9a:b7:f8:d9:77:bd:be: 5f:2c:cd:d1:19:cf:59:fa:2d:f8:55:cd:7c:12:49: f5:fd:79:93:28:e4:70:04:42:a4:ee:48:4c:6a:26: 00:1c:b9:d6:d0:55:c1:b5:9e:63:ee:81:dd:06:b1: 57:96:aa:57:0e:5a:cd:51:74:56:d5:60:29:15:4b: 3b:9b:ff:7b:c1:be:08:03:1e:ea:38:07:e8:f5:62: 90:e8:12:67:45:af:8f:36:ac:9f:af:72:bc:dc:f4: 4c:5e:61:bb:fa:f4:22:8b:9c:a8:4a:59:8f:32:02: 68:dc:8c:07:d0:d8:b5:38:13:ab:3f:f5:bf:c2:f2: db:68:b0:b3:60:7d:3b:59:75:99:68:af:c4:53:c1: 10:b5:c8:c4:c7:86:26:af:9e:c2:75:61:a5:cb:03: b9:d6:0e:b1:c2:d1:87:d5:40:b2:4e:92:e2:25:1e: 0f:5d:ac:88:57:9e:e2:1c:8c:2c:bc:75:56:0f:7f: 5f:c7:ed:df:8e:b1:45:1b:c4:1e:7e:f8:ff:c5:0b: c8:2a:d0:ad:1b:2a:cd:bd:6e:ef:63:90:fd:c8:1d: aa:84:ea:03:3a:e1:51:93:ba:22:6b:54:71:90:38: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:DD:CB:97:2B:B1:BC:16:88:DA:A5:75:F3:DF:BE:33:62:81:00 X509v3 Authority Key Identifier: keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:94:56:e8:89:4d:d6:b7:32:0c:12:e4:f0:0f:6a:ad:0d:49: 01:5b:2b:09:7a:3d:9d:b2:f0:30:33:7e:29:45:24:4c:41:69: 0e:68:3a:24:1c:dc:2b:7e:cf:80:ab:5a:fb:86:49:b5:53:97: 25:cd:3a:3e:76:a2:fd:9f:c1:3a:1f:d8:40:3b:d9:ce:12:9c: a0:a7:a5:06:46:79:02:17:7f:bc:8d:e1:59:75:da:9b:9d:d4: 38:58:35:0d:d6:19:0f:4c:8c:3e:1b:18:15:af:2e:e6:58:59: ee:16:05:ea:b8:61:75:49:b8:4a:f0:97:fb:f5:a6:05:15:81: 63:fc:d1:9a:61:49:c9:dd:d9:2f:4c:92:c3:d3:87:62:8e:1f: f9:63:ec:fb:98:fe:39:25:61:80:68:a1:02:5d:e0:b6:34:0b: 97:04:5c:ee:19:39:8e:70:ce:4a:ad:0b:f6:c4:bb:bc:9e:c0: 52:63:6b:05:12:81:71:bb:04:7e:59:c4:cd:17:74:1f:12:23: 36:ae:b4:d4:e6:15:19:93:88:2f:04:25:9e:65:1c:e4:d4:74: 86:02:1c:2e:a3:98:33:b6:e0:c3:7e:ff:f3:c0:a7:a3:91:5f: e0:b4:b0:89:18:a7:23:13:33:08:56:a1:bb:de:ac:3e:b0:60: 32:73:84:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDOpufbDIhUZlq7MXWAVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4 NWQ4ZDkwHhcNMjUxMjE4MjAwMDQyWhcNMjUxMjE5MjAwMDQyWjAzMTEwLwYDVQQD EyhkOTg1ZGRjYjk3MmJiMWJjMTY4OGRhYTU3NWYzZGZiZTMzNjI4MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdFEfp1NBTrpWTyd+6tZ2ILtP++n h5q3+Nl3vb5fLM3RGc9Z+i34Vc18Ekn1/XmTKORwBEKk7khMaiYAHLnW0FXBtZ5j 7oHdBrFXlqpXDlrNUXRW1WApFUs7m/97wb4IAx7qOAfo9WKQ6BJnRa+PNqyfr3K8 3PRMXmG7+vQii5yoSlmPMgJo3IwH0Ni1OBOrP/W/wvLbaLCzYH07WXWZaK/EU8EQ tcjEx4Ymr57CdWGlywO51g6xwtGH1UCyTpLiJR4PXayIV57iHIwsvHVWD39fx+3f jrFFG8Qefvj/xQvIKtCtGyrNvW7vY5D9yB2qhOoDOuFRk7oia1RxkDgUFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmF3cuXK7G8FojapXXz374zYoEAMB8GA1UdIwQY MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4 LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZRW6IlN 1rcyDBLk8A9qrQ1JAVsrCXo9nbLwMDN+KUUkTEFpDmg6JBzcK37PgKta+4ZJtVOX Jc06Pnai/Z/BOh/YQDvZzhKcoKelBkZ5Ahd/vI3hWXXam53UOFg1DdYZD0yMPhsY Fa8u5lhZ7hYF6rhhdUm4SvCX+/WmBRWBY/zRmmFJyd3ZL0ySw9OHYo4f+WPs+5j+ OSVhgGihAl3gtjQLlwRc7hk5jnDOSq0L9sS7vJ7AUmNrBRKBcbsEflnEzRd0HxIj Nq601OYVGZOILwQlnmUc5NR0hgIcLqOYM7bgw37/88Cno5Ff4LSwiRinIxMzCFah u96sPrBgMnOEdA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:08 2025 by rpki-client