This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft File: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json) Hash identifier: UWsbJga9mDkFpRNljyIuJ6LVwSLe0hdsWbKG5NDwJKc= Subject key identifier: 76:29:AC:3A:39:4F:10:94:36:8B:BD:3D:7C:BE:93:E5:77:AC:F4:B3 Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4 Certificate issuer: /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4 Certificate serial: 019B0F6ECC62DA5FB52EDA40F96DDFEB0A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft Manifest number: 1476 Signing time: Thu 11 Dec 2025 22:01:18 +0000 Manifest this update: Thu 11 Dec 2025 22:01:18 +0000 Manifest next update: Fri 12 Dec 2025 22:01:18 +0000 Files and hashes: 1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: /A0yhhyzodsLzptOSkXP8xErBs/zt5UHnkBuqtNZ/KU=) 2: Ss7XTWpHmXw6L7KiP6AnSkLRnd4.roa (hash: rhKrnmJP9HKc4ydR4WxRdbHD2Fh6lt0Ep1m2e2GnBII=) 3: vjNiGGPMMIohREeXJHQsS5InGhc.roa (hash: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:cc:62:da:5f:b5:2e:da:40:f9:6d:df:eb:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4 Validity Not Before: Dec 11 22:01:18 2025 GMT Not After : Dec 12 22:01:18 2025 GMT Subject: CN=7629ac3a394f1094368bbd3d7cbe93e577acf4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:03:46:7c:03:fa:39:e0:01:2d:81:1b:6a: 66:62:1a:a0:78:9c:87:2e:6a:c9:4f:0a:fc:ab:dc: 86:01:dd:69:60:10:e5:9b:38:60:9b:7d:ac:60:3d: f6:b6:37:6c:fa:34:41:ca:26:ec:8b:d4:e5:a8:93: 13:ac:57:37:87:48:fb:a8:5b:28:99:72:2f:5b:f0: 6f:2a:cf:06:2b:9c:76:83:12:d2:a3:c9:f6:dc:90: 94:4d:17:cb:af:b8:3a:76:58:5d:5a:f7:4f:97:a8: 07:78:1d:2a:8f:49:41:de:74:8c:4b:e0:5a:31:c4: 32:bd:72:46:e8:21:c3:fd:9d:91:20:23:ac:07:6d: ad:fb:f9:7f:80:39:97:97:7c:73:42:4e:64:df:17: fd:4f:2d:92:e2:4d:da:19:fe:22:d2:40:b8:63:1e: 69:a0:b0:cd:8a:d0:c6:f2:0a:91:88:91:a8:66:ad: cf:f2:e0:0a:1f:e1:a5:0a:66:11:ad:a9:4a:82:70: 74:8c:d0:0c:a2:8f:d5:08:a7:4f:2c:fe:c3:4d:28: 6e:f3:ba:be:55:c2:8d:ea:f8:9d:d6:e3:24:d3:58: c2:7e:25:8c:c2:18:e4:c1:22:e5:83:f0:ac:03:34: 75:f7:ad:70:60:76:ee:a6:8c:20:4c:76:05:f7:c1: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:AC:3A:39:4F:10:94:36:8B:BD:3D:7C:BE:93:E5:77:AC:F4:B3 X509v3 Authority Key Identifier: keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:50:85:05:ac:a4:bc:96:2a:ce:e2:7c:b8:21:81:69:6e:d4: 29:eb:2b:3c:f9:39:b4:ec:e5:4d:13:dc:78:da:e6:d4:d9:1a: 95:1e:b0:e7:e1:e8:ea:af:a6:1a:2c:0b:02:21:2d:96:6a:ab: c0:98:ca:15:2e:a5:a3:28:87:ac:c2:44:c8:8a:4a:6c:e6:6e: ee:e0:bd:0d:c4:f4:cf:46:ef:fe:7a:1f:6a:c1:76:d2:b3:9c: bc:07:85:f5:d9:32:87:5e:07:5e:0b:76:fd:e2:14:a8:a1:f6: 46:d1:a8:ce:2d:26:a4:3f:04:91:a1:95:8b:26:66:b9:18:b1: bd:d3:94:81:0e:7e:b3:1f:5d:a7:12:c6:d0:10:ce:b8:06:19: b8:96:3c:6a:e9:20:8d:ac:e7:b7:d0:47:f5:e7:cb:3e:41:85: 55:be:50:5d:24:83:ab:50:e3:ac:0f:0a:25:0a:25:c2:6b:ba: 69:b6:2d:b2:38:4b:aa:dd:85:f9:46:57:f7:4d:60:b0:ac:e0: a6:9b:57:8a:da:79:67:8c:d0:cf:e5:3a:b4:88:36:26:92:2b: 03:9d:45:5a:9f:5c:44:7c:5b:0a:24:0e:c8:a2:a3:53:97:a1: 3e:89:8f:3f:d5:05:b6:9b:01:74:26:55:a3:7b:e5:f5:ec:f6: 3e:9e:10:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbsxi2l+1LtpA+W3f6wqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODllZTMwM2ZmN2QwZDU1NzU5OWZhMDRiMjkzZGMyYjE2 YmI0ZDQwHhcNMjUxMjExMjIwMTE4WhcNMjUxMjEyMjIwMTE4WjAzMTEwLwYDVQQD Eyg3NjI5YWMzYTM5NGYxMDk0MzY4YmJkM2Q3Y2JlOTNlNTc3YWNmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/0DRnwD+jngAS2BG2pmYhqgeJyH LmrJTwr8q9yGAd1pYBDlmzhgm32sYD32tjds+jRByibsi9TlqJMTrFc3h0j7qFso mXIvW/BvKs8GK5x2gxLSo8n23JCUTRfLr7g6dlhdWvdPl6gHeB0qj0lB3nSMS+Ba McQyvXJG6CHD/Z2RICOsB22t+/l/gDmXl3xzQk5k3xf9Ty2S4k3aGf4i0kC4Yx5p oLDNitDG8gqRiJGoZq3P8uAKH+GlCmYRralKgnB0jNAMoo/VCKdPLP7DTShu87q+ VcKN6vid1uMk01jCfiWMwhjkwSLlg/CsAzR1961wYHbupowgTHYF98FpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYprDo5TxCUNou9PXy+k+V3rPSzMB8GA1UdIwQY MBaAFAWJ7jA/99DVV1mfoEspPcKxa7TUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80ZTE5OGUtMmY2MS00NmYzLWI1ZjYt MDZkNmU5NDdlMzhmLzEvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80ZTE5OGUtMmY2MS00NmYzLWI1ZjYtMDZkNmU5NDdlMzhm LzEvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVCFBayk vJYqzuJ8uCGBaW7UKesrPPk5tOzlTRPceNrm1NkalR6w5+Ho6q+mGiwLAiEtlmqr wJjKFS6loyiHrMJEyIpKbOZu7uC9DcT0z0bv/nofasF20rOcvAeF9dkyh14HXgt2 /eIUqKH2RtGozi0mpD8EkaGViyZmuRixvdOUgQ5+sx9dpxLG0BDOuAYZuJY8aukg jaznt9BH9efLPkGFVb5QXSSDq1DjrA8KJQolwmu6abYtsjhLqt2F+UZX901gsKzg pptXitp5Z4zQz+U6tIg2JpIrA51FWp9cRHxbCiQOyKKjU5ehPomPP9UFtpsBdCZV o3vl9ez2Pp4Qdw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:13:25 2025 by rpki-client