This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json) Hash identifier: fq+OPV145R3qKW7Rc0zEAnjHmCOvyRlUbsOh6ek52b8= Subject key identifier: B7:90:4C:E4:13:94:02:DC:B1:69:8A:40:E9:1D:18:44:CE:94:63:7D Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d Certificate serial: 019B1D9848C1B238CC1E54D5E136ADD0112D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft Manifest number: 14AC Signing time: Sun 14 Dec 2025 16:01:17 +0000 Manifest this update: Sun 14 Dec 2025 16:01:17 +0000 Manifest next update: Mon 15 Dec 2025 16:01:17 +0000 Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=) 2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: xR8dfbr7UIq89xXjmrT/SMtdAazRkMMky7RsQUgb64o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:48:c1:b2:38:cc:1e:54:d5:e1:36:ad:d0:11:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d Validity Not Before: Dec 14 16:01:17 2025 GMT Not After : Dec 15 16:01:17 2025 GMT Subject: CN=b7904ce4139402dcb1698a40e91d1844ce94637d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:16:f6:f2:40:1e:45:00:e0:e5:d7:4c:86: fe:4d:7c:c9:21:cf:c2:ab:87:cf:a3:04:57:7f:59: 99:c2:2e:82:8e:eb:4c:ed:4b:2c:13:00:7f:0b:4f: b4:09:36:1e:ab:72:30:dd:e0:46:b7:12:77:2d:b0: d4:e6:6c:d0:d4:28:c8:fe:a5:4d:7b:5f:9e:b5:97: 09:aa:71:4d:93:8f:c7:9b:0c:7c:8b:88:a1:a1:0d: 24:b4:b9:d3:c1:50:78:17:47:ef:53:32:ca:62:f9: 0e:1c:ae:1e:37:7f:fd:fc:4b:e1:3b:17:12:63:e5: 20:56:79:2a:89:46:70:28:72:2e:e6:f2:2e:ca:a3: 8a:cb:ef:e0:1b:ce:bd:6f:52:2e:94:6e:aa:7c:89: 67:f8:ba:51:11:ae:c8:2e:ed:ea:80:d6:17:c0:7a: 07:ca:36:ff:f3:6c:d5:41:43:a7:73:0a:49:89:2b: ae:f9:2e:34:06:47:96:71:e4:18:34:b5:b3:1a:16: 34:7a:f2:e2:83:b0:7e:a0:17:15:2a:28:c3:0e:c2: 3c:c8:04:e6:c1:aa:12:a4:1b:0a:0c:0f:30:b4:86: e7:8c:fd:ed:53:f8:fc:a0:ee:a0:e2:fd:9f:c0:f7: 35:7d:55:f4:a7:e9:c8:d1:7a:80:45:e4:f0:da:b9: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:90:4C:E4:13:94:02:DC:B1:69:8A:40:E9:1D:18:44:CE:94:63:7D X509v3 Authority Key Identifier: keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5b:44:54:dd:f0:97:fe:c6:64:a8:db:be:29:37:41:c7:ac: ba:33:a3:d1:e0:54:39:3a:47:db:d2:07:79:35:24:0c:c5:7d: e9:d1:5c:37:dc:40:32:bf:83:0a:02:12:bf:0f:9b:4f:ab:7d: cc:1e:67:9d:93:72:54:99:97:89:c0:6a:86:34:24:46:2a:33: b2:4b:bf:1f:bc:be:46:a5:54:58:c6:d4:ce:5b:28:11:20:b6: 51:74:ef:e0:0c:c4:d2:bb:4a:01:85:3c:4e:14:18:f3:05:9e: f6:c9:33:55:38:e0:29:e3:a7:26:10:72:c3:1f:62:f5:cc:65: 50:93:f0:56:83:84:a3:74:b3:9c:d4:28:32:21:17:f3:48:de: ae:6c:fe:13:d3:6d:b7:54:b0:f8:b7:77:ac:0f:df:f3:18:ca: 76:c1:0d:e6:2a:bd:31:96:b5:5b:6c:d6:c1:3c:10:b1:07:8f: df:b5:fd:22:6c:b6:ae:4d:25:3b:99:55:4b:dd:fa:1c:a6:7e: 94:b1:f3:64:2d:b6:0c:bc:36:e7:52:57:9a:b2:16:7a:e9:ba: 80:87:31:26:7f:83:1b:9c:96:15:ec:76:25:17:8b:fb:7d:1e: a9:8e:7e:0b:a2:31:2c:60:9f:d2:10:9a:7c:23:b6:23:40:0f: 91:9a:d1:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmEjBsjjMHlTV4Tat0BEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3 MmIzM2QwHhcNMjUxMjE0MTYwMTE3WhcNMjUxMjE1MTYwMTE3WjAzMTEwLwYDVQQD EyhiNzkwNGNlNDEzOTQwMmRjYjE2OThhNDBlOTFkMTg0NGNlOTQ2MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y8W9vJAHkUA4OXXTIb+TXzJIc/C q4fPowRXf1mZwi6CjutM7UssEwB/C0+0CTYeq3Iw3eBGtxJ3LbDU5mzQ1CjI/qVN e1+etZcJqnFNk4/Hmwx8i4ihoQ0ktLnTwVB4F0fvUzLKYvkOHK4eN3/9/EvhOxcS Y+UgVnkqiUZwKHIu5vIuyqOKy+/gG869b1IulG6qfIln+LpREa7ILu3qgNYXwHoH yjb/82zVQUOncwpJiSuu+S40BkeWceQYNLWzGhY0evLig7B+oBcVKijDDsI8yATm waoSpBsKDA8wtIbnjP3tU/j8oO6g4v2fwPc1fVX0p+nI0XqAReTw2rnPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeQTOQTlALcsWmKQOkdGETOlGN9MB8GA1UdIwQY MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVtEVN3w l/7GZKjbvik3QcesujOj0eBUOTpH29IHeTUkDMV96dFcN9xAMr+DCgISvw+bT6t9 zB5nnZNyVJmXicBqhjQkRiozsku/H7y+RqVUWMbUzlsoESC2UXTv4AzE0rtKAYU8 ThQY8wWe9skzVTjgKeOnJhBywx9i9cxlUJPwVoOEo3SznNQoMiEX80jermz+E9Nt t1Sw+Ld3rA/f8xjKdsEN5iq9MZa1W2zWwTwQsQeP37X9Imy2rk0lO5lVS936HKZ+ lLHzZC22DLw251JXmrIWeum6gIcxJn+DG5yWFex2JReL+30eqY5+C6IxLGCf0hCa fCO2I0APkZrR/A== -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:25 2025 by rpki-client