This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json) Hash identifier: BxJ0depCUZxRYa13Hvpo+uWaIjeVZHjPI5I4xPYc1cw= Subject key identifier: DD:37:5F:23:70:B3:65:36:1F:48:DA:22:79:2B:10:7E:6E:CA:1F:07 Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e Certificate serial: 019B5ABF80F7B412507937292F7F246E180A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft Manifest number: 11ED Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=) 2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: VRPufxbSIn+LytkrjpTJRRQDnDr+0l46ij3+/7eElaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:80:f7:b4:12:50:79:37:29:2f:7f:24:6e:18:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=dd375f2370b365361f48da22792b107e6eca1f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:99:b4:5e:3e:02:47:5e:1d:78:2c:62:a2: b7:f6:47:94:e3:01:87:c5:c6:6e:fe:c3:16:a0:cf: 20:ca:fb:a0:0c:16:bc:37:30:c7:04:ab:f1:03:38: 0d:6c:40:0b:ef:35:a3:80:48:44:20:18:59:8d:87: 25:26:bb:d2:8c:1b:73:73:14:55:bc:d4:1d:9b:0c: 1a:45:1a:b2:93:99:f9:73:27:87:a7:d2:de:08:bd: 5c:ac:7a:57:4d:35:df:60:5e:d7:a3:35:0a:0e:ef: 43:4d:e2:27:59:ed:f8:a2:81:85:05:2d:72:8d:84: 55:2a:27:ee:a2:9d:a8:c3:84:92:b4:35:af:dc:4b: b2:51:08:c7:66:81:aa:49:34:6e:3a:81:bb:db:dd: 7f:d0:43:3b:1e:ed:ae:79:38:65:0a:f8:ab:60:11: 10:e7:8c:dd:da:3c:a3:6c:38:a7:b2:87:5b:09:ab: 58:9c:14:19:75:1a:d4:6c:c7:db:c4:dd:3b:e5:a6: 73:95:08:3e:1c:78:9b:05:47:2a:11:06:38:c3:b1: 62:aa:e9:54:e1:c4:36:50:86:82:ff:75:46:0f:2b: ea:89:07:41:34:d4:6f:5e:a9:c8:1b:00:c4:2c:83: cf:f9:9d:42:c2:22:b7:ee:82:b2:2a:2c:e8:b6:44: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:37:5F:23:70:B3:65:36:1F:48:DA:22:79:2B:10:7E:6E:CA:1F:07 X509v3 Authority Key Identifier: keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3a:82:b5:9b:a1:74:31:36:06:81:43:b6:68:68:d6:19:75: bc:11:90:97:f3:4b:81:c8:e0:47:3b:ee:35:cc:6a:93:b9:15: e4:b4:04:bf:1e:c2:6e:de:67:97:cd:31:11:6a:0d:78:da:bf: 53:1c:9a:5c:c7:ba:45:97:77:61:bc:db:a4:6d:cf:e8:a8:31: cf:93:cd:e4:a7:ca:c5:8e:0a:ef:31:68:5a:a5:a3:f6:6c:8d: 81:7b:f8:63:c8:d7:4f:94:0d:12:3d:70:35:94:a6:3a:9d:7c: 88:b9:92:be:f8:16:ca:29:d1:f8:eb:ea:07:fe:9c:b6:53:6c: 04:33:36:3c:a9:f5:80:b5:26:e5:80:68:28:1d:7c:86:eb:16: 4e:7d:b4:58:fa:ce:77:d5:c6:56:ff:ab:b5:c1:64:81:7a:78: 0f:05:35:05:89:05:a3:2a:d5:74:1d:2a:4a:07:a7:af:a3:fd: bb:4c:d1:bd:aa:5a:c2:a9:b7:57:97:af:39:15:16:1a:4c:c0: 4e:43:7a:28:24:33:46:42:74:71:62:1a:e5:15:ee:3d:a3:a5: 9f:63:4c:bb:9e:4b:ea:85:18:4d:d7:8d:21:fc:50:be:82:7b: a1:1c:c9:22:30:b4:7d:a2:56:57:2e:7d:10:32:50:00:0b:ae: 42:07:b9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4D3tBJQeTcpL38kbhgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODQwYmY4ZjJlYTQ0NmE0N2RiNmM2MzM5MDY2NjdjNjNl ZDg4NmUwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD EyhkZDM3NWYyMzcwYjM2NTM2MWY0OGRhMjI3OTJiMTA3ZTZlY2ExZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKWZtF4+AkdeHXgsYqK39keU4wGH xcZu/sMWoM8gyvugDBa8NzDHBKvxAzgNbEAL7zWjgEhEIBhZjYclJrvSjBtzcxRV vNQdmwwaRRqyk5n5cyeHp9LeCL1crHpXTTXfYF7XozUKDu9DTeInWe34ooGFBS1y jYRVKifuop2ow4SStDWv3EuyUQjHZoGqSTRuOoG7291/0EM7Hu2ueThlCvirYBEQ 54zd2jyjbDinsodbCatYnBQZdRrUbMfbxN075aZzlQg+HHibBUcqEQY4w7FiqulU 4cQ2UIaC/3VGDyvqiQdBNNRvXqnIGwDELIPP+Z1CwiK37oKyKizotkTUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN03XyNws2U2H0jaInkrEH5uyh8HMB8GA1UdIwQY MBaAFG2EC/jy6kRqR9tsYzkGZnxj7YhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMt YzNlOGVhZGQwMGJhLzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMtYzNlOGVhZGQwMGJh LzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDqCtZuh dDE2BoFDtmho1hl1vBGQl/NLgcjgRzvuNcxqk7kV5LQEvx7Cbt5nl80xEWoNeNq/ UxyaXMe6RZd3YbzbpG3P6Kgxz5PN5KfKxY4K7zFoWqWj9myNgXv4Y8jXT5QNEj1w NZSmOp18iLmSvvgWyinR+OvqB/6ctlNsBDM2PKn1gLUm5YBoKB18husWTn20WPrO d9XGVv+rtcFkgXp4DwU1BYkFoyrVdB0qSgenr6P9u0zRvapawqm3V5evORUWGkzA TkN6KCQzRkJ0cWIa5RXuPaOln2NMu55L6oUYTdeNIfxQvoJ7oRzJIjC0faJWVy59 EDJQAAuuQge5Lg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:09 2025 by rpki-client