This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json) Hash identifier: c2QL3t10FFridiHUpVZdZoJ68En6fNm9BbrESoHzulw= Subject key identifier: 56:82:39:1F:FB:87:0B:B3:E9:84:56:CD:47:0B:8A:45:7E:F8:11:93 Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Certificate serial: 019B330D44B350587BCF6C48CE13BE3A224A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft Manifest number: 12E2 Signing time: Thu 18 Dec 2025 20:01:06 +0000 Manifest this update: Thu 18 Dec 2025 20:01:06 +0000 Manifest next update: Fri 19 Dec 2025 20:01:06 +0000 Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=) 2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: F4dbvjeMFNHjkFykhE4zAhyqVdSV/Zg5maYaLaWG2LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:44:b3:50:58:7b:cf:6c:48:ce:13:be:3a:22:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Validity Not Before: Dec 18 20:01:06 2025 GMT Not After : Dec 19 20:01:06 2025 GMT Subject: CN=5682391ffb870bb3e98456cd470b8a457ef81193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:52:b4:42:82:4c:d8:0c:a7:a7:61:7d:31: 1c:f8:32:75:3f:b4:71:bb:9c:4a:7b:54:ed:7a:dd: c8:49:fa:f6:8c:c8:ca:14:eb:64:31:05:dc:fa:cb: b2:66:a2:40:f1:4f:88:18:dd:7c:80:90:fa:a4:13: 37:51:e7:c9:9a:e2:df:47:33:00:ae:78:bf:06:1c: 7c:a1:10:8d:b8:76:2a:db:d3:e6:10:3d:2a:68:37: 11:05:53:d6:70:09:81:81:e9:82:24:5c:63:23:99: 83:cb:4d:aa:76:0a:ee:ee:48:fd:07:dd:19:77:ba: 7d:11:13:42:29:28:04:0c:0d:61:cd:c7:33:f4:c1: 7f:5e:c2:c8:bc:10:66:af:08:34:dd:d6:cf:0c:7a: 8e:7c:7c:f2:28:3d:1d:41:51:41:3c:c4:e7:65:81: bc:03:fc:76:c4:9d:70:16:68:27:7e:43:d3:a1:3f: 12:2f:4d:df:fb:6f:c1:5e:80:1d:48:d0:96:79:1f: 25:f3:08:48:5f:86:d5:d9:71:8b:9c:c4:65:54:3f: ba:58:2a:86:f1:a0:22:03:be:a2:66:ca:79:16:4c: 42:9b:d3:79:7f:65:8e:8a:04:be:0c:73:cf:1d:6e: 65:b3:ce:c6:f6:53:e4:25:27:4e:ac:0d:ce:76:90: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:82:39:1F:FB:87:0B:B3:E9:84:56:CD:47:0B:8A:45:7E:F8:11:93 X509v3 Authority Key Identifier: keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:35:38:45:16:6e:47:d1:07:79:a3:ef:72:ce:ec:68:c5:a2: 52:e7:a5:9e:28:7b:6d:fe:49:f2:a6:31:e2:f5:cc:80:62:de: 3e:ca:3b:92:d2:07:43:e0:ad:39:0d:57:95:56:32:95:78:19: 3a:47:7a:ec:c8:b2:c1:25:9a:09:de:f6:26:1d:2e:e6:b1:10: 5e:14:39:a2:80:6e:f9:ac:d7:38:b1:03:8e:21:56:8e:7d:79: 18:3c:50:f3:57:04:97:e0:cd:90:6c:83:de:17:37:70:eb:2e: 2c:82:cc:bd:78:01:8e:63:8f:ef:4d:79:dc:fd:ae:ea:37:e0: 2c:e4:b3:38:38:d3:c5:a7:f2:3d:94:ea:05:6e:89:47:4e:dc: 44:ae:45:be:a0:ed:69:36:1e:dc:7e:28:de:39:e3:15:75:e3: 0d:d7:93:2e:78:d1:63:54:ee:05:9b:bc:0c:d6:8e:9a:8d:e0: 0b:e4:d0:2a:58:de:06:23:d4:08:af:c4:cf:92:8d:a8:65:6f: 51:05:aa:28:92:5c:8c:74:83:a6:00:03:39:b7:55:c6:71:f8: 35:d2:13:72:af:32:54:c6:38:a1:83:bc:97:c5:fc:07:98:55: f2:f3:ba:c8:b6:5f:c8:7b:60:c7:9d:7a:69:0f:e8:9e:0c:f5: db:2d:4d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDUSzUFh7z2xIzhO+OiJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl OTliNDMwHhcNMjUxMjE4MjAwMTA2WhcNMjUxMjE5MjAwMTA2WjAzMTEwLwYDVQQD Eyg1NjgyMzkxZmZiODcwYmIzZTk4NDU2Y2Q0NzBiOGE0NTdlZjgxMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyhStEKCTNgMp6dhfTEc+DJ1P7Rx u5xKe1Ttet3ISfr2jMjKFOtkMQXc+suyZqJA8U+IGN18gJD6pBM3UefJmuLfRzMA rni/Bhx8oRCNuHYq29PmED0qaDcRBVPWcAmBgemCJFxjI5mDy02qdgru7kj9B90Z d7p9ERNCKSgEDA1hzccz9MF/XsLIvBBmrwg03dbPDHqOfHzyKD0dQVFBPMTnZYG8 A/x2xJ1wFmgnfkPToT8SL03f+2/BXoAdSNCWeR8l8whIX4bV2XGLnMRlVD+6WCqG 8aAiA76iZsp5FkxCm9N5f2WOigS+DHPPHW5ls87G9lPkJSdOrA3OdpA5LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaCOR/7hwuz6YRWzUcLikV++BGTMB8GA1UdIwQY MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTU4RRZu R9EHeaPvcs7saMWiUuelnih7bf5J8qYx4vXMgGLePso7ktIHQ+CtOQ1XlVYylXgZ Okd67MiywSWaCd72Jh0u5rEQXhQ5ooBu+azXOLEDjiFWjn15GDxQ81cEl+DNkGyD 3hc3cOsuLILMvXgBjmOP70153P2u6jfgLOSzODjTxafyPZTqBW6JR07cRK5FvqDt aTYe3H4o3jnjFXXjDdeTLnjRY1TuBZu8DNaOmo3gC+TQKljeBiPUCK/Ez5KNqGVv UQWqKJJcjHSDpgADObdVxnH4NdITcq8yVMY4oYO8l8X8B5hV8vO6yLZfyHtgx516 aQ/ongz12y1NcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:37:21 2025 by rpki-client