This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json) Hash identifier: jIQmrHt/SsPAUJ+UN7x6Rw2ImaQvvc9xfH1UXC0vaIE= Subject key identifier: 91:42:3A:37:83:F3:95:7F:FD:82:78:C8:73:22:C8:B6:E5:B5:6F:30 Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Certificate serial: 019AF164135B24240ADE134A4BBB1E30492D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft Manifest number: 1696 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: X+pNwgGBf4mAf9JfFK0SNdm5OqSj+o6NzcM+sTnFfug=) 2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:13:5b:24:24:0a:de:13:4a:4b:bb:1e:30:49:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=91423a3783f3957ffd8278c87322c8b6e5b56f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:ff:e6:3c:ea:ef:b4:3c:e1:fb:95:bd:b0: c4:42:31:38:aa:9a:2b:e1:5b:7d:ff:09:38:9e:fb: ff:1d:fa:ff:f0:4a:d6:44:89:18:eb:75:24:74:24: 57:fb:b3:86:b3:ec:26:f1:f2:aa:89:43:88:df:5a: 14:1e:07:78:61:db:06:ac:01:4d:a3:ad:e2:93:f5: 78:6a:71:7a:5e:6e:10:31:f4:35:a1:79:7e:2e:98: 1a:50:18:45:6d:26:6e:e9:4e:c5:84:25:6f:e2:a9: 3c:70:fc:d1:91:71:5d:db:69:16:86:37:55:00:b7: 1a:e8:e8:40:0f:f7:58:0b:b2:59:34:0d:e0:c5:3d: 5c:92:e9:1c:7c:48:c5:f8:42:d2:2b:af:71:dc:eb: e3:2b:4a:59:b1:ca:b4:07:fa:44:d3:34:a5:d6:ed: d1:25:d3:68:2b:2b:8d:5a:b9:9d:23:9e:58:50:ff: fb:8c:7c:69:40:e3:04:63:f9:e1:50:76:20:79:24: 2e:25:74:ac:52:6b:e2:39:86:6a:d2:f9:e5:05:38: c6:b5:13:15:fc:68:fb:31:41:ed:ce:01:4b:05:98: eb:3a:6f:5f:26:c1:0e:5a:2f:2c:3a:78:36:cf:d4: 50:65:e1:11:a3:53:ca:0f:20:c0:ea:3d:f3:ba:d9: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:3A:37:83:F3:95:7F:FD:82:78:C8:73:22:C8:B6:E5:B5:6F:30 X509v3 Authority Key Identifier: keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:74:60:9a:db:d7:d8:97:bb:9c:28:b1:7e:bf:df:09:fe:e9: 7d:fa:7a:2d:64:48:b9:d5:d0:3f:69:74:e9:2d:f2:6e:f0:0f: 44:fc:01:d7:3e:92:9b:25:09:50:d6:97:c7:1d:76:8f:f7:04: 4c:29:2d:21:1c:f5:0e:cb:3d:a3:a8:e0:c6:13:67:ad:75:2a: ae:00:9d:35:04:39:27:24:72:5e:be:d3:6f:e2:1a:f7:ed:8d: ef:0f:a9:00:7b:92:05:a6:d2:58:91:ee:36:cb:5b:d3:3f:48: 42:ba:aa:8f:7e:8b:44:58:1b:de:fd:a4:1c:9a:d4:1c:3a:1f: 5f:fb:98:58:28:3e:6c:ec:96:fc:54:18:73:b9:e0:75:e1:54: a8:37:96:f1:54:f0:dc:e4:c9:c4:c7:84:0c:e7:45:77:23:97: 9b:d7:3d:e2:b7:bc:35:98:93:4c:c1:a3:b1:a8:13:82:26:d6: 6e:0c:39:9f:3d:e9:ed:24:86:b4:a3:53:de:af:b1:95:b0:7e: de:7f:85:f7:96:ae:07:28:3b:10:1d:a6:b1:5e:0d:d5:36:c5: d4:63:d6:db:41:40:0d:68:ca:f7:89:e6:0e:b8:8f:fc:ef:13: de:03:ed:b5:d6:c7:ae:63:e6:5d:78:25:5c:bf:b9:67:ac:54: 77:76:9e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBNbJCQK3hNKS7seMEktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4 NWQ4ZDkwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD Eyg5MTQyM2EzNzgzZjM5NTdmZmQ4Mjc4Yzg3MzIyYzhiNmU1YjU2ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8L/5jzq77Q84fuVvbDEQjE4qpor 4Vt9/wk4nvv/Hfr/8ErWRIkY63UkdCRX+7OGs+wm8fKqiUOI31oUHgd4YdsGrAFN o63ik/V4anF6Xm4QMfQ1oXl+LpgaUBhFbSZu6U7FhCVv4qk8cPzRkXFd22kWhjdV ALca6OhAD/dYC7JZNA3gxT1ckukcfEjF+ELSK69x3OvjK0pZscq0B/pE0zSl1u3R JdNoKyuNWrmdI55YUP/7jHxpQOMEY/nhUHYgeSQuJXSsUmviOYZq0vnlBTjGtRMV /Gj7MUHtzgFLBZjrOm9fJsEOWi8sOng2z9RQZeERo1PKDyDA6j3zutksRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFCOjeD85V//YJ4yHMiyLbltW8wMB8GA1UdIwQY MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4 LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnRgmtvX 2Je7nCixfr/fCf7pffp6LWRIudXQP2l06S3ybvAPRPwB1z6SmyUJUNaXxx12j/cE TCktIRz1Dss9o6jgxhNnrXUqrgCdNQQ5JyRyXr7Tb+Ia9+2N7w+pAHuSBabSWJHu Nstb0z9IQrqqj36LRFgb3v2kHJrUHDofX/uYWCg+bOyW/FQYc7ngdeFUqDeW8VTw 3OTJxMeEDOdFdyOXm9c94re8NZiTTMGjsagTgibWbgw5nz3p7SSGtKNT3q+xlbB+ 3n+F95auByg7EB2msV4N1TbF1GPW20FADWjK94nmDriP/O8T3gPttdbHrmPmXXgl XL+5Z6xUd3aemQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:35 2025 by rpki-client