This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json) Hash identifier: 8dMKSklGXdR9S+pgDWnoDkrU1GSev1SkvygoSJr2jBY= Subject key identifier: B7:69:A0:EF:0D:D8:5B:88:91:A0:96:85:D9:AD:79:4C:EF:12:0F:8D Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Certificate serial: 019B2FD59367941193852CD02B83D98E2FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft Manifest number: 0D3B Signing time: Thu 18 Dec 2025 05:01:24 +0000 Manifest this update: Thu 18 Dec 2025 05:01:24 +0000 Manifest next update: Fri 19 Dec 2025 05:01:24 +0000 Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: 8XqRMfMxuBpcfvCDZsvbh6iEFYadMd4hxklKwq03KIs=) 2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:93:67:94:11:93:85:2c:d0:2b:83:d9:8e:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Validity Not Before: Dec 18 05:01:24 2025 GMT Not After : Dec 19 05:01:24 2025 GMT Subject: CN=b769a0ef0dd85b8891a09685d9ad794cef120f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:56:6a:59:ca:43:86:b6:21:ea:63:ee:7b: 1f:40:bb:8a:f7:9c:d8:e5:12:a3:ea:d2:fb:56:87: 39:9b:9c:e1:e9:c9:ab:ac:7c:fc:ca:23:a1:ae:7e: f1:36:8a:c0:52:b4:99:04:bb:2f:91:9c:6c:55:e3: 14:fb:c8:60:51:c1:1a:c5:e1:ea:3f:ad:12:4b:a2: 59:cf:16:75:d3:01:66:a7:c8:06:34:a5:64:22:7e: b4:d5:c2:c3:74:2b:40:72:f2:ef:b1:bc:d4:bb:7d: 34:9a:3e:52:1f:ef:28:61:dd:0c:89:86:1e:01:d8: a1:b0:7d:0a:d7:c7:2e:9a:34:e6:e9:3f:19:34:71: f3:e7:1d:60:55:ff:90:d1:31:92:09:b4:44:26:b9: 67:45:c6:97:52:fc:8f:8a:a7:64:af:81:91:f7:b0: 88:54:67:0a:83:fc:62:da:d9:f3:b9:95:13:a2:d7: 98:95:aa:f7:d4:c0:4d:cf:ac:0b:6c:97:0b:fa:7b: 41:f9:82:c9:76:62:f3:88:ba:91:b0:2e:7b:e1:5d: ec:f3:db:f5:46:d0:99:35:69:b3:a0:34:26:e6:24: d6:37:82:53:01:b1:5f:0b:bf:e5:fd:7b:af:62:df: 0f:8e:ca:da:a4:2b:6c:30:2a:1e:66:81:7f:e4:f6: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:A0:EF:0D:D8:5B:88:91:A0:96:85:D9:AD:79:4C:EF:12:0F:8D X509v3 Authority Key Identifier: keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c7:0c:9d:df:54:ca:dc:23:73:b6:43:1b:5a:d0:05:91:e1: 00:c7:e5:4c:54:10:99:a5:7e:3e:3a:2d:84:a0:b9:24:ad:4a: b8:93:cc:ed:59:d3:7d:ff:08:30:6b:c2:8c:8b:d4:d7:e0:c3: 43:00:03:88:c7:96:21:31:92:92:03:60:e7:59:29:34:d2:df: fc:7b:cb:64:03:e6:04:24:aa:9a:93:fd:48:5c:95:35:f7:3b: 7f:97:a4:ea:e4:ba:e1:ff:33:3c:35:1f:fe:59:e0:16:ca:78: 95:a7:04:e6:c1:27:1d:e8:e5:d2:8b:5a:c1:cb:1d:e5:67:7c: 63:71:c3:f0:b7:38:19:72:0d:b3:03:18:6b:0c:5e:bf:f2:71: a5:c2:67:84:09:05:4b:08:ee:e4:d8:89:e2:ea:fd:63:2e:0c: 51:bd:38:84:94:fd:bd:c9:8b:23:c8:6e:27:69:ca:3f:10:28: f5:2f:75:fa:c2:2a:71:b4:cd:0c:89:d3:3b:36:ee:f5:86:6c: ca:4c:3c:11:39:3b:92:ca:b0:ce:1e:e7:af:07:8d:97:e5:f7: fb:b9:5e:73:81:54:f1:c8:30:d5:e2:b5:40:8d:6f:a5:7d:94: 38:3a:c8:c0:0a:c3:70:1d:d7:6e:de:b1:5f:f3:63:0a:4c:ba: 9f:19:08:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ZNnlBGThSzQK4PZji/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl NWM5YjEwHhcNMjUxMjE4MDUwMTI0WhcNMjUxMjE5MDUwMTI0WjAzMTEwLwYDVQQD EyhiNzY5YTBlZjBkZDg1Yjg4OTFhMDk2ODVkOWFkNzk0Y2VmMTIwZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxNWalnKQ4a2Iepj7nsfQLuK95zY 5RKj6tL7Voc5m5zh6cmrrHz8yiOhrn7xNorAUrSZBLsvkZxsVeMU+8hgUcEaxeHq P60SS6JZzxZ10wFmp8gGNKVkIn601cLDdCtAcvLvsbzUu300mj5SH+8oYd0MiYYe AdihsH0K18cumjTm6T8ZNHHz5x1gVf+Q0TGSCbREJrlnRcaXUvyPiqdkr4GR97CI VGcKg/xi2tnzuZUToteYlar31MBNz6wLbJcL+ntB+YLJdmLziLqRsC574V3s89v1 RtCZNWmzoDQm5iTWN4JTAbFfC7/l/XuvYt8PjsrapCtsMCoeZoF/5PbsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdpoO8N2FuIkaCWhdmteUzvEg+NMB8GA1UdIwQY MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8cMnd9U ytwjc7ZDG1rQBZHhAMflTFQQmaV+PjothKC5JK1KuJPM7VnTff8IMGvCjIvU1+DD QwADiMeWITGSkgNg51kpNNLf/HvLZAPmBCSqmpP9SFyVNfc7f5ek6uS64f8zPDUf /lngFsp4lacE5sEnHejl0otawcsd5Wd8Y3HD8Lc4GXINswMYawxev/JxpcJnhAkF Swju5NiJ4ur9Yy4MUb04hJT9vcmLI8huJ2nKPxAo9S91+sIqcbTNDInTOzbu9YZs ykw8ETk7ksqwzh7nrweNl+X3+7lec4FU8cgw1eK1QI1vpX2UODrIwArDcB3Xbt6x X/NjCky6nxkIuQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:53:40 2025 by rpki-client