This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json) Hash identifier: k2Buu3r/PVjO/xBmqZFkdt4rwsW5Km4+JEGXU0wqbfU= Subject key identifier: 0D:1E:8E:E6:EB:3B:5E:7C:37:F5:D4:7F:69:85:1B:CC:58:E9:6A:91 Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Certificate serial: 019AF2098EC7B847AFA97DE39068CD43E09B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft Manifest number: 0D1B Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: PnVKm5LWnmDHoAtlxgwodwuNF/Nxc1diZ3IEC2Gq43Q=) 2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8e:c7:b8:47:af:a9:7d:e3:90:68:cd:43:e0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=0d1e8ee6eb3b5e7c37f5d47f69851bcc58e96a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:ce:bb:fc:5e:60:0c:9c:08:8d:3a:67:7b: 9c:ad:01:3b:1e:7d:6e:e9:7a:16:0a:12:80:31:11: 92:53:a3:c4:68:c0:be:9b:ce:b3:c5:85:5a:9b:ff: 6b:ce:d6:e3:9a:bd:10:3e:d4:90:d9:4d:48:a6:dd: 00:00:a1:00:e8:b6:b7:c1:d9:0d:00:e2:b6:a9:ed: a1:4b:a5:ae:ee:a6:34:5e:68:98:15:e0:82:94:24: 37:c9:fd:25:58:cb:39:5a:85:2d:fd:11:f0:05:3d: 3f:fc:03:ec:3e:82:0a:54:42:e8:c4:28:17:54:f1: da:dd:cd:33:02:be:83:9f:a2:81:e2:71:19:00:3d: b8:fd:21:a4:92:b8:fe:c9:98:42:d1:48:68:7c:4c: 2b:56:ef:8c:8e:d5:33:90:af:62:f5:78:f7:64:8f: c7:08:0b:e5:42:d8:b0:e9:02:43:2c:96:ad:88:74: eb:cb:77:67:6e:ff:0a:c7:97:fe:36:f7:0f:e0:3d: 33:51:9d:f1:82:54:cf:ca:a6:81:6b:7e:a8:f3:a5: 87:e5:55:2e:05:17:78:0e:e9:82:44:3a:3c:2f:af: f7:f1:1a:5e:91:34:ce:8b:23:03:24:3f:47:3a:0b: ab:cd:be:b7:62:7d:de:01:da:61:b6:41:37:67:8c: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1E:8E:E6:EB:3B:5E:7C:37:F5:D4:7F:69:85:1B:CC:58:E9:6A:91 X509v3 Authority Key Identifier: keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:86:75:2d:89:58:eb:97:64:44:ee:d0:83:68:3e:f1:0e:f8: bc:c2:76:82:26:c9:67:c9:9b:2d:38:13:f4:1a:7a:fd:58:9d: 6b:38:b6:b1:2f:58:8b:46:95:61:bf:43:42:e1:83:b6:7d:d2: bf:0d:21:10:ad:de:c6:1c:5c:03:7e:56:20:ff:2e:dc:5b:06: 77:cc:6a:fa:b7:d0:59:96:ef:54:c9:ea:81:ef:c7:95:be:81: 33:57:6f:ce:49:8f:14:2d:aa:a8:cd:ef:71:c7:d2:68:85:51: ca:ee:72:c9:c5:ff:79:b1:31:76:3c:71:99:ed:08:03:99:c1: ad:de:72:3e:f1:0b:68:7f:46:a8:65:3d:32:8b:e3:cb:29:2d: 95:e2:5c:b2:7e:f2:a5:e5:32:f2:da:5a:2d:71:33:0e:57:80: b8:1a:48:23:2c:9e:fc:25:45:6e:c3:b6:fc:e4:41:be:5e:b0: 29:aa:44:e5:bd:2a:0b:63:72:30:57:0f:6c:9f:e9:c7:40:f9: a4:77:b0:93:c8:86:ea:e5:ed:74:cc:8b:8f:8d:38:3c:1a:5d: ab:8b:3f:33:d5:19:3f:cf:b0:77:b3:7f:49:db:d4:fa:0e:0f: 75:bc:b1:5d:3d:79:55:ba:90:64:af:5a:07:e6:d4:84:cb:fc: a8:e6:76:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY7HuEevqX3jkGjNQ+CbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl NWM5YjEwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD EygwZDFlOGVlNmViM2I1ZTdjMzdmNWQ0N2Y2OTg1MWJjYzU4ZTk2YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqXOu/xeYAycCI06Z3ucrQE7Hn1u 6XoWChKAMRGSU6PEaMC+m86zxYVam/9rztbjmr0QPtSQ2U1Ipt0AAKEA6La3wdkN AOK2qe2hS6Wu7qY0XmiYFeCClCQ3yf0lWMs5WoUt/RHwBT0//APsPoIKVELoxCgX VPHa3c0zAr6Dn6KB4nEZAD24/SGkkrj+yZhC0UhofEwrVu+MjtUzkK9i9Xj3ZI/H CAvlQtiw6QJDLJatiHTry3dnbv8Kx5f+NvcP4D0zUZ3xglTPyqaBa36o86WH5VUu BRd4DumCRDo8L6/38RpekTTOiyMDJD9HOgurzb63Yn3eAdphtkE3Z4zXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0ejubrO158N/XUf2mFG8xY6WqRMB8GA1UdIwQY MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4Z1LYlY 65dkRO7Qg2g+8Q74vMJ2gibJZ8mbLTgT9Bp6/Vidazi2sS9Yi0aVYb9DQuGDtn3S vw0hEK3exhxcA35WIP8u3FsGd8xq+rfQWZbvVMnqge/Hlb6BM1dvzkmPFC2qqM3v ccfSaIVRyu5yycX/ebExdjxxme0IA5nBrd5yPvELaH9GqGU9MovjyyktleJcsn7y peUy8tpaLXEzDleAuBpIIyye/CVFbsO2/ORBvl6wKapE5b0qC2NyMFcPbJ/px0D5 pHewk8iG6uXtdMyLj404PBpdq4s/M9UZP8+wd7N/SdvU+g4PdbyxXT15VbqQZK9a B+bUhMv8qOZ2qA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:43 2025 by rpki-client