This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json) Hash identifier: Nt1XUEDuUkjpCoNwCjScNuMbUEa+cfcWnGPHLhdFKlE= Subject key identifier: C3:73:C0:AF:75:03:1D:C1:0E:4B:4D:DD:2B:0B:CE:11:3A:2F:9B:55 Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3 Certificate serial: 019AF19B4C6C5A0D1CE1E76AE3AA4DA10D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft Manifest number: 16B7 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: cA6ipO1iqQAYZal1CnGUploq/zQOlAd/Nn8O/rWeC3A=) 2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4c:6c:5a:0d:1c:e1:e7:6a:e3:aa:4d:a1:0d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=c373c0af75031dc10e4b4ddd2b0bce113a2f9b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:b3:d4:9c:c5:c0:9f:aa:2d:26:04:37:6e: c3:f2:cd:6c:f8:de:d9:f4:5b:cb:48:fc:2c:9c:9b: 45:98:f0:1a:f0:29:69:3a:64:36:99:eb:97:dd:b0: 60:c3:78:8a:0e:c2:8d:8e:19:cc:d7:33:0f:72:8c: 03:7c:48:1b:b2:98:4c:19:93:0a:87:30:c2:84:67: 4d:23:ef:f3:99:8c:80:51:7e:15:41:bf:56:53:51: 94:3a:ac:0f:5c:1b:83:40:c2:02:bd:2e:f8:e4:db: 69:82:ea:d5:12:4e:30:86:3a:69:55:2d:7a:f1:08: 97:89:f8:41:34:45:ab:37:78:16:5d:41:02:ba:c0: b8:83:35:c9:6e:e8:ed:1b:81:16:d8:03:ea:ec:c6: d1:63:17:6d:d1:f4:2e:38:f4:f3:45:97:4b:e9:6d: 30:5d:b7:39:9f:80:b1:e8:08:22:6e:90:66:c2:36: 58:f0:f2:3e:53:a1:c3:de:1d:6c:03:e8:7d:81:32: 00:64:6c:9c:79:f2:da:72:49:76:c5:48:e3:d9:68: a2:69:02:e4:27:c8:27:79:ff:0b:a7:b2:8e:98:67: c0:21:44:75:73:1a:7e:bd:81:a6:9d:57:4f:35:04: 3d:1c:1c:74:59:76:ac:5c:e6:e4:c2:db:5c:7d:8b: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:73:C0:AF:75:03:1D:C1:0E:4B:4D:DD:2B:0B:CE:11:3A:2F:9B:55 X509v3 Authority Key Identifier: keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d8:e2:44:19:b6:2a:ec:08:40:4a:43:32:c2:40:24:a9:24: 8a:e1:db:a1:6c:83:88:46:40:a7:1c:2b:cf:78:cd:c0:77:46: 80:cc:18:f7:c8:4d:0e:d3:26:90:47:19:3e:d1:f4:42:ab:8b: 67:ab:e6:da:99:db:f6:15:f1:d8:0b:e5:b7:88:a9:90:8c:81: b9:aa:f5:ff:73:3e:70:a3:02:c3:92:5b:2d:5a:e4:e9:7b:aa: 60:09:13:49:a7:c3:55:b8:86:c6:af:2f:3d:25:f2:2d:65:56: 87:20:c3:b1:23:b3:2d:ce:0e:17:51:ef:e3:f1:d3:d9:33:16: 9f:61:3f:d3:73:ff:dc:bc:c0:40:40:b6:df:b5:ad:66:0a:bf: 1a:b5:f9:77:c6:1e:14:d5:48:ea:d5:d4:e5:e3:ca:35:c6:77: dc:eb:7c:9a:e0:50:eb:53:01:c8:be:49:95:b8:e6:af:c7:de: 24:c0:0b:5e:22:2d:e9:65:f3:ad:9c:ab:4b:31:66:af:24:2d: 79:e4:9c:ed:a8:21:c3:af:04:fe:7f:8e:8a:96:c7:35:a8:87: 86:e7:bb:02:ca:9d:55:8f:e3:db:15:13:f5:69:be:f8:e5:5d: 28:42:ef:95:d7:0f:95:4d:2d:95:89:69:e5:9a:e0:18:45:6e: bb:fc:a6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0xsWg0c4edq46pNoQ0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYmNiNTdlMmQ1ZTQwNjMwZTE5M2JkNWNlYjE2ZjFlZjE4 NzQzYTMwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhjMzczYzBhZjc1MDMxZGMxMGU0YjRkZGQyYjBiY2UxMTNhMmY5YjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY6z1JzFwJ+qLSYEN27D8s1s+N7Z 9FvLSPwsnJtFmPAa8ClpOmQ2meuX3bBgw3iKDsKNjhnM1zMPcowDfEgbsphMGZMK hzDChGdNI+/zmYyAUX4VQb9WU1GUOqwPXBuDQMICvS745NtpgurVEk4whjppVS16 8QiXifhBNEWrN3gWXUECusC4gzXJbujtG4EW2APq7MbRYxdt0fQuOPTzRZdL6W0w Xbc5n4Cx6AgibpBmwjZY8PI+U6HD3h1sA+h9gTIAZGycefLackl2xUjj2WiiaQLk J8gnef8Lp7KOmGfAIUR1cxp+vYGmnVdPNQQ9HBx0WXasXObkwttcfYujcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNzwK91Ax3BDktN3SsLzhE6L5tVMB8GA1UdIwQY MBaAFG68tX4tXkBjDhk71c6xbx7xh0OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgt OWFkMThiYTFhM2Q5LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgtOWFkMThiYTFhM2Q5 LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNjiRBm2 KuwIQEpDMsJAJKkkiuHboWyDiEZApxwrz3jNwHdGgMwY98hNDtMmkEcZPtH0QquL Z6vm2pnb9hXx2Avlt4ipkIyBuar1/3M+cKMCw5JbLVrk6XuqYAkTSafDVbiGxq8v PSXyLWVWhyDDsSOzLc4OF1Hv4/HT2TMWn2E/03P/3LzAQEC237WtZgq/GrX5d8Ye FNVI6tXU5ePKNcZ33Ot8muBQ61MByL5Jlbjmr8feJMALXiIt6WXzrZyrSzFmryQt eeSc7aghw68E/n+OipbHNaiHhue7AsqdVY/j2xUT9Wm++OVdKELvldcPlU0tlYlp 5ZrgGEVuu/ym7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:54 2025 by rpki-client