This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json) Hash identifier: zlt7S4D/xNGrRNR2nduFGarxFQ0rmBFT2TdO8Kgo7kY= Subject key identifier: C2:55:B8:20:17:42:87:00:0F:EF:59:C3:57:3B:4C:8E:AF:EE:85:48 Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36 Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36 Certificate serial: 019AF12DFAA5F85E82DEA48DE42F0B49A00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft Manifest number: 016D Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: iiMCSD0TA53tq+ErtuVIFqMltqQTtZ++f+T+/2wYbqU=) 2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fa:a5:f8:5e:82:de:a4:8d:e4:2f:0b:49:a0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=c255b820174287000fef59c3573b4c8eafee8548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:9c:8c:5a:00:5f:c1:48:af:1d:41:a3:aa: 65:46:5c:e2:77:35:11:02:79:6c:92:f0:62:53:61: a9:e2:e1:68:a2:4b:20:90:6f:78:a1:3a:87:7e:39: a3:fc:71:d1:86:f5:cc:f4:04:c4:9c:33:42:1b:ce: 8c:15:20:31:00:4c:f9:b3:8e:d6:6a:40:f3:b2:09: 6c:aa:1c:0d:23:0e:dd:97:11:69:ca:b5:da:1d:cf: a6:a9:45:cf:22:31:f3:90:c6:c4:fd:1c:cb:00:5e: ef:45:a7:75:ce:97:03:b2:76:a6:55:c6:45:ac:0d: d3:ec:fc:b4:5b:a6:d6:29:b9:2f:7c:9d:36:9a:93: 13:b6:d1:fd:48:0f:cf:ef:5d:19:5f:8e:88:8b:b0: b2:59:54:2d:16:3e:5a:30:2f:40:65:2d:34:fc:3a: 43:d9:0c:11:76:32:0d:49:df:a1:71:f9:08:ac:21: 79:40:7b:8c:9c:5c:3e:10:9b:7a:0b:54:56:dc:76: be:2f:b3:2d:c0:dd:28:0b:18:3b:75:8f:46:ac:a3: 5e:42:be:36:4c:a2:c7:6c:8c:55:4a:5b:3b:89:9b: cc:cb:ca:e0:ef:27:2a:c8:ff:a8:d5:e8:9a:21:40: 81:9d:68:75:2c:4f:3b:ce:23:ad:1b:d6:4d:03:72: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:55:B8:20:17:42:87:00:0F:EF:59:C3:57:3B:4C:8E:AF:EE:85:48 X509v3 Authority Key Identifier: keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c8:e1:69:f1:f2:7f:29:b8:29:72:4c:cb:25:f8:ec:a5:70: 47:18:af:f1:b5:f6:60:4c:a4:08:77:b6:60:7e:e9:a6:09:97: 46:a6:4f:74:be:3f:74:51:71:19:ab:a5:84:be:d5:16:67:d3: 20:b6:9e:ef:d4:a4:7c:5f:7e:10:dd:e8:8b:85:d4:a8:5f:ef: 8f:bc:e5:07:9e:b1:b8:53:89:63:00:df:b7:4b:4f:9e:66:b0: 8a:ae:8b:8c:6d:be:d4:c9:7c:22:91:ae:d8:4b:b3:06:8a:c6: ab:53:c8:38:0b:86:98:b4:da:6b:4f:32:c9:73:93:f2:8a:07: e5:94:c4:84:b8:64:7d:4f:9b:17:1a:6c:74:9b:15:98:d7:61: e4:3e:32:36:7b:94:37:6f:e4:fe:7b:91:3b:52:c6:9f:4e:f3: e1:88:15:2b:1e:8d:a7:f7:81:33:06:f7:63:fc:46:e3:9c:fd: 4a:0b:6b:91:e2:e2:44:53:7e:18:57:00:88:23:9d:1f:81:3a: 85:b3:3f:8a:80:92:d8:ff:f3:23:b6:70:6b:a2:71:2d:73:54: db:61:e6:0b:4c:64:84:a5:20:98:3f:31:23:63:0d:2f:0a:96: ac:14:74:b3:2b:26:94:8a:c3:d0:57:59:67:a3:78:c0:f6:18: 45:7c:1a:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfql+F6C3qSN5C8LSaALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODhjNjY0ODViYjYwMzQ0MTc0NTc0NmY5Zjg4NmEyYTZh MTVhMzYwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EyhjMjU1YjgyMDE3NDI4NzAwMGZlZjU5YzM1NzNiNGM4ZWFmZWU4NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIecjFoAX8FIrx1Bo6plRlzidzUR AnlskvBiU2Gp4uFooksgkG94oTqHfjmj/HHRhvXM9ATEnDNCG86MFSAxAEz5s47W akDzsglsqhwNIw7dlxFpyrXaHc+mqUXPIjHzkMbE/RzLAF7vRad1zpcDsnamVcZF rA3T7Py0W6bWKbkvfJ02mpMTttH9SA/P710ZX46Ii7CyWVQtFj5aMC9AZS00/DpD 2QwRdjINSd+hcfkIrCF5QHuMnFw+EJt6C1RW3Ha+L7MtwN0oCxg7dY9GrKNeQr42 TKLHbIxVSls7iZvMy8rg7ycqyP+o1eiaIUCBnWh1LE87ziOtG9ZNA3KGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJVuCAXQocAD+9Zw1c7TI6v7oVIMB8GA1UdIwQY MBaAFG2IxmSFu2A0QXRXRvn4hqKmoVo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTIt YjVhNGMyMjQzMmVmLzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTItYjVhNGMyMjQzMmVm LzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8jhafHy fym4KXJMyyX47KVwRxiv8bX2YEykCHe2YH7ppgmXRqZPdL4/dFFxGaulhL7VFmfT ILae79SkfF9+EN3oi4XUqF/vj7zlB56xuFOJYwDft0tPnmawiq6LjG2+1Ml8IpGu 2EuzBorGq1PIOAuGmLTaa08yyXOT8ooH5ZTEhLhkfU+bFxpsdJsVmNdh5D4yNnuU N2/k/nuRO1LGn07z4YgVKx6Np/eBMwb3Y/xG45z9SgtrkeLiRFN+GFcAiCOdH4E6 hbM/ioCS2P/zI7Zwa6JxLXNU22HmC0xkhKUgmD8xI2MNLwqWrBR0sysmlIrD0FdZ Z6N4wPYYRXwaSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:35 2025 by rpki-client