This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json) Hash identifier: qTShFdSw240/mBTlYhw4hMe1RzovInl2Lrrpx16PBTw= Subject key identifier: 22:EB:23:C4:83:0A:87:15:9B:1B:A8:EE:B9:C9:F1:D7:FE:9C:8A:48 Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58 Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858 Certificate serial: 019AF31B5B9AECF5FD30799949BF53AAF377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: Ies17n9K/8ZyDHX25iUk2gY7ORNBjyNcavyZUnsm0Dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5b:9a:ec:f5:fd:30:79:99:49:bf:53:aa:f3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858 Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=22eb23c4830a87159b1ba8eeb9c9f1d7fe9c8a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:17:61:c6:bc:dc:fa:40:0d:c3:85:32:25: cc:98:1f:60:8d:02:0c:8e:f6:c5:88:2b:b5:9d:a2: 7f:02:ea:c0:1d:f8:9b:09:d8:47:ec:5c:f3:4c:85: 6c:0e:e1:88:2b:4d:95:01:1f:d9:29:ca:2e:9d:7c: 16:0c:d0:92:4c:51:b6:09:8f:c1:b0:18:49:62:5e: 08:e9:ce:1f:12:05:a2:c8:0c:9b:d9:33:7e:10:df: c6:2a:82:9a:45:97:92:d3:80:2f:99:76:b1:87:90: 0d:f9:7c:82:6a:0d:f2:8f:a6:59:1f:9c:6e:86:fc: 2d:b5:c3:23:b7:13:63:a2:35:3a:a5:79:f5:dd:8f: 12:a4:fb:49:59:44:42:0d:49:6b:c0:6c:d4:44:3c: e5:39:40:0b:dd:bd:65:9d:15:da:cc:d2:08:2e:9e: 7a:90:ef:61:5b:02:86:25:36:26:af:1a:b6:c8:99: 09:05:32:7d:7f:5f:a3:ae:4e:22:be:4a:71:65:36: 40:33:18:fa:b2:30:7c:14:01:42:0b:9c:c7:1f:bc: 8f:fe:a6:dd:26:6d:51:05:24:7b:20:98:12:c1:49: 2b:92:4d:49:35:de:dd:b9:02:f5:96:1b:44:68:b9: c9:61:54:5d:28:4e:b6:37:44:90:4a:49:ae:6e:f0: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EB:23:C4:83:0A:87:15:9B:1B:A8:EE:B9:C9:F1:D7:FE:9C:8A:48 X509v3 Authority Key Identifier: keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d8:da:cf:5e:4c:3d:01:40:81:8d:d1:c7:d0:e6:bb:fd:6d: 7b:a2:a1:f6:69:a2:c5:d9:c8:7f:76:8e:99:ab:5d:1e:c1:1e: 9c:ef:08:f1:8c:8a:6b:4f:1b:26:a3:22:59:48:b8:39:98:44: 09:0b:76:a0:de:2f:2b:35:71:65:c6:0f:bd:1f:66:88:7b:13: 35:72:b1:d9:14:41:15:28:fd:35:41:54:ec:8e:b6:48:6f:6b: 9a:db:91:c0:c3:d5:aa:3d:ce:45:7f:44:ad:a8:34:1b:e2:af: 85:6e:a0:7e:7a:fd:03:2c:3a:63:fe:bf:a7:2c:1f:96:35:ae: 84:67:d9:0c:c8:70:f7:41:9a:6b:06:0e:ac:f7:2a:c8:dc:62: 21:9d:69:b8:68:1f:78:eb:58:29:16:3d:8f:a5:69:66:ca:c3: 57:9f:ce:48:e3:17:78:28:4f:53:95:0a:96:c2:22:03:23:84: 0d:dd:62:75:bb:fe:d6:fd:7e:5c:4f:65:8a:40:2e:4e:b4:d4: 01:5e:b9:04:61:ee:4d:6b:24:21:78:83:e1:16:12:20:58:36: a9:99:0d:19:07:f9:31:fe:cf:9c:86:0c:c3:b6:54:e3:5e:43: 5e:84:52:d9:00:48:50:3d:13:8b:cb:55:17:ac:30:52:7c:b9: 0a:6f:5a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1ua7PX9MHmZSb9TqvN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMmUxZTRlMDllYzExNWRhNzAzNmI2NGE1MTlkMjQ4ZDUy ZGI4NTgwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD EygyMmViMjNjNDgzMGE4NzE1OWIxYmE4ZWViOWM5ZjFkN2ZlOWM4YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL0XYca83PpADcOFMiXMmB9gjQIM jvbFiCu1naJ/AurAHfibCdhH7FzzTIVsDuGIK02VAR/ZKcounXwWDNCSTFG2CY/B sBhJYl4I6c4fEgWiyAyb2TN+EN/GKoKaRZeS04AvmXaxh5AN+XyCag3yj6ZZH5xu hvwttcMjtxNjojU6pXn13Y8SpPtJWURCDUlrwGzURDzlOUAL3b1lnRXazNIILp56 kO9hWwKGJTYmrxq2yJkJBTJ9f1+jrk4ivkpxZTZAMxj6sjB8FAFCC5zHH7yP/qbd Jm1RBSR7IJgSwUkrkk1JNd7duQL1lhtEaLnJYVRdKE62N0SQSkmubvAp+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLrI8SDCocVmxuo7rnJ8df+nIpIMB8GA1UdIwQY MBaAFG8uHk4J7BFdpwNrZKUZ0kjVLbhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xZTM1NDgtNGJhYS00OTFiLWJjYWYt YWFjMTZjNGQ1OWNjLzEvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xZTM1NDgtNGJhYS00OTFiLWJjYWYtYWFjMTZjNGQ1OWNj LzEvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtjaz15M PQFAgY3Rx9Dmu/1te6Kh9mmixdnIf3aOmatdHsEenO8I8YyKa08bJqMiWUi4OZhE CQt2oN4vKzVxZcYPvR9miHsTNXKx2RRBFSj9NUFU7I62SG9rmtuRwMPVqj3ORX9E rag0G+KvhW6gfnr9Ayw6Y/6/pywfljWuhGfZDMhw90GaawYOrPcqyNxiIZ1puGgf eOtYKRY9j6VpZsrDV5/OSOMXeChPU5UKlsIiAyOEDd1idbv+1v1+XE9likAuTrTU AV65BGHuTWskIXiD4RYSIFg2qZkNGQf5Mf7PnIYMw7ZU415DXoRS2QBIUD0Ti8tV F6wwUny5Cm9abg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:23 2025 by rpki-client