This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json) Hash identifier: PW7J3EcvbJJduZxQkJ5Ls3nLrC3zcr5RsXzc82Gprkk= Subject key identifier: 79:CE:5E:28:2D:25:82:19:07:16:C4:EC:0D:73:52:4D:EC:BF:1B:35 Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5 Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5 Certificate serial: 019B2EFAC498BFAD8454437CD8B8BDE15463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft Manifest number: 0AE0 Signing time: Thu 18 Dec 2025 01:02:24 +0000 Manifest this update: Thu 18 Dec 2025 01:02:24 +0000 Manifest next update: Fri 19 Dec 2025 01:02:24 +0000 Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: SagQmLww4N4K9RzHwwPTjY36TOmDBUuoteqC6B6TFKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:c4:98:bf:ad:84:54:43:7c:d8:b8:bd:e1:54:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0587c8490b372045669f45f183193eed46f991f5 Validity Not Before: Dec 18 01:02:24 2025 GMT Not After : Dec 19 01:02:24 2025 GMT Subject: CN=79ce5e282d2582190716c4ec0d73524decbf1b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:44:ef:54:89:bf:db:a8:3e:5f:d7:57:fa: ca:fa:8d:66:70:37:75:50:3b:e9:6f:97:af:a4:55: 49:62:cd:43:3e:b3:fd:b4:4b:90:12:43:74:8e:9c: 3f:3c:89:d1:b9:f7:37:45:62:24:b1:12:bc:28:f1: f9:68:15:34:64:52:67:15:39:6e:78:a5:0e:40:61: 7d:de:30:24:c6:e7:2f:d9:54:7c:4e:63:45:63:80: 2c:bc:d1:96:c7:24:46:bc:6a:07:38:ed:f6:56:be: 26:e0:f3:a0:1f:11:63:54:c2:42:0e:f7:9f:f1:7a: c7:06:10:0a:17:1c:60:e7:42:36:7e:eb:5b:e5:b4: c0:d6:0b:9f:09:2e:4d:7b:47:04:c2:39:29:41:7e: 51:5d:b1:a2:a8:ea:22:7b:f2:12:22:7e:2f:28:5d: 3c:4b:21:e4:52:d7:6a:b3:19:49:6b:cf:c1:94:dc: cb:16:9e:ad:34:1e:67:f8:fa:d1:f1:59:da:da:35: 5a:37:ae:c5:17:b4:ac:b3:b9:fb:5f:ab:45:44:53: 21:7e:55:82:3b:10:a5:f9:e8:ac:03:b5:41:bd:39: 24:c1:aa:38:a8:cc:82:6e:65:0a:3e:a7:68:a4:d3: 34:6e:43:a5:f4:de:74:91:56:6b:8c:71:2d:67:d9: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CE:5E:28:2D:25:82:19:07:16:C4:EC:0D:73:52:4D:EC:BF:1B:35 X509v3 Authority Key Identifier: keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c0:24:66:b9:b4:c2:7c:6c:5c:1d:15:32:71:0d:70:e3:0b: 9f:94:84:4b:d6:4b:2b:39:f2:51:03:36:35:53:ea:23:83:0f: 05:f7:6f:1f:fb:63:a1:e1:56:ec:09:f8:1a:25:4c:2a:ce:2b: 10:bd:fa:7d:d8:28:c0:be:c7:37:90:e8:50:a5:a3:9e:07:b3: f0:6a:4f:bd:76:25:4b:2b:74:7d:1d:64:d1:84:5a:c4:50:e8: 76:7b:a4:5d:17:28:33:0a:b5:6e:f0:3e:37:dc:10:44:53:95: 32:4f:25:cc:3a:7a:2b:b2:57:4b:dd:da:61:80:53:0a:f8:2b: 02:da:cb:82:a5:5c:71:7b:39:53:cb:9b:24:5c:37:8d:43:57: 2c:a8:a2:f5:c9:51:e5:ff:fb:96:ba:8a:ea:83:6b:da:1f:79: c5:ee:71:bd:b9:81:96:b6:4c:11:6e:97:44:cc:99:e3:a4:1c: 83:b8:2b:28:f4:57:21:51:82:20:c7:31:2e:08:f8:6d:72:f8: 55:da:6e:5a:b6:82:d5:68:eb:98:4e:73:fc:4a:c6:48:49:71: 2f:80:bb:a7:e4:c9:8b:16:40:7e:5f:20:45:4f:17:5f:71:a4: ef:dd:b0:89:40:20:8a:d5:3f:a4:9d:84:57:6a:41:f0:2a:e9: ad:ba:53:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+sSYv62EVEN82Li94VRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODdjODQ5MGIzNzIwNDU2NjlmNDVmMTgzMTkzZWVkNDZm OTkxZjUwHhcNMjUxMjE4MDEwMjI0WhcNMjUxMjE5MDEwMjI0WjAzMTEwLwYDVQQD Eyg3OWNlNWUyODJkMjU4MjE5MDcxNmM0ZWMwZDczNTI0ZGVjYmYxYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBJE71SJv9uoPl/XV/rK+o1mcDd1 UDvpb5evpFVJYs1DPrP9tEuQEkN0jpw/PInRufc3RWIksRK8KPH5aBU0ZFJnFTlu eKUOQGF93jAkxucv2VR8TmNFY4AsvNGWxyRGvGoHOO32Vr4m4POgHxFjVMJCDvef 8XrHBhAKFxxg50I2futb5bTA1gufCS5Ne0cEwjkpQX5RXbGiqOoie/ISIn4vKF08 SyHkUtdqsxlJa8/BlNzLFp6tNB5n+PrR8Vna2jVaN67FF7Sss7n7X6tFRFMhflWC OxCl+eisA7VBvTkkwao4qMyCbmUKPqdopNM0bkOl9N50kVZrjHEtZ9kwkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnOXigtJYIZBxbE7A1zUk3svxs1MB8GA1UdIwQY MBaAFAWHyEkLNyBFZp9F8YMZPu1G+ZH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQt YmEwMzNmOTA3ZDkxLzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQtYmEwMzNmOTA3ZDkx LzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsAkZrm0 wnxsXB0VMnENcOMLn5SES9ZLKznyUQM2NVPqI4MPBfdvH/tjoeFW7An4GiVMKs4r EL36fdgowL7HN5DoUKWjngez8GpPvXYlSyt0fR1k0YRaxFDodnukXRcoMwq1bvA+ N9wQRFOVMk8lzDp6K7JXS93aYYBTCvgrAtrLgqVccXs5U8ubJFw3jUNXLKii9clR 5f/7lrqK6oNr2h95xe5xvbmBlrZMEW6XRMyZ46Qcg7grKPRXIVGCIMcxLgj4bXL4 VdpuWraC1WjrmE5z/ErGSElxL4C7p+TJixZAfl8gRU8XX3Gk792wiUAgitU/pJ2E V2pB8CrprbpTdw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:14 2025 by rpki-client