This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json) Hash identifier: y71cMQu9wFwDeCAZI2u9yIJtzggQhxn1qzvec1GSU68= Subject key identifier: 1F:61:0E:EC:A2:4D:A6:25:D6:AD:58:EA:EA:FB:4D:D2:76:0D:50:63 Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5 Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5 Certificate serial: 019AF12CEEAC00DAE7E04E63E29D10DAE436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft Manifest number: 0AC0 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: FJkxba8K6I/LFEPjR5RyQsNmP1qZmUWeR6YUT+DkCPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ee:ac:00:da:e7:e0:4e:63:e2:9d:10:da:e4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0587c8490b372045669f45f183193eed46f991f5 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=1f610eeca24da625d6ad58eaeafb4dd2760d5063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:47:f2:7a:44:71:82:d5:b1:f7:c4:d0:04: eb:0c:be:59:22:ac:28:b1:0f:cd:de:74:d3:ab:b0: f2:97:8c:0c:f4:9f:86:ed:68:81:32:d3:ed:32:c5: 1a:da:1d:f0:2d:e3:81:6d:7c:7c:20:ce:2e:91:d1: 7b:bd:fd:da:d3:c0:6c:cc:fa:69:b7:fa:db:88:f0: 82:7f:26:cb:4d:bb:a2:36:44:be:f5:9a:bc:b8:72: 0c:14:29:9e:19:8a:95:78:f5:96:5e:85:93:ef:82: cf:9b:19:e5:e7:88:55:dd:a5:00:f0:b7:7c:51:d4: 92:1a:f7:77:30:05:e6:d0:51:26:a5:f2:48:f8:e0: e4:d6:06:57:7e:87:6e:ef:8b:1e:70:de:4d:72:6a: c8:6c:8b:22:f3:d3:7a:de:ea:e1:94:de:86:bf:c6: 15:58:33:bc:cc:46:f6:d8:9c:61:3d:83:de:30:3a: 02:84:16:6e:7d:bd:43:64:0d:8b:bf:1c:82:c3:e3: d5:e5:de:cb:a3:4c:97:29:e0:81:d3:56:89:b0:27: 63:73:b5:5c:2e:1e:29:b2:54:44:92:26:42:6b:89: 05:d6:47:b2:6b:89:04:2a:be:ca:79:39:d9:1a:c3: ed:bf:c6:81:62:53:fe:23:a3:bb:64:6e:4b:e3:b9: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:61:0E:EC:A2:4D:A6:25:D6:AD:58:EA:EA:FB:4D:D2:76:0D:50:63 X509v3 Authority Key Identifier: keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:93:e0:55:e8:57:49:9d:9a:3a:79:eb:75:a3:fc:ff:8f: d9:38:e2:e5:d5:34:45:09:8d:8f:8c:a6:ef:0c:3d:cc:7a:70: 98:1a:5f:be:ff:f3:0b:f9:9b:99:66:6d:46:db:1b:24:8e:b9: 6d:36:e3:30:e3:8e:0f:87:77:e7:ea:f8:29:e3:12:80:6e:92: dd:00:6f:b1:44:33:e5:5d:ed:08:d3:10:e8:37:0f:3a:36:b7: 36:d6:e9:d4:d8:af:0e:52:f4:9c:27:d9:f0:7f:a7:f4:b8:a8: fa:a0:f6:64:fe:82:7a:81:b1:80:7d:e3:b4:81:f0:f4:f7:68: ff:1f:04:4e:52:de:a3:94:3c:c9:fd:9b:00:c6:ea:a1:db:62: 6f:4b:5d:6d:88:27:17:5b:c1:62:23:29:46:81:d6:a8:6a:ba: fe:28:f7:7f:29:21:35:b9:aa:1d:a0:00:c7:99:a5:7e:b9:9e: 36:4d:03:0c:e7:b7:32:f8:64:90:76:5e:46:ba:e9:b0:34:9e: 89:f9:25:f8:69:be:0e:5b:6d:2d:45:6a:02:47:5b:df:72:d2: 70:93:af:a8:79:d0:a2:17:b9:12:a6:c1:d9:d0:b9:ba:a0:b3: c6:c7:2d:9e:13:cc:3b:da:c4:c6:62:a7:91:7c:eb:6d:7b:56: b4:b4:6d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO6sANrn4E5j4p0Q2uQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODdjODQ5MGIzNzIwNDU2NjlmNDVmMTgzMTkzZWVkNDZm OTkxZjUwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD EygxZjYxMGVlY2EyNGRhNjI1ZDZhZDU4ZWFlYWZiNGRkMjc2MGQ1MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMFH8npEcYLVsffE0ATrDL5ZIqwo sQ/N3nTTq7Dyl4wM9J+G7WiBMtPtMsUa2h3wLeOBbXx8IM4ukdF7vf3a08BszPpp t/rbiPCCfybLTbuiNkS+9Zq8uHIMFCmeGYqVePWWXoWT74LPmxnl54hV3aUA8Ld8 UdSSGvd3MAXm0FEmpfJI+ODk1gZXfodu74secN5NcmrIbIsi89N63urhlN6Gv8YV WDO8zEb22JxhPYPeMDoChBZufb1DZA2LvxyCw+PV5d7Lo0yXKeCB01aJsCdjc7Vc Lh4pslREkiZCa4kF1keya4kEKr7KeTnZGsPtv8aBYlP+I6O7ZG5L47nbdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9hDuyiTaYl1q1Y6ur7TdJ2DVBjMB8GA1UdIwQY MBaAFAWHyEkLNyBFZp9F8YMZPu1G+ZH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQt YmEwMzNmOTA3ZDkxLzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQtYmEwMzNmOTA3ZDkx LzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev+T4FXo V0mdmjp563Wj/P+P2Tji5dU0RQmNj4ym7ww9zHpwmBpfvv/zC/mbmWZtRtsbJI65 bTbjMOOOD4d35+r4KeMSgG6S3QBvsUQz5V3tCNMQ6DcPOja3Ntbp1NivDlL0nCfZ 8H+n9Lio+qD2ZP6CeoGxgH3jtIHw9Pdo/x8ETlLeo5Q8yf2bAMbqodtib0tdbYgn F1vBYiMpRoHWqGq6/ij3fykhNbmqHaAAx5mlfrmeNk0DDOe3MvhkkHZeRrrpsDSe ifkl+Gm+DlttLUVqAkdb33LScJOvqHnQohe5EqbB2dC5uqCzxsctnhPMO9rExmKn kXzrbXtWtLRttw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:19 2025 by rpki-client