This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          mEBLCIpDyXaJsusHKfs149c+ZPtr0hq5M+0hEZxF0+E=
Subject key identifier:   CE:97:59:D9:23:BF:AB:5F:70:EB:7B:1D:28:29:27:0E:7A:EF:9F:76
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       019AF276ABE521AE75DCE3563AF2936A787E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          1467
Signing time:             Sat 06 Dec 2025 07:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:54 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: cFh8yHCfYHM9/BTNts1O733ZiBl1OWptl0lJ/p+zBpQ=)
                          2: Ss7XTWpHmXw6L7KiP6AnSkLRnd4.roa (hash: rhKrnmJP9HKc4ydR4WxRdbHD2Fh6lt0Ep1m2e2GnBII=)
                          3: vjNiGGPMMIohREeXJHQsS5InGhc.roa (hash: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:ab:e5:21:ae:75:dc:e3:56:3a:f2:93:6a:78:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Dec  6 07:00:54 2025 GMT
            Not After : Dec  7 07:00:54 2025 GMT
        Subject: CN=ce9759d923bfab5f70eb7b1d2829270e7aef9f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:ef:7c:24:50:7c:35:05:0d:5e:46:1e:55:
                    32:e8:7f:36:1a:69:7f:d7:3d:a5:5b:ce:a4:e6:70:
                    8b:a8:03:5f:54:7b:b2:e2:75:b9:c9:52:54:8f:82:
                    05:a2:22:b1:5f:b4:e1:c6:a9:c1:e8:31:a8:48:04:
                    ac:4a:67:d8:3e:57:b7:f4:b0:be:e3:7a:66:d2:8b:
                    57:22:89:83:55:f3:34:89:62:b4:63:4b:a9:47:f9:
                    05:0b:87:85:89:7b:7e:4c:83:67:ae:5d:42:3f:21:
                    ab:1d:04:65:2f:fd:04:17:33:02:88:2b:6e:c5:ba:
                    cf:aa:70:8e:e7:92:7c:88:29:4f:2e:37:cb:80:00:
                    0c:07:c7:d0:41:68:3d:5a:b4:bf:49:37:c8:f5:17:
                    59:fe:ad:61:19:28:20:20:53:6f:0b:2b:e1:e3:5f:
                    a9:5c:7e:66:74:b0:a4:07:9b:2d:0d:b2:7d:51:91:
                    4f:f7:dd:c5:2d:de:57:df:fd:24:69:c7:29:9e:dc:
                    5a:97:66:f0:7b:74:c9:83:46:28:b1:70:46:19:19:
                    d3:ec:e0:97:7e:e7:ea:90:6b:ee:cd:07:95:dc:d4:
                    79:ee:27:14:12:e4:d9:22:ab:00:30:da:17:02:b1:
                    15:3c:11:37:ac:54:99:f4:64:13:b8:09:5c:3b:75:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:59:D9:23:BF:AB:5F:70:EB:7B:1D:28:29:27:0E:7A:EF:9F:76
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:7e:e4:87:3d:b3:4f:e3:0d:a3:4b:04:8c:80:ce:d9:73:
         68:85:86:a6:e8:a0:94:ed:39:d4:60:88:8f:44:ba:28:8d:a5:
         40:4e:45:0c:b1:7e:d5:08:c6:b9:0e:d1:f4:4c:d1:60:99:34:
         47:42:bb:4f:55:16:c7:11:bf:b8:90:6d:55:5d:71:36:81:0c:
         34:d0:e1:fa:c6:3f:ac:08:fa:b8:2d:b0:2f:0e:15:c9:99:e6:
         59:18:19:ef:5a:f7:90:eb:f1:ba:06:d2:b8:91:90:13:47:18:
         f1:0f:9f:57:58:7e:89:60:61:9f:3f:b8:59:f9:f1:59:05:6b:
         1a:3d:2d:f0:1d:4a:69:a3:c0:ea:28:fc:5b:87:81:24:ff:3a:
         87:ab:2f:7e:4c:a8:de:50:0e:25:6b:4b:de:58:37:f2:08:db:
         3e:ad:59:60:4b:d5:3a:e3:25:88:2d:2a:63:c8:6a:a4:a7:57:
         40:95:2a:80:55:47:ce:00:16:48:a9:38:18:f5:6f:75:7c:2a:
         f5:26:3b:70:5b:4c:cf:43:60:e1:46:f3:ce:33:3a:50:15:99:
         b8:c4:3b:77:a2:97:97:ca:3b:7e:88:cb:20:b0:da:3f:9f:2d:
         04:57:b0:d5:d5:55:62:db:76:15:95:a9:b7:1b:e6:d3:75:b8:
         6b:9c:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:59:14 2025 by rpki-client