This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json) Hash identifier: 0+eWmPvR8ctZY4vq0rxX+2bQHBnL/rqkJ5q70fvedpA= Subject key identifier: C9:73:5C:55:D0:E5:9A:C3:19:A4:E6:CF:95:BF:45:C1:EA:46:DC:8C Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681 Certificate serial: 019BF4D0DE0B47D9513E0EEFA9F6CDC0A14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft Manifest number: 0C53 Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: tLYRaqmnA+v7SUFtnAsaSXxMovBHqC4GWbQ501UljqQ=) 2: h1o3bXxvRbQ7S4dxypgO58cC3Qo.roa (hash: oJ/WKinJTQucsbv9/MhIQmZJikDgqhcaJReTCYd19W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:de:0b:47:d9:51:3e:0e:ef:a9:f6:cd:c0:a1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681 Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=c9735c55d0e59ac319a4e6cf95bf45c1ea46dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:05:20:69:cd:82:db:5a:9a:e4:c1:71:ec: 21:c2:75:08:ac:3c:d7:2b:4b:72:4d:e0:63:3b:40: f9:d9:37:b9:8d:63:65:66:2f:0b:7b:ea:9e:6f:87: 55:d2:01:93:92:89:c8:09:06:74:9d:46:e5:cd:9d: 39:6e:72:cc:11:cb:d1:6a:5d:35:1b:0c:86:55:46: c1:40:2b:dd:18:a3:80:b7:39:fc:66:6f:a9:50:b7: b0:5d:86:6c:2e:fd:2e:16:8f:b4:fb:5a:bf:9c:17: 62:8b:1e:97:8f:2a:0a:61:1f:d4:6c:b3:a7:d1:47: 31:85:da:3c:02:51:bf:1c:9e:1c:82:db:76:1f:44: 33:cf:6b:5b:be:74:02:d7:bb:28:53:4f:35:84:6b: 25:7e:03:dc:e6:c8:63:82:e8:2e:4e:b1:e4:5b:57: b7:01:62:86:4a:e9:4e:9c:92:f7:7b:1f:6d:f0:4c: c6:d4:e4:a1:d6:a5:b8:94:81:f7:56:ef:08:a5:7a: 96:5a:eb:84:69:4e:74:97:a9:d0:4c:48:72:87:c3: cf:93:b4:62:98:63:5c:3c:9f:29:b7:f9:e7:86:3d: 9f:3d:29:f9:91:ed:35:ea:88:76:ef:26:5e:1e:5e: f0:f7:86:5e:b0:fb:5d:7d:69:f6:e8:82:f4:60:12: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:5C:55:D0:E5:9A:C3:19:A4:E6:CF:95:BF:45:C1:EA:46:DC:8C X509v3 Authority Key Identifier: keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c2:2c:81:a6:e9:c4:1f:e5:e8:34:20:1d:50:9b:25:83:62: 32:f0:c7:8c:e7:27:75:7a:1e:b3:79:63:b4:e6:94:df:18:4c: cd:6c:af:8d:db:7c:3a:ce:2f:d1:79:67:c1:09:3a:12:27:0f: 7e:c2:97:0e:82:e0:17:e6:3a:2b:70:2a:d2:90:4d:81:b0:1f: 89:85:72:8f:ef:c8:1f:13:f4:a2:37:a3:14:89:ae:01:bf:5b: 2b:62:3a:dc:e9:65:f6:f0:83:99:0a:5e:84:de:12:5f:6f:91: 85:9a:33:aa:77:95:3f:b5:97:9f:c2:9f:05:94:d5:57:a0:6b: 06:0f:1d:1a:ff:ea:3c:a9:74:25:26:09:fb:7e:8d:75:c1:c3: ae:d7:1d:df:f3:40:d4:95:2f:fd:70:0d:1b:38:a8:60:6a:4e: 39:e4:ae:dc:56:8a:80:c8:6d:3e:b4:ba:c4:03:05:86:f1:80: f2:b9:86:f0:d5:21:98:b2:2e:49:2a:e1:f3:22:09:41:36:b1: 88:fa:1f:d2:bd:b8:28:08:40:e7:fa:38:81:f7:d4:3d:c3:9a: cc:23:68:f3:ee:59:a0:e8:a1:4b:3d:c0:61:3c:19:1f:0e:85: dd:8c:42:09:8a:09:7d:98:52:17:8b:c6:36:2f:09:45:f2:01: db:48:55:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00N4LR9lRPg7vqfbNwKFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MmIxZWI2MTAwYzBjYTU2NDQ0MzcwNThkNDJmNGZkNzIy MzM2ODEwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD EyhjOTczNWM1NWQwZTU5YWMzMTlhNGU2Y2Y5NWJmNDVjMWVhNDZkYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXoFIGnNgttamuTBcewhwnUIrDzX K0tyTeBjO0D52Te5jWNlZi8Le+qeb4dV0gGTkonICQZ0nUblzZ05bnLMEcvRal01 GwyGVUbBQCvdGKOAtzn8Zm+pULewXYZsLv0uFo+0+1q/nBdiix6XjyoKYR/UbLOn 0Ucxhdo8AlG/HJ4cgtt2H0Qzz2tbvnQC17soU081hGslfgPc5shjguguTrHkW1e3 AWKGSulOnJL3ex9t8EzG1OSh1qW4lIH3Vu8IpXqWWuuEaU50l6nQTEhyh8PPk7Ri mGNcPJ8pt/nnhj2fPSn5ke016oh27yZeHl7w94ZesPtdfWn26IL0YBJ3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlzXFXQ5ZrDGaTmz5W/RcHqRtyMMB8GA1UdIwQY MBaAFAcrHrYQDAylZEQ3BY1C9P1yIzaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEt MGUwN2U1YTY2ZDU5LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEtMGUwN2U1YTY2ZDU5 LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccIsgabp xB/l6DQgHVCbJYNiMvDHjOcndXoes3ljtOaU3xhMzWyvjdt8Os4v0XlnwQk6EicP fsKXDoLgF+Y6K3Aq0pBNgbAfiYVyj+/IHxP0ojejFImuAb9bK2I63Oll9vCDmQpe hN4SX2+RhZozqneVP7WXn8KfBZTVV6BrBg8dGv/qPKl0JSYJ+36NdcHDrtcd3/NA 1JUv/XANGzioYGpOOeSu3FaKgMhtPrS6xAMFhvGA8rmG8NUhmLIuSSrh8yIJQTax iPof0r24KAhA5/o4gffUPcOazCNo8+5ZoOihSz3AYTwZHw6F3YxCCYoJfZhSF4vG Ni8JRfIB20hVVg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:06 2026 by rpki-client