This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json) Hash identifier: dp8FrrWKSQV8pWL+vWIXGGjvxr7piDzQQXnacijsq2o= Subject key identifier: 3B:9F:C7:1D:FC:A7:1B:C0:8E:F7:28:3F:A7:BF:6B:9F:4E:39:08:AF Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681 Certificate serial: 019AF12D33DCDA37AEE67A65752F7B7940B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft Manifest number: 0BCC Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: Tw142GmmgOI2ECVtXXF0ZK9Rm06d6jrgqfFGoWJCjok=) 2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:33:dc:da:37:ae:e6:7a:65:75:2f:7b:79:40:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=3b9fc71dfca71bc08ef7283fa7bf6b9f4e3908af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:60:ee:f0:be:7b:62:c9:28:45:05:8c:3a: 51:6e:0c:21:28:e9:75:d6:93:44:f2:d7:a9:57:b6: 64:f1:cb:b0:a3:d4:41:e7:21:b0:75:cd:1f:a2:64: c1:b4:1c:e1:f2:fe:04:27:10:df:b9:eb:2a:35:90: c1:88:0a:95:fd:1d:fa:12:fd:06:e8:a5:f6:20:23: e2:51:ad:6a:b3:8a:cb:20:88:d4:fd:32:45:66:5c: ba:3b:6d:31:ca:66:dd:e1:39:87:6c:e7:f3:bf:c5: c5:51:2e:23:d4:21:a7:c6:18:27:12:18:dc:26:77: 92:84:02:96:51:79:c6:1f:be:90:f8:35:84:64:75: 77:02:f0:2c:84:f1:42:04:ec:3f:d7:8a:aa:a4:59: b1:e6:e1:0b:76:67:5f:51:5e:f3:ba:e5:c0:62:3b: d9:f2:5a:95:db:61:d7:29:3b:43:cc:71:db:ea:bc: 9b:7d:1c:cf:81:11:89:db:06:7f:43:bf:20:56:19: 68:77:16:fe:f6:01:60:95:2f:33:1b:c6:23:32:d9: 51:82:0e:13:6c:fc:8a:f3:1b:27:25:14:c8:e2:c5: 4e:70:e7:a5:1b:8a:c8:09:85:b2:8f:74:84:cf:f7: 3b:f0:c6:9a:0f:7c:5f:67:80:2b:01:41:0e:29:6d: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:C7:1D:FC:A7:1B:C0:8E:F7:28:3F:A7:BF:6B:9F:4E:39:08:AF X509v3 Authority Key Identifier: keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:f5:ca:93:0c:a3:d1:1f:35:70:6c:9b:ce:74:05:8e:f6:67: 6d:c8:92:29:df:68:b2:21:b8:b6:8f:88:03:7f:d1:96:d4:33: ee:f8:2a:0a:c0:10:41:23:b0:62:ce:9a:97:37:78:c8:33:80: 73:04:6a:21:08:0e:43:85:c4:f5:8f:27:ca:84:84:18:ef:49: 0d:2c:e1:98:64:e7:7b:e1:a5:ec:2d:db:51:87:f7:ae:db:0b: ab:18:ee:90:c7:68:50:83:a8:4d:38:f0:d3:d5:76:bd:a3:9b: 87:3e:21:6e:de:6e:69:63:10:94:ec:b1:86:aa:78:46:f3:6a: da:ff:db:42:94:2a:c5:a6:8c:71:5a:29:61:ea:f2:4c:1f:3d: fc:ad:17:e4:d3:81:63:cd:91:46:9f:18:79:88:66:eb:ab:01: 10:a5:61:cd:3d:46:2c:53:50:ae:ad:ec:db:a5:15:f6:61:12: 50:e2:c2:27:e2:0f:b2:a2:d4:dd:c6:37:58:98:29:1b:f8:35: e5:63:0d:63:ab:17:f9:a2:dd:d7:f7:90:60:82:78:99:75:4c: da:1a:56:72:5a:04:6f:94:ff:ca:c3:51:54:87:b1:df:5e:65: 22:7d:dd:d4:8e:db:6a:70:7a:3e:48:18:0c:28:b0:56:7c:d2: 66:7c:2c:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTPc2jeu5npldS97eUC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MmIxZWI2MTAwYzBjYTU2NDQ0MzcwNThkNDJmNGZkNzIy MzM2ODEwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EygzYjlmYzcxZGZjYTcxYmMwOGVmNzI4M2ZhN2JmNmI5ZjRlMzkwOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLdg7vC+e2LJKEUFjDpRbgwhKOl1 1pNE8tepV7Zk8cuwo9RB5yGwdc0fomTBtBzh8v4EJxDfuesqNZDBiAqV/R36Ev0G 6KX2ICPiUa1qs4rLIIjU/TJFZly6O20xymbd4TmHbOfzv8XFUS4j1CGnxhgnEhjc JneShAKWUXnGH76Q+DWEZHV3AvAshPFCBOw/14qqpFmx5uELdmdfUV7zuuXAYjvZ 8lqV22HXKTtDzHHb6rybfRzPgRGJ2wZ/Q78gVhlodxb+9gFglS8zG8YjMtlRgg4T bPyK8xsnJRTI4sVOcOelG4rICYWyj3SEz/c78MaaD3xfZ4ArAUEOKW2H2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDufxx38pxvAjvcoP6e/a59OOQivMB8GA1UdIwQY MBaAFAcrHrYQDAylZEQ3BY1C9P1yIzaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEt MGUwN2U1YTY2ZDU5LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEtMGUwN2U1YTY2ZDU5 LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPXKkwyj 0R81cGybznQFjvZnbciSKd9osiG4to+IA3/RltQz7vgqCsAQQSOwYs6alzd4yDOA cwRqIQgOQ4XE9Y8nyoSEGO9JDSzhmGTne+Gl7C3bUYf3rtsLqxjukMdoUIOoTTjw 09V2vaObhz4hbt5uaWMQlOyxhqp4RvNq2v/bQpQqxaaMcVopYeryTB89/K0X5NOB Y82RRp8YeYhm66sBEKVhzT1GLFNQrq3s26UV9mESUOLCJ+IPsqLU3cY3WJgpG/g1 5WMNY6sX+aLd1/eQYIJ4mXVM2hpWcloEb5T/ysNRVIex315lIn3d1I7banB6PkgY DCiwVnzSZnwsGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:33 2025 by rpki-client