This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json) Hash identifier: bh7b2EJtGilhpffnBWz38VtEc+YZrxUz1GwvDylkm0w= Subject key identifier: 44:61:2A:E7:92:EE:9D:DC:B4:09:00:41:4D:5E:5A:E7:69:D8:38:8B Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00 Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400 Certificate serial: 019AF0BEED4B0D03FCA8FFC3F3EAA4F0652A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft Manifest number: 1204 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: T8//PTFokHy7LdNOkkUccFxirAxoLlj+xDH3+Ka7Kfk=) 2: PQhxpowWbirpi73sooxP6-CQe0w.roa (hash: I/+Rv+eczGu/4NSVaZNewfe6Bd3n9RCdyw3Ufabk0jk=) 3: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ed:4b:0d:03:fc:a8:ff:c3:f3:ea:a4:f0:65:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=44612ae792ee9ddcb40900414d5e5ae769d8388b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:20:11:7c:0d:64:46:0e:fd:fa:3c:57:6b: b3:e6:09:d7:11:53:7c:72:56:07:23:2a:2f:59:48: e4:90:bc:67:04:61:37:e4:8e:49:35:16:a2:ed:f4: b4:27:20:af:1b:17:96:fb:4b:a9:06:e3:d9:ba:f6: 62:19:39:a8:55:4b:f5:b1:fb:cd:a0:5a:73:88:4b: d6:f9:6b:35:31:d2:6e:cc:29:9b:71:2b:9f:08:89: 55:f3:92:c4:79:52:4a:2e:71:a5:53:dd:30:11:d3: 2c:26:89:fc:62:d7:cf:f6:73:91:eb:c8:1a:f3:c1: 42:ae:2b:7c:57:9f:99:ed:2f:78:0f:71:a5:f3:c7: 74:09:6d:ab:82:dc:d2:06:59:9c:a6:50:02:01:7f: 62:ad:68:06:90:c7:9f:7b:4f:da:d1:49:cc:ca:01: df:3e:a1:f6:b8:03:1d:e3:50:fd:42:02:fa:c0:a1: 8d:02:33:56:43:10:80:08:b7:e2:f5:93:30:20:ca: 1b:a9:4b:2a:99:ad:01:e8:3a:ff:e1:42:32:38:7a: a3:8c:c9:a0:5c:4a:85:21:d7:99:35:36:7e:e0:61: 85:84:9b:ea:74:aa:55:51:e0:a3:68:7c:4a:f4:d5: ad:59:18:b9:c5:34:64:32:dd:ed:fc:7b:16:d9:5b: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:61:2A:E7:92:EE:9D:DC:B4:09:00:41:4D:5E:5A:E7:69:D8:38:8B X509v3 Authority Key Identifier: keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:77:3b:01:2e:23:2a:91:89:4a:85:34:2d:55:0f:c8:63:24: ab:39:03:40:38:0c:65:1f:4c:3b:f4:31:65:5a:af:ef:53:ca: dd:98:e2:9a:8b:91:6d:56:8c:b6:f1:77:4f:8a:81:a3:22:a6: 06:fe:57:e5:2d:6b:42:55:a4:c7:6a:89:e8:a4:de:d5:83:9e: cc:a3:6e:45:48:97:ff:fd:32:b1:6c:0a:25:32:5e:cb:71:3a: 6b:65:7d:67:47:56:42:2f:c3:d5:eb:a7:fe:08:39:98:f5:8b: 11:66:2b:31:3d:ec:1c:9b:dd:2b:94:c1:de:3b:a9:4d:70:aa: 13:01:ea:b2:0a:48:31:c6:87:fa:7f:ea:ee:d9:68:7f:a0:69: 02:a0:5d:ce:e3:95:32:a5:26:9b:e3:c3:61:da:78:ea:d8:9c: 66:08:3a:bd:d9:3b:6c:7a:83:0b:63:e3:d7:0c:38:f1:93:26: 75:43:1c:2c:77:c3:40:04:bb:84:c6:f7:9e:04:a7:7d:a3:a9: 33:1d:ec:0b:c6:9e:d0:e5:ba:16:5b:5d:79:62:71:1d:71:88: 26:44:74:f5:40:a7:6f:b2:af:a7:a2:82:37:78:8b:b2:92:62: 72:11:c2:a1:a7:67:ad:cd:0a:f9:8e:83:4e:6f:21:6a:82:94: ee:7f:33:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu1LDQP8qP/D8+qk8GUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5 NGU0MDAwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD Eyg0NDYxMmFlNzkyZWU5ZGRjYjQwOTAwNDE0ZDVlNWFlNzY5ZDgzODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9IgEXwNZEYO/fo8V2uz5gnXEVN8 clYHIyovWUjkkLxnBGE35I5JNRai7fS0JyCvGxeW+0upBuPZuvZiGTmoVUv1sfvN oFpziEvW+Ws1MdJuzCmbcSufCIlV85LEeVJKLnGlU90wEdMsJon8YtfP9nOR68ga 88FCrit8V5+Z7S94D3Gl88d0CW2rgtzSBlmcplACAX9irWgGkMefe0/a0UnMygHf PqH2uAMd41D9QgL6wKGNAjNWQxCACLfi9ZMwIMobqUsqma0B6Dr/4UIyOHqjjMmg XEqFIdeZNTZ+4GGFhJvqdKpVUeCjaHxK9NWtWRi5xTRkMt3t/HsW2Vu7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERhKueS7p3ctAkAQU1eWudp2DiLMB8GA1UdIwQY MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt NTAxMjU3NTkwZGU3LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3 LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHc7AS4j KpGJSoU0LVUPyGMkqzkDQDgMZR9MO/QxZVqv71PK3ZjimouRbVaMtvF3T4qBoyKm Bv5X5S1rQlWkx2qJ6KTe1YOezKNuRUiX//0ysWwKJTJey3E6a2V9Z0dWQi/D1eun /gg5mPWLEWYrMT3sHJvdK5TB3jupTXCqEwHqsgpIMcaH+n/q7tlof6BpAqBdzuOV MqUmm+PDYdp46ticZgg6vdk7bHqDC2Pj1ww48ZMmdUMcLHfDQAS7hMb3ngSnfaOp Mx3sC8ae0OW6FltdeWJxHXGIJkR09UCnb7Kvp6KCN3iLspJichHCoadnrc0K+Y6D Tm8haoKU7n8zEw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:11 2025 by rpki-client