This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json) Hash identifier: ET4z03KeM0Ik7WI2NYdBsj0kawr9/6MdvXVSdO9qROc= Subject key identifier: 6D:76:16:2B:49:8B:90:DA:15:79:52:91:C9:74:35:42:B5:AF:14:7A Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Certificate serial: 019AF3C03BC44E6514DFE82DA47BA9FE3A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:52 +0000 Manifest this update: Sat 06 Dec 2025 13:00:52 +0000 Manifest next update: Sun 07 Dec 2025 13:00:52 +0000 Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: g3Cv7d0k24t9ua0Ic3zXDV0XgZY/bHEFzh/luroVsUw=) 2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3b:c4:4e:65:14:df:e8:2d:a4:7b:a9:fe:3a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Validity Not Before: Dec 6 13:00:52 2025 GMT Not After : Dec 7 13:00:52 2025 GMT Subject: CN=6d76162b498b90da15795291c9743542b5af147a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:91:d4:ca:94:8e:4b:5d:52:c3:31:9f:0e: f7:cb:5a:5e:a0:30:98:94:a8:38:2d:e0:e5:c6:49: d4:bd:ff:87:ae:87:d9:32:60:21:02:cc:45:a2:1a: 00:0e:9e:59:db:17:d1:fe:c0:3c:00:f4:6b:b6:8e: 9b:65:3e:12:ab:1c:6d:86:d1:d1:47:fb:b7:79:96: ec:62:1d:72:35:a3:2a:ad:8e:95:94:29:56:92:4f: c3:0f:f5:ad:8f:45:f5:d9:59:6f:af:23:26:e3:e1: 89:45:95:f2:2a:53:99:c0:77:9a:f0:a2:3e:8f:2d: 5e:41:85:b3:ee:a8:ea:b8:50:83:b1:d0:8c:f9:01: 41:ad:85:51:7b:55:66:7b:65:b6:a2:e3:3d:f2:88: 6c:39:94:5b:7a:28:19:d6:d6:3f:e8:4f:68:04:9a: 7b:35:61:e5:ac:33:82:8b:80:22:43:4a:8d:f5:8d: 51:fb:c4:42:18:cf:87:1f:82:40:41:f0:ed:a6:b4: 08:60:d0:14:90:c1:96:54:f8:e3:a8:0e:92:11:44: 09:ae:b6:4f:0d:4f:75:e0:cd:7d:ee:59:da:18:6c: 07:45:bf:50:9e:02:42:bf:02:63:28:dc:79:16:2e: b4:42:c2:41:4e:5f:f5:30:eb:9b:61:bb:f8:6f:9f: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:16:2B:49:8B:90:DA:15:79:52:91:C9:74:35:42:B5:AF:14:7A X509v3 Authority Key Identifier: keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f9:47:2f:36:ee:8a:c6:6e:21:e0:15:4a:c7:5c:ec:2c:db: 76:b6:82:3c:a5:18:33:8f:52:63:0f:89:62:75:aa:51:67:41: 50:1c:2d:95:50:67:af:d7:27:fb:41:3f:5f:31:be:90:21:8a: 92:12:55:e1:97:ca:07:08:51:5e:81:44:92:67:61:84:69:9f: 1e:4c:3c:95:9e:8a:e7:08:3e:dc:7a:3b:1e:01:53:4e:fd:bc: e2:b1:10:c6:8f:5a:6a:02:40:10:35:7a:d8:c9:df:36:58:bb: 6d:08:2d:8a:27:a7:3a:bf:99:55:14:f2:fd:0a:b1:96:52:e7: d6:43:38:87:53:5d:d6:92:62:22:0d:37:e5:5a:86:a2:80:f4: 19:fd:f2:a0:5c:38:44:98:42:7d:0d:55:f7:14:9d:fb:33:b5: dd:6c:56:32:37:aa:83:04:a2:4a:10:67:3d:eb:af:19:fd:ca: da:b9:1b:c4:1a:a1:45:55:9b:e9:39:2b:48:bb:65:6d:bc:1e: d5:6f:32:a6:ea:1d:d2:b4:a2:5f:f0:67:f0:b1:a6:29:0c:1e: a5:d7:3f:1f:af:3e:3f:cc:a3:ba:5e:6c:f8:de:bb:77:57:96: 12:1c:ec:d1:59:0b:3b:c1:7a:7e:e0:58:71:92:01:19:85:cd: a1:ec:42:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDvETmUU3+gtpHup/joDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj MjZiODYwHhcNMjUxMjA2MTMwMDUyWhcNMjUxMjA3MTMwMDUyWjAzMTEwLwYDVQQD Eyg2ZDc2MTYyYjQ5OGI5MGRhMTU3OTUyOTFjOTc0MzU0MmI1YWYxNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWR1MqUjktdUsMxnw73y1peoDCY lKg4LeDlxknUvf+HrofZMmAhAsxFohoADp5Z2xfR/sA8APRrto6bZT4SqxxthtHR R/u3eZbsYh1yNaMqrY6VlClWkk/DD/Wtj0X12VlvryMm4+GJRZXyKlOZwHea8KI+ jy1eQYWz7qjquFCDsdCM+QFBrYVRe1Vme2W2ouM98ohsOZRbeigZ1tY/6E9oBJp7 NWHlrDOCi4AiQ0qN9Y1R+8RCGM+HH4JAQfDtprQIYNAUkMGWVPjjqA6SEUQJrrZP DU914M197lnaGGwHRb9QngJCvwJjKNx5Fi60QsJBTl/1MOubYbv4b5/YiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG12FitJi5DaFXlSkcl0NUK1rxR6MB8GA1UdIwQY MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt YTE0NmQ2MDQ3MzM3LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3 LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavlHLzbu isZuIeAVSsdc7CzbdraCPKUYM49SYw+JYnWqUWdBUBwtlVBnr9cn+0E/XzG+kCGK khJV4ZfKBwhRXoFEkmdhhGmfHkw8lZ6K5wg+3Ho7HgFTTv284rEQxo9aagJAEDV6 2MnfNli7bQgtiienOr+ZVRTy/QqxllLn1kM4h1Nd1pJiIg035VqGooD0Gf3yoFw4 RJhCfQ1V9xSd+zO13WxWMjeqgwSiShBnPeuvGf3K2rkbxBqhRVWb6TkrSLtlbbwe 1W8ypuod0rSiX/Bn8LGmKQwepdc/H68+P8yjul5s+N67d1eWEhzs0VkLO8F6fuBY cZIBGYXNoexCEw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:17 2025 by rpki-client