This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json) Hash identifier: kwEjy6VKXsQ7NvSTZVr0jjwN81OcRMrVnL3CJ9WvVQ4= Subject key identifier: 8A:F2:99:65:7B:7F:65:83:F2:D3:37:43:E2:37:6B:9E:7A:7E:3D:CA Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Certificate serial: 019AF91D4846D2B188EBA09F186E888669A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft Manifest number: 12C4 Signing time: Sun 07 Dec 2025 14:00:37 +0000 Manifest this update: Sun 07 Dec 2025 14:00:37 +0000 Manifest next update: Mon 08 Dec 2025 14:00:37 +0000 Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=) 2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: JO4b2p1pG35tDdcT5sS7OZhTs75YCdRv/J9Z/0EgYVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:48:46:d2:b1:88:eb:a0:9f:18:6e:88:86:69:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Validity Not Before: Dec 7 14:00:37 2025 GMT Not After : Dec 8 14:00:37 2025 GMT Subject: CN=8af299657b7f6583f2d33743e2376b9e7a7e3dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:68:88:19:c7:6e:a5:5f:6a:5b:29:b8:cc: 90:74:f1:22:33:87:ff:b7:67:2a:f4:b8:43:8a:86: 81:d4:f5:f4:2b:6b:02:dd:1c:ad:38:72:41:f9:c9: bc:3f:4f:79:1e:a9:22:6c:d6:d1:95:77:f3:11:19: 5c:97:77:02:40:30:38:3e:d9:5f:ef:2f:c9:9b:6c: c6:03:f6:5a:90:86:91:b4:92:b6:0a:ac:85:43:fc: 87:7a:e1:8c:14:02:75:21:0f:a8:ff:9b:0b:e6:85: 80:dc:ad:81:21:b3:06:52:5b:06:d5:ef:df:fa:da: 91:14:44:6d:db:26:61:54:fa:03:2c:bb:92:cf:49: 9d:89:09:44:11:23:d3:0e:1f:88:d0:ab:b5:ce:52: ee:7d:36:4d:ff:b9:48:82:c0:1a:fa:0e:bf:07:eb: 32:64:5d:a0:71:98:2e:0c:e6:ae:06:bf:c5:92:37: d5:ea:8a:ce:61:96:d1:13:ec:e0:ca:8c:6e:21:b5: 50:a3:14:8b:03:7d:00:03:48:ee:53:d5:d0:1b:6b: 14:c3:c7:f4:67:64:9a:b2:8a:07:49:3c:26:2f:46: c3:b9:6f:ab:b4:40:44:68:b8:d5:1e:a0:bd:af:7e: 27:a2:82:9f:71:91:01:9d:fe:a4:46:80:f7:c4:eb: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:99:65:7B:7F:65:83:F2:D3:37:43:E2:37:6B:9E:7A:7E:3D:CA X509v3 Authority Key Identifier: keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:8e:7a:35:a6:06:8f:0a:85:e1:3c:3b:60:6b:42:2c:a5:00: 3a:e6:e1:3a:8e:75:76:82:37:9e:86:37:00:9f:9a:51:1e:0f: d8:7c:ad:bf:a3:37:e4:69:d6:41:b0:8f:93:ac:7f:e6:54:28: 93:9d:fc:6b:4d:eb:23:5b:a8:34:cc:fd:9e:ca:78:e8:fe:cb: 83:c7:dd:0a:af:d1:c1:8f:36:6f:56:81:2c:8f:65:dc:98:2d: f8:97:29:66:a2:c0:ed:db:dc:15:70:dc:85:77:01:4d:15:e2: a5:63:3d:da:cf:9e:c0:d7:b0:99:d9:2f:b4:1f:50:de:9b:91: 78:b3:e2:a5:9a:7c:7a:5c:45:9a:fc:15:52:2a:a4:d3:24:9d: 88:fa:79:d2:b5:10:26:58:9b:18:b8:56:48:bf:b0:b8:b7:e7: a6:8d:6b:cc:2b:37:55:12:b0:8c:cd:32:e7:39:3f:df:be:3d: a8:72:be:7d:9e:54:37:4a:99:2c:0b:5a:cd:b6:5a:64:16:c8: ec:3a:2f:ff:87:60:ff:ad:02:78:9c:81:4a:48:4e:73:47:45: b3:ab:2d:76:c7:60:3a:bf:33:d8:7f:f1:c1:41:b6:d2:ca:5e: a9:e4:31:c4:5e:2b:ec:e5:5c:df:4a:e0:fe:29:66:42:7e:72: a4:fb:18:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HUhG0rGI66CfGG6IhmmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl OTliNDMwHhcNMjUxMjA3MTQwMDM3WhcNMjUxMjA4MTQwMDM3WjAzMTEwLwYDVQQD Eyg4YWYyOTk2NTdiN2Y2NTgzZjJkMzM3NDNlMjM3NmI5ZTdhN2UzZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09poiBnHbqVfalspuMyQdPEiM4f/ t2cq9LhDioaB1PX0K2sC3RytOHJB+cm8P095HqkibNbRlXfzERlcl3cCQDA4Ptlf 7y/Jm2zGA/ZakIaRtJK2CqyFQ/yHeuGMFAJ1IQ+o/5sL5oWA3K2BIbMGUlsG1e/f +tqRFERt2yZhVPoDLLuSz0mdiQlEESPTDh+I0Ku1zlLufTZN/7lIgsAa+g6/B+sy ZF2gcZguDOauBr/FkjfV6orOYZbRE+zgyoxuIbVQoxSLA30AA0juU9XQG2sUw8f0 Z2SasooHSTwmL0bDuW+rtEBEaLjVHqC9r34nooKfcZEBnf6kRoD3xOspoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrymWV7f2WD8tM3Q+I3a556fj3KMB8GA1UdIwQY MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR456NaYG jwqF4Tw7YGtCLKUAOubhOo51doI3noY3AJ+aUR4P2Hytv6M35GnWQbCPk6x/5lQo k538a03rI1uoNMz9nsp46P7Lg8fdCq/RwY82b1aBLI9l3Jgt+JcpZqLA7dvcFXDc hXcBTRXipWM92s+ewNewmdkvtB9Q3puReLPipZp8elxFmvwVUiqk0ySdiPp50rUQ JlibGLhWSL+wuLfnpo1rzCs3VRKwjM0y5zk/3749qHK+fZ5UN0qZLAtazbZaZBbI 7Dov/4dg/60CeJyBSkhOc0dFs6stdsdgOr8z2H/xwUG20speqeQxxF4r7OVc30rg /ilmQn5ypPsYMw== -----END CERTIFICATE-----Generated at Sun Dec 7 20:05:32 2025 by rpki-client