This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json) Hash identifier: 3awx6+Z5P+8zXEolRv06gTgzjoFUn+v8oT8LA5sDeD0= Subject key identifier: FD:0D:1C:E9:FF:59:92:B1:FF:7D:FA:7C:45:75:DD:F3:5C:D2:EF:AC Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d Certificate serial: 019B2DE6DD7CD9E3D9C4C5A7C20AB6AFDF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft Manifest number: 0696 Signing time: Wed 17 Dec 2025 20:01:02 +0000 Manifest this update: Wed 17 Dec 2025 20:01:02 +0000 Manifest next update: Thu 18 Dec 2025 20:01:02 +0000 Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: +gdHqKkAm7PrNlwR0N54jNAx4zSTtVpS2MHygI0qg/0=) 2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:dd:7c:d9:e3:d9:c4:c5:a7:c2:0a:b6:af:df:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d Validity Not Before: Dec 17 20:01:02 2025 GMT Not After : Dec 18 20:01:02 2025 GMT Subject: CN=fd0d1ce9ff5992b1ff7dfa7c4575ddf35cd2efac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:75:52:4f:05:d3:99:a3:6e:34:df:b6:e0:3d: 89:10:9a:9f:76:44:d2:ff:45:ef:d0:33:95:05:5c: 93:0b:39:08:f3:06:da:99:d6:70:1f:7a:03:c1:2b: 5c:a2:12:59:f3:42:77:4b:8d:25:8e:ad:b4:07:d9: 3a:3b:29:41:9b:27:2f:85:ef:78:50:b5:dc:b1:2f: aa:cd:f4:1e:3a:05:b4:60:e9:d1:09:ab:56:b6:ff: 9d:7a:11:6a:67:ee:b5:0b:c7:33:75:aa:58:57:d1: dc:1d:15:72:33:65:a8:f7:72:51:3e:e7:cf:bf:b4: fb:e1:6f:fa:cb:36:cc:34:f7:f3:f2:f0:9c:c6:2b: 94:23:2b:47:ea:95:3a:97:0f:79:94:ff:1e:31:9b: 9b:35:78:bc:12:44:f0:b6:75:ed:d3:66:05:75:de: 73:17:d0:0f:43:0e:38:ee:88:0c:cc:a1:8d:43:06: 95:98:41:fd:95:5a:01:dc:2f:51:94:7d:c2:e8:6e: af:84:b0:89:8d:fd:64:b5:30:2f:16:e3:91:5b:48: d3:1f:4f:e4:1d:25:c7:b3:32:3b:24:12:35:89:82: ea:3d:00:e7:21:e4:fe:34:a4:70:c4:3a:cf:cb:ce: d6:1c:ae:00:20:6d:e3:8c:5d:97:a1:18:15:a9:39: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:1C:E9:FF:59:92:B1:FF:7D:FA:7C:45:75:DD:F3:5C:D2:EF:AC X509v3 Authority Key Identifier: keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:70:c0:3a:2a:be:45:5a:61:97:1e:70:5d:29:1f:18:36: 4b:05:65:ab:59:7a:43:ea:94:bf:3a:dd:af:b2:35:8f:13:df: 47:99:b7:11:bc:43:f5:0c:e9:b8:a8:98:39:96:b6:83:a0:cc: c6:c5:1d:91:00:95:1c:26:86:94:a8:44:f2:30:30:5e:53:76: cd:c2:c3:e1:59:3a:56:02:db:5b:6e:57:1c:73:16:51:24:1a: dd:eb:47:2b:ac:c9:ae:d2:d4:07:00:3e:73:36:21:d8:8f:6d: ce:f9:92:23:92:7d:d9:a2:e0:29:3a:23:30:af:5c:83:5e:a9: 04:5c:1a:b8:44:85:cf:18:c1:35:9e:6b:e4:a7:04:57:b3:83: 5c:18:91:9b:68:96:6c:f2:12:7d:ab:d0:4b:5a:46:4c:4e:a0: 78:1d:75:14:0e:f8:6a:3b:ac:30:2a:22:bd:72:d9:1a:ea:04: 66:1d:de:31:e4:6a:bb:62:f1:3d:14:5b:88:f7:da:41:ee:63: 30:6b:33:0f:56:93:45:0c:ea:4f:3a:d2:af:14:76:40:05:b6: 67:6d:4c:d8:27:7e:ca:e1:1b:43:ce:00:61:6a:d4:fe:d5:c0: d8:a4:d8:d7:8d:82:22:6e:75:20:4f:26:19:87:f9:5b:f0:37: ee:04:ab:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5t182ePZxMWnwgq2r992MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh ZTdjMGQwHhcNMjUxMjE3MjAwMTAyWhcNMjUxMjE4MjAwMTAyWjAzMTEwLwYDVQQD EyhmZDBkMWNlOWZmNTk5MmIxZmY3ZGZhN2M0NTc1ZGRmMzVjZDJlZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HVSTwXTmaNuNN+24D2JEJqfdkTS /0Xv0DOVBVyTCzkI8wbamdZwH3oDwStcohJZ80J3S40ljq20B9k6OylBmycvhe94 ULXcsS+qzfQeOgW0YOnRCatWtv+dehFqZ+61C8czdapYV9HcHRVyM2Wo93JRPufP v7T74W/6yzbMNPfz8vCcxiuUIytH6pU6lw95lP8eMZubNXi8EkTwtnXt02YFdd5z F9APQw447ogMzKGNQwaVmEH9lVoB3C9RlH3C6G6vhLCJjf1ktTAvFuORW0jTH0/k HSXHszI7JBI1iYLqPQDnIeT+NKRwxDrPy87WHK4AIG3jjF2XoRgVqTkmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0NHOn/WZKx/336fEV13fNc0u+sMB8GA1UdIwQY MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt NjRlZGQyN2M1ZDdhLzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAodwwDoq vkVaYZcecF0pHxg2SwVlq1l6Q+qUvzrdr7I1jxPfR5m3EbxD9QzpuKiYOZa2g6DM xsUdkQCVHCaGlKhE8jAwXlN2zcLD4Vk6VgLbW25XHHMWUSQa3etHK6zJrtLUBwA+ czYh2I9tzvmSI5J92aLgKTojMK9cg16pBFwauESFzxjBNZ5r5KcEV7ODXBiRm2iW bPISfavQS1pGTE6geB11FA74ajusMCoivXLZGuoEZh3eMeRqu2LxPRRbiPfaQe5j MGszD1aTRQzqTzrSrxR2QAW2Z21M2Cd+yuEbQ84AYWrU/tXA2KTY142CIm51IE8m GYf5W/A37gSr2g== -----END CERTIFICATE-----Generated at Wed Dec 17 23:44:12 2025 by rpki-client