This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json) Hash identifier: iAZig8CU3x57btBHToVPeiEXXIFZuQU7C0g3liXmVlE= Subject key identifier: F5:CC:1D:FD:3E:0D:4A:07:7E:52:6F:34:2C:8F:6F:64:D1:D1:6C:10 Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Certificate serial: 019B2F9EB5A22EEBD4700CC950480DFD7266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft Manifest number: 0F4C Signing time: Thu 18 Dec 2025 04:01:28 +0000 Manifest this update: Thu 18 Dec 2025 04:01:28 +0000 Manifest next update: Fri 19 Dec 2025 04:01:28 +0000 Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=) 2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: WgWurbNtMymM0ivCpH9C32wUuwsIOZ+qO/7UaaNVGok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:b5:a2:2e:eb:d4:70:0c:c9:50:48:0d:fd:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Validity Not Before: Dec 18 04:01:28 2025 GMT Not After : Dec 19 04:01:28 2025 GMT Subject: CN=f5cc1dfd3e0d4a077e526f342c8f6f64d1d16c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:f5:0f:9f:66:08:39:6c:c9:6c:34:64:48: f8:4e:23:e4:78:f5:e5:5f:36:d5:68:ba:9a:08:82: 34:f1:6d:b3:8f:49:02:26:21:96:33:c8:f9:6a:90: 79:dd:a0:8d:0c:33:73:1d:74:20:d5:bd:99:18:8c: 00:e2:2a:4a:43:fd:ea:4a:1a:43:08:0c:79:8b:91: cc:94:66:11:fa:72:32:14:3a:4e:81:23:1c:57:cc: 8c:14:fc:2e:06:bc:aa:bf:c3:5b:34:c3:49:62:88: d1:93:6c:36:95:ab:89:65:aa:5c:18:f2:63:83:a9: df:cd:19:c0:8d:2b:eb:af:42:87:af:44:3f:51:c2: 66:ad:f0:eb:db:b9:5f:9c:f5:50:da:b7:d3:6b:95: ed:97:9d:b6:46:b3:5b:d6:d7:e7:8a:64:2d:7f:6c: 79:93:73:aa:3a:b9:2b:90:3b:13:e1:30:8f:59:46: b4:f5:ce:2f:2e:5d:7f:6d:bc:da:09:10:68:83:11: 91:a4:ca:f3:80:d0:44:88:da:ad:f1:d2:50:7b:26: 6b:da:9c:37:61:fe:b0:31:41:ab:14:d5:52:4b:ee: 07:42:c6:f4:01:af:ac:23:56:bf:d5:4d:f7:6b:53: 1a:8d:67:1d:e6:de:c0:61:c7:aa:2e:f8:b8:ca:75: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:1D:FD:3E:0D:4A:07:7E:52:6F:34:2C:8F:6F:64:D1:D1:6C:10 X509v3 Authority Key Identifier: keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:28:81:6f:a2:c4:c7:62:f3:5c:64:b8:d8:e6:2d:26:c4:99: 96:1a:65:7b:75:84:d3:2b:ff:cd:82:1a:6c:a3:da:69:01:53: 04:70:92:d7:8e:65:4a:37:d9:3f:d9:a6:94:b8:12:da:91:77: 82:42:27:db:ec:02:15:1e:02:27:58:b9:6a:2e:fd:0f:fc:19: aa:de:a4:08:4a:4d:2d:21:46:7d:a0:c5:75:72:d2:5b:c1:ec: ad:61:76:60:b3:a4:b7:f9:07:09:8d:9e:4b:30:8d:37:a0:39: c7:da:e5:20:8f:5e:bf:a0:ce:c7:26:39:ac:d6:f8:97:52:91: b2:e7:bb:33:c7:7d:bf:bb:ce:02:ad:bf:07:2b:81:25:b5:a7: 1e:89:bb:a0:f9:4e:83:15:79:80:d6:bb:6a:1f:9c:07:df:6b: 25:69:9c:79:90:a4:1e:e9:94:e4:d3:32:cf:8c:43:0e:7c:84: da:21:55:3e:61:55:c1:7c:e0:c2:01:40:20:2e:2c:94:1c:72: d0:c1:5f:9e:7a:e7:7b:3e:11:a3:85:94:81:66:a2:22:c2:f3: 03:37:73:f2:8d:1c:98:f7:b1:63:6e:46:97:41:1d:6b:e6:b0: ff:2f:57:c9:6e:47:27:90:65:7d:6f:22:22:fa:b6:0a:d2:ea: 1a:12:6f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnrWiLuvUcAzJUEgN/XJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz NmUyNmQwHhcNMjUxMjE4MDQwMTI4WhcNMjUxMjE5MDQwMTI4WjAzMTEwLwYDVQQD EyhmNWNjMWRmZDNlMGQ0YTA3N2U1MjZmMzQyYzhmNmY2NGQxZDE2YzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ71D59mCDlsyWw0ZEj4TiPkePXl XzbVaLqaCII08W2zj0kCJiGWM8j5apB53aCNDDNzHXQg1b2ZGIwA4ipKQ/3qShpD CAx5i5HMlGYR+nIyFDpOgSMcV8yMFPwuBryqv8NbNMNJYojRk2w2lauJZapcGPJj g6nfzRnAjSvrr0KHr0Q/UcJmrfDr27lfnPVQ2rfTa5Xtl522RrNb1tfnimQtf2x5 k3OqOrkrkDsT4TCPWUa09c4vLl1/bbzaCRBogxGRpMrzgNBEiNqt8dJQeyZr2pw3 Yf6wMUGrFNVSS+4HQsb0Aa+sI1a/1U33a1MajWcd5t7AYceqLvi4ynUwjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXMHf0+DUoHflJvNCyPb2TR0WwQMB8GA1UdIwQY MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCiBb6LE x2LzXGS42OYtJsSZlhple3WE0yv/zYIabKPaaQFTBHCS145lSjfZP9mmlLgS2pF3 gkIn2+wCFR4CJ1i5ai79D/wZqt6kCEpNLSFGfaDFdXLSW8HsrWF2YLOkt/kHCY2e SzCNN6A5x9rlII9ev6DOxyY5rNb4l1KRsue7M8d9v7vOAq2/ByuBJbWnHom7oPlO gxV5gNa7ah+cB99rJWmceZCkHumU5NMyz4xDDnyE2iFVPmFVwXzgwgFAIC4slBxy 0MFfnnrnez4Ro4WUgWaiIsLzAzdz8o0cmPexY25Gl0Eda+aw/y9XyW5HJ5BlfW8i Ivq2CtLqGhJvVA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:03:09 2025 by rpki-client