This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json) Hash identifier: B/Vljvn9fCu6QnMW0uixhZ7HFZtyILL2oTP4pd/FiY8= Subject key identifier: E1:79:0A:D3:C2:05:63:46:F3:5B:F7:0C:C2:34:B5:25:AD:BE:05:03 Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Certificate serial: 019B51F3101BEA78940221DC8EDF1F894A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft Manifest number: 16C8 Signing time: Wed 24 Dec 2025 20:00:42 +0000 Manifest this update: Wed 24 Dec 2025 20:00:42 +0000 Manifest next update: Thu 25 Dec 2025 20:00:42 +0000 Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: /8CysxMlCACrrjPvuEDN1Va2b/ZloW89DqdQ6lfimS4=) 2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:10:1b:ea:78:94:02:21:dc:8e:df:1f:89:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9 Validity Not Before: Dec 24 20:00:42 2025 GMT Not After : Dec 25 20:00:42 2025 GMT Subject: CN=e1790ad3c2056346f35bf70cc234b525adbe0503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:4d:a9:36:cd:22:4c:bf:b5:61:1a:17:81: 1f:f6:14:2c:56:af:75:0c:f6:e0:1a:81:3a:79:6b: 40:1e:7e:a0:67:31:42:70:d9:6e:e2:60:df:92:9a: 0a:fe:1c:38:1d:f8:59:d5:08:7a:4f:f0:92:e9:65: b3:5b:c8:d0:c9:fa:7a:05:7b:bc:dc:7b:48:c1:3c: 4c:63:89:a5:c4:bf:45:d9:16:c2:fd:9f:01:b2:7a: f6:3f:7f:9b:83:c1:91:c6:32:f3:cd:7e:bc:eb:c0: 71:77:c0:85:0c:e1:da:a8:f0:80:81:c1:56:b7:6e: f9:3a:76:91:16:db:e8:00:66:e4:5b:50:80:c5:64: e6:3b:1d:15:e6:91:71:f6:ac:31:c3:87:7b:6a:10: 71:47:97:01:28:5a:49:39:bb:a7:b3:46:d2:fe:52: 58:df:d3:86:59:8b:95:92:8c:35:61:85:a9:70:92: 08:84:22:20:94:bb:79:c4:9f:42:5a:6b:35:42:73: 4d:e2:42:d6:59:62:2a:35:26:c2:4d:32:21:07:07: d3:a0:d7:b4:c9:4d:0d:19:03:13:00:73:2e:23:c4: 01:2c:82:c4:01:df:6e:a9:6c:2b:d7:bd:3c:0c:b3: 69:88:e4:47:87:be:6e:ff:c2:0f:3b:48:79:0e:4c: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:79:0A:D3:C2:05:63:46:F3:5B:F7:0C:C2:34:B5:25:AD:BE:05:03 X509v3 Authority Key Identifier: keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:27:c6:ad:ec:f6:27:87:fb:57:0b:21:a3:e7:b2:07:72:cc: 24:83:cb:75:d6:d2:d9:67:5d:b0:09:9d:dc:e6:a1:92:b3:15: 36:21:53:f1:34:33:54:be:9d:30:6e:a5:b0:c7:26:c3:4e:0b: 73:9d:c9:31:20:5f:19:26:28:c1:15:6a:8a:f9:93:58:8f:8e: 43:c9:2b:be:a2:fe:76:2d:da:39:d3:50:63:76:43:aa:59:31: 5b:0b:10:64:4b:f1:90:99:46:ee:25:bd:3d:bc:c1:17:43:c2: 9f:5d:df:f9:36:d8:db:d8:93:ed:31:3b:08:43:55:f8:99:6b: 9a:fd:79:15:79:58:ec:2d:66:d6:15:16:9a:bd:46:12:8a:e6: 20:e3:10:57:b3:2e:84:2b:26:79:48:89:f2:75:56:7a:04:df: bc:13:2b:f0:37:f6:93:29:26:f6:a6:31:be:66:f2:26:b8:ca: 49:e3:7f:ae:d4:d9:5c:3f:e2:b6:4f:68:2d:3d:99:0e:db:74: de:f8:68:bb:33:25:92:f3:fd:dd:eb:1b:ed:7e:32:6a:19:8f: 11:52:ff:8e:9b:ff:86:22:8c:37:61:c3:d5:b1:d2:69:4b:9a: b0:a7:76:26:46:c0:0a:f4:dc:7e:8e:cd:07:90:7d:d3:8c:35: 37:b6:1a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8xAb6niUAiHcjt8fiUpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4 NWQ4ZDkwHhcNMjUxMjI0MjAwMDQyWhcNMjUxMjI1MjAwMDQyWjAzMTEwLwYDVQQD EyhlMTc5MGFkM2MyMDU2MzQ2ZjM1YmY3MGNjMjM0YjUyNWFkYmUwNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RpNqTbNIky/tWEaF4Ef9hQsVq91 DPbgGoE6eWtAHn6gZzFCcNlu4mDfkpoK/hw4HfhZ1Qh6T/CS6WWzW8jQyfp6BXu8 3HtIwTxMY4mlxL9F2RbC/Z8Bsnr2P3+bg8GRxjLzzX6868Bxd8CFDOHaqPCAgcFW t275OnaRFtvoAGbkW1CAxWTmOx0V5pFx9qwxw4d7ahBxR5cBKFpJObuns0bS/lJY 39OGWYuVkow1YYWpcJIIhCIglLt5xJ9CWms1QnNN4kLWWWIqNSbCTTIhBwfToNe0 yU0NGQMTAHMuI8QBLILEAd9uqWwr1708DLNpiORHh75u/8IPO0h5DkxTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF5CtPCBWNG81v3DMI0tSWtvgUDMB8GA1UdIwQY MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4 LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayfGrez2 J4f7Vwsho+eyB3LMJIPLddbS2WddsAmd3OahkrMVNiFT8TQzVL6dMG6lsMcmw04L c53JMSBfGSYowRVqivmTWI+OQ8krvqL+di3aOdNQY3ZDqlkxWwsQZEvxkJlG7iW9 PbzBF0PCn13f+TbY29iT7TE7CENV+Jlrmv15FXlY7C1m1hUWmr1GEormIOMQV7Mu hCsmeUiJ8nVWegTfvBMr8Df2kykm9qYxvmbyJrjKSeN/rtTZXD/itk9oLT2ZDtt0 3vhouzMlkvP93esb7X4yahmPEVL/jpv/hiKMN2HD1bHSaUuasKd2JkbACvTcfo7N B5B904w1N7YaGg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:01 2025 by rpki-client