This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json) Hash identifier: dEFRjqmB9LZteJoqdgK57JSMFYLGczKe50f2O+V5o4Y= Subject key identifier: 38:17:70:C1:B3:29:92:38:06:E4:44:FF:29:F7:13:4F:C5:3A:47:7D Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Certificate serial: 019B4325751B870345149B40E6061093ED20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft Manifest number: 0D45 Signing time: Sun 21 Dec 2025 23:01:26 +0000 Manifest this update: Sun 21 Dec 2025 23:01:26 +0000 Manifest next update: Mon 22 Dec 2025 23:01:26 +0000 Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: ialGLhGh4zMi9ehbMFAgSw/PTQpwW+UORT5dWCGgkvk=) 2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:75:1b:87:03:45:14:9b:40:e6:06:10:93:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Validity Not Before: Dec 21 23:01:26 2025 GMT Not After : Dec 22 23:01:26 2025 GMT Subject: CN=381770c1b329923806e444ff29f7134fc53a477d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:7b:e7:02:25:ce:46:72:8a:04:36:42:81: 33:3a:3e:79:17:fa:db:3f:1d:ef:35:b9:ff:1d:a9: e3:6b:08:58:4a:17:42:e0:89:bd:f2:cc:30:9c:84: b7:c9:81:73:8e:20:6d:82:09:2c:19:90:2f:23:f6: 1c:08:69:24:61:07:2a:48:f1:f3:51:5d:3f:f0:fa: 2a:47:23:1c:3f:d2:e5:61:13:11:e4:3d:c2:2a:56: ed:49:d1:19:1f:36:9c:12:7a:16:b3:19:ec:49:db: 58:d3:78:6b:5c:9e:4c:bd:a7:37:a8:56:b2:c6:87: 64:03:4a:90:92:e0:40:94:19:bc:75:e0:b1:c5:ce: ce:ae:e6:20:ed:00:c4:d0:38:d3:2c:4a:28:bd:22: c0:ca:e5:d0:37:2d:16:11:cb:d3:5d:eb:00:9d:20: 77:f4:dc:16:15:9d:92:89:78:30:bb:48:4a:42:4a: 48:99:a8:9d:06:c9:f4:eb:a3:ac:de:71:49:4e:31: e6:0d:c0:b2:50:40:12:84:e7:1e:0b:ba:ed:f8:ae: eb:1e:fe:3e:1e:7b:27:2b:c5:38:8b:64:c4:34:5f: da:fa:9d:83:17:6b:f8:3a:59:8d:8e:6b:8f:22:59: ff:47:72:ca:45:7b:af:8f:33:01:94:5e:17:d1:a9: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:70:C1:B3:29:92:38:06:E4:44:FF:29:F7:13:4F:C5:3A:47:7D X509v3 Authority Key Identifier: keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:89:58:d9:3c:7f:c1:52:5a:6f:73:6b:c2:db:ee:0c:82:12: 8e:02:e9:4b:8e:25:7c:77:d5:47:99:e1:50:b5:d9:d4:c9:7f: ff:09:f7:70:aa:a9:ad:db:b5:a7:bf:b4:8c:8c:3d:68:d5:85: 27:de:f4:62:0d:ba:52:33:10:42:bb:0d:ee:2c:76:db:63:62: 54:06:fe:41:ff:e3:89:49:0f:69:ec:2a:d5:79:e7:8b:59:20: a5:6a:46:38:d1:85:3b:63:eb:07:8c:cc:ea:db:77:cb:78:a3: 1b:87:6d:99:c1:73:57:0e:87:70:a8:2e:fa:e4:25:eb:52:af: f8:8d:c0:36:93:35:d0:61:fd:9c:6f:76:65:50:de:52:1a:6e: b3:f1:b6:d6:98:f4:dc:00:bc:d8:2a:9d:bc:ed:b8:5d:3e:e3: 1a:01:19:44:04:25:8b:4b:9e:ac:2f:fc:32:c9:ea:2b:21:6f: af:51:e5:5e:e2:f8:cc:fc:a2:11:a6:9b:ff:d1:04:36:dd:0a: 6b:36:f7:02:11:b6:17:3f:1b:c3:d8:da:a9:12:0d:6f:95:96: f8:47:24:8b:94:f3:9d:f7:7a:46:0f:4e:39:55:63:7d:84:d6: 11:65:7c:fc:5f:90:55:73:29:04:69:02:0a:a1:aa:80:e7:a4: f9:07:15:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJXUbhwNFFJtA5gYQk+0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl NWM5YjEwHhcNMjUxMjIxMjMwMTI2WhcNMjUxMjIyMjMwMTI2WjAzMTEwLwYDVQQD EygzODE3NzBjMWIzMjk5MjM4MDZlNDQ0ZmYyOWY3MTM0ZmM1M2E0NzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6p75wIlzkZyigQ2QoEzOj55F/rb Px3vNbn/HanjawhYShdC4Im98swwnIS3yYFzjiBtggksGZAvI/YcCGkkYQcqSPHz UV0/8PoqRyMcP9LlYRMR5D3CKlbtSdEZHzacEnoWsxnsSdtY03hrXJ5Mvac3qFay xodkA0qQkuBAlBm8deCxxc7OruYg7QDE0DjTLEoovSLAyuXQNy0WEcvTXesAnSB3 9NwWFZ2SiXgwu0hKQkpImaidBsn066Os3nFJTjHmDcCyUEAShOceC7rt+K7rHv4+ HnsnK8U4i2TENF/a+p2DF2v4OlmNjmuPIln/R3LKRXuvjzMBlF4X0anGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgXcMGzKZI4BuRE/yn3E0/FOkd9MB8GA1UdIwQY MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIlY2Tx/ wVJab3NrwtvuDIISjgLpS44lfHfVR5nhULXZ1Ml//wn3cKqprdu1p7+0jIw9aNWF J970Yg26UjMQQrsN7ix222NiVAb+Qf/jiUkPaewq1Xnni1kgpWpGONGFO2PrB4zM 6tt3y3ijG4dtmcFzVw6HcKgu+uQl61Kv+I3ANpM10GH9nG92ZVDeUhpus/G21pj0 3AC82CqdvO24XT7jGgEZRAQli0uerC/8MsnqKyFvr1HlXuL4zPyiEaab/9EENt0K azb3AhG2Fz8bw9jaqRINb5WW+Ecki5Tznfd6Rg9OOVVjfYTWEWV8/F+QVXMpBGkC CqGqgOek+QcV9w== -----END CERTIFICATE-----Generated at Mon Dec 22 00:11:56 2025 by rpki-client