This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json) Hash identifier: l8DpqHtQuk7Nxk7Zdu9h7RGNazKu+VH7iVorV4DmRag= Subject key identifier: 92:27:5B:4A:65:37:3C:9B:BF:CC:F1:0F:62:F4:19:1F:28:71:3D:30 Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3 Certificate serial: 019B710FDF58C5EB22307E67B90B1C13ADBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft Manifest number: 16F9 Signing time: Tue 30 Dec 2025 21:00:24 +0000 Manifest this update: Tue 30 Dec 2025 21:00:24 +0000 Manifest next update: Wed 31 Dec 2025 21:00:24 +0000 Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: NY4DOyK6a1Wmxw+hGw1e4TYPCAHbBLynnZVCugPiau0=) 2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:df:58:c5:eb:22:30:7e:67:b9:0b:1c:13:ad:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3 Validity Not Before: Dec 30 21:00:24 2025 GMT Not After : Dec 31 21:00:24 2025 GMT Subject: CN=92275b4a65373c9bbfccf10f62f4191f28713d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:9a:45:c2:ce:61:0d:c0:f9:57:fc:0b:b3: b8:8f:ba:8c:a9:09:4d:ea:bc:f4:db:09:05:ce:05: e8:fd:66:b0:dd:ad:ea:98:92:d8:e0:27:75:2a:c5: 17:df:83:7c:04:76:00:b3:16:ba:24:c8:39:09:3b: 95:69:ca:c5:8c:c0:c5:43:6a:ae:32:a1:02:f3:1d: 2c:46:65:ef:3b:8f:2a:40:de:8e:40:6c:83:5a:0b: 0b:a6:7d:6f:82:3b:e4:1e:38:f6:28:36:7d:25:f8: 44:2b:d4:c8:89:3e:b1:12:d4:13:ad:fd:a5:02:07: 8f:c3:66:11:c8:60:78:ca:20:72:c9:1a:87:d2:8b: 70:bf:ce:36:9a:79:9b:30:72:68:1c:af:15:50:ab: 1c:6f:78:b9:75:3f:af:7a:fb:1c:b5:cf:57:20:0a: 96:03:c2:68:79:34:b8:0f:ff:71:1d:bf:fb:99:c8: 6c:40:c9:99:34:7f:93:5b:9f:4e:6c:50:3e:0a:cd: 34:21:a2:d7:c5:12:03:13:bb:69:40:a1:b3:b8:0c: 75:9e:53:c6:2e:a3:f1:07:3f:8e:46:6e:f9:9d:3e: a9:7f:23:48:7d:44:5a:c5:a3:86:7c:63:8e:f7:06: db:c8:00:5f:c8:10:90:80:4a:82:85:4d:6b:5d:41: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:27:5B:4A:65:37:3C:9B:BF:CC:F1:0F:62:F4:19:1F:28:71:3D:30 X509v3 Authority Key Identifier: keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:54:1a:43:58:2b:a1:8c:7b:90:79:6c:9b:df:3d:c6:54:cc: 19:f9:1e:56:4d:62:6e:27:84:73:37:b8:05:ff:4d:9f:2f:20: ed:e5:75:30:d0:4b:09:bf:95:98:21:c2:af:6e:4b:49:67:bd: b0:4b:7b:7a:a1:5b:2c:16:9f:ff:85:86:a4:e8:6c:bd:a5:fc: 80:8b:a9:87:84:91:45:96:f3:9a:cd:4a:4d:e7:53:51:e5:6b: 1c:49:fd:aa:90:be:7b:9c:06:7c:c9:fd:4a:b3:f2:55:2f:27: d5:7c:6b:83:72:54:51:a2:30:bf:56:fa:22:49:15:f7:48:dd: 50:94:15:aa:43:89:1f:42:62:56:0c:21:5b:51:65:0a:44:6f: 30:fd:14:0e:ff:80:d4:2c:51:25:e8:3d:db:5f:8d:31:84:cd: 19:12:76:d5:55:ae:c3:6d:f1:05:cb:8c:8f:f4:63:2f:77:5b: 89:d0:29:5b:ea:06:c3:66:f7:d3:e1:2b:23:17:99:35:6b:9f: 1a:5b:26:d4:a1:16:c4:47:39:4b:36:84:94:a9:08:79:a8:4c: da:ed:a2:3b:66:79:28:4f:a6:f3:5a:10:c8:a6:70:65:42:f6: 4c:3a:e8:ac:e4:29:83:02:1b:ed:c3:26:e6:81:2a:9f:a0:1f: 3b:09:de:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD99YxesiMH5nuQscE62+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYmNiNTdlMmQ1ZTQwNjMwZTE5M2JkNWNlYjE2ZjFlZjE4 NzQzYTMwHhcNMjUxMjMwMjEwMDI0WhcNMjUxMjMxMjEwMDI0WjAzMTEwLwYDVQQD Eyg5MjI3NWI0YTY1MzczYzliYmZjY2YxMGY2MmY0MTkxZjI4NzEzZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7yaRcLOYQ3A+Vf8C7O4j7qMqQlN 6rz02wkFzgXo/Waw3a3qmJLY4Cd1KsUX34N8BHYAsxa6JMg5CTuVacrFjMDFQ2qu MqEC8x0sRmXvO48qQN6OQGyDWgsLpn1vgjvkHjj2KDZ9JfhEK9TIiT6xEtQTrf2l AgePw2YRyGB4yiByyRqH0otwv842mnmbMHJoHK8VUKscb3i5dT+vevsctc9XIAqW A8JoeTS4D/9xHb/7mchsQMmZNH+TW59ObFA+Cs00IaLXxRIDE7tpQKGzuAx1nlPG LqPxBz+ORm75nT6pfyNIfURaxaOGfGOO9wbbyABfyBCQgEqChU1rXUFoJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJInW0plNzybv8zxD2L0GR8ocT0wMB8GA1UdIwQY MBaAFG68tX4tXkBjDhk71c6xbx7xh0OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgt OWFkMThiYTFhM2Q5LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgtOWFkMThiYTFhM2Q5 LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVQaQ1gr oYx7kHlsm989xlTMGfkeVk1ibieEcze4Bf9Nny8g7eV1MNBLCb+VmCHCr25LSWe9 sEt7eqFbLBaf/4WGpOhsvaX8gIuph4SRRZbzms1KTedTUeVrHEn9qpC+e5wGfMn9 SrPyVS8n1Xxrg3JUUaIwv1b6IkkV90jdUJQVqkOJH0JiVgwhW1FlCkRvMP0UDv+A 1CxRJeg921+NMYTNGRJ21VWuw23xBcuMj/RjL3dbidApW+oGw2b30+ErIxeZNWuf Glsm1KEWxEc5SzaElKkIeahM2u2iO2Z5KE+m81oQyKZwZUL2TDrorOQpgwIb7cMm 5oEqn6AfOwnemA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:16:41 2025 by rpki-client