This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft File: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json) Hash identifier: HUTzrhjni6P0v3lqpUFXti8R406aJ5es1GyKmRyjJlA= Subject key identifier: 9B:59:BE:79:E8:58:8B:3E:66:D9:4E:2D:1C:15:F2:F2:F9:BB:01:CD Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C Certificate issuer: /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c Certificate serial: 019B75C85666FE284ED883907A24EAF3F5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft Manifest number: 1534 Signing time: Wed 31 Dec 2025 19:00:22 +0000 Manifest this update: Wed 31 Dec 2025 19:00:22 +0000 Manifest next update: Thu 01 Jan 2026 19:00:22 +0000 Files and hashes: 1: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: OzQLNoYqlDGOR/M1hkBqyf876JIwF/l1qGSo54eMLFI=) 2: qgSgsUNmjGc3XOuValdIkwwl07g.roa (hash: K6iu6N/DtzSRuE8h4cXXnk/shnPgBX6kLrlWrpVPx3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c8:56:66:fe:28:4e:d8:83:90:7a:24:ea:f3:f5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c Validity Not Before: Dec 31 19:00:22 2025 GMT Not After : Jan 1 19:00:22 2026 GMT Subject: CN=9b59be79e8588b3e66d94e2d1c15f2f2f9bb01cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:2f:fb:eb:c0:42:e5:a0:ca:10:ee:20:18: b1:a6:46:37:76:ed:77:c9:5a:3e:a1:19:0a:93:0d: 5f:70:84:68:54:87:2b:b6:1d:a9:d7:f5:77:2f:14: 49:8e:49:f0:22:55:c7:d5:7a:d3:6b:96:27:b9:15: 7e:0b:b3:e9:24:c1:5e:8c:4e:cd:14:82:e0:47:5b: 5f:ac:a8:d7:57:d3:6c:d7:16:38:f0:a8:ed:d2:13: 8a:62:55:ba:fa:a0:65:a6:53:64:e2:74:16:19:e3: 88:3e:9b:06:4c:bd:3a:f4:3b:78:ed:8a:73:ee:0a: 35:f6:56:b2:38:c5:b4:10:73:3a:3d:04:1f:25:20: 3b:17:f2:6f:88:4c:9d:8e:d8:f6:02:58:0b:d9:dd: 51:c5:18:78:d3:a5:62:9d:89:f5:fa:92:66:6e:72: f4:2e:d4:60:d7:23:89:4d:b5:63:c9:a7:73:dc:e7: 36:b1:c7:b6:13:c6:65:9d:ff:13:29:9a:94:93:01: 77:b7:e6:78:aa:39:b2:3b:c2:cc:6a:3c:ab:2e:c1: 74:c3:40:e5:72:5e:64:b9:9b:e7:f8:83:02:e7:2a: 84:c0:7c:5a:2d:96:b6:8b:87:40:d2:a8:93:0c:2d: 06:eb:62:77:5f:16:3a:3f:a0:56:52:81:9b:0a:d9: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:BE:79:E8:58:8B:3E:66:D9:4E:2D:1C:15:F2:F2:F9:BB:01:CD X509v3 Authority Key Identifier: keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:61:a0:55:62:51:1c:50:55:eb:1a:0e:dd:b3:c2:00:42: fe:72:e2:9f:91:b4:04:02:86:52:3f:7e:29:48:78:e8:1e:5e: 66:ed:23:f9:d7:3e:41:fb:2f:84:f0:9b:55:35:8f:9d:dd:81: b0:e6:fd:02:46:4b:c9:dd:04:79:18:30:8b:97:9d:0f:fe:e6: 9b:be:40:49:b5:56:98:08:f6:87:40:83:0e:b3:92:31:b8:ee: d9:10:7f:83:ef:f5:72:d8:06:27:f6:72:48:3f:fb:52:95:60: 25:f0:aa:c9:92:4e:3e:3c:c8:ef:4f:59:c8:6f:6a:14:36:1e: ba:7b:b2:63:97:5f:a9:48:3a:e0:9d:c2:72:fa:f3:87:18:e7: 36:0f:9b:b4:39:00:1a:91:42:d3:b7:98:d5:4c:c0:51:d6:22: 7a:c4:6b:2a:15:83:0b:2b:55:4b:34:1c:91:2b:3e:20:83:92: 7c:43:f8:9a:1a:ec:ec:08:ec:34:3a:39:6a:b5:b1:e3:d0:ba: e6:33:1a:c8:14:2c:0e:5e:9e:14:86:f5:81:25:ca:49:75:f3: 74:54:ab:01:71:b5:73:25:fc:27:6a:4c:da:e5:b6:62:48:80: 21:75:eb:36:f1:4e:9f:93:2e:87:3f:1c:30:92:98:7c:ea:94: 12:20:ec:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1yFZm/ihO2IOQeiTq8/WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOGUwZTdlODY3NzViNDE1ZDNkNTc4MGNlNGNmZWMwYzg1 OTE4OWMwHhcNMjUxMjMxMTkwMDIyWhcNMjYwMTAxMTkwMDIyWjAzMTEwLwYDVQQD Eyg5YjU5YmU3OWU4NTg4YjNlNjZkOTRlMmQxYzE1ZjJmMmY5YmIwMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0v++vAQuWgyhDuIBixpkY3du13 yVo+oRkKkw1fcIRoVIcrth2p1/V3LxRJjknwIlXH1XrTa5YnuRV+C7PpJMFejE7N FILgR1tfrKjXV9Ns1xY48Kjt0hOKYlW6+qBlplNk4nQWGeOIPpsGTL069Dt47Ypz 7go19layOMW0EHM6PQQfJSA7F/JviEydjtj2AlgL2d1RxRh406VinYn1+pJmbnL0 LtRg1yOJTbVjyadz3Oc2sce2E8Zlnf8TKZqUkwF3t+Z4qjmyO8LMajyrLsF0w0Dl cl5kuZvn+IMC5yqEwHxaLZa2i4dA0qiTDC0G62J3XxY6P6BWUoGbCtnlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtZvnnoWIs+ZtlOLRwV8vL5uwHNMB8GA1UdIwQY MBaAFG2ODn6Gd1tBXT1XgM5M/sDIWRicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYt YWU1ZjRjMTJkZTc5LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYtYWU1ZjRjMTJkZTc5 LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO5hoFVi URxQVesaDt2zwgBC/nLin5G0BAKGUj9+KUh46B5eZu0j+dc+QfsvhPCbVTWPnd2B sOb9AkZLyd0EeRgwi5edD/7mm75ASbVWmAj2h0CDDrOSMbju2RB/g+/1ctgGJ/Zy SD/7UpVgJfCqyZJOPjzI709ZyG9qFDYeunuyY5dfqUg64J3CcvrzhxjnNg+btDkA GpFC07eY1UzAUdYiesRrKhWDCytVSzQckSs+IIOSfEP4mhrs7AjsNDo5arWx49C6 5jMayBQsDl6eFIb1gSXKSXXzdFSrAXG1cyX8J2pM2uW2YkiAIXXrNvFOn5Muhz8c MJKYfOqUEiDs8w== -----END CERTIFICATE-----Generated at Wed Dec 31 22:50:59 2025 by rpki-client