This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json) Hash identifier: +e/f9I4FCshvyNpxUwOTfTzjggBokLucqTxRGj6hJq8= Subject key identifier: 9E:69:EA:26:A5:6C:FB:15:32:F8:BF:F1:6E:94:06:28:36:1C:92:CE Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d Certificate serial: 019B51BCC1D18CEC9572046C33219933A81F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft Manifest number: 14C7 Signing time: Wed 24 Dec 2025 19:01:23 +0000 Manifest this update: Wed 24 Dec 2025 19:01:23 +0000 Manifest next update: Thu 25 Dec 2025 19:01:23 +0000 Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=) 2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 2UDon4q6m5NAp/jmS79TqC+UKUax/+0eBkLvQ2Y6LVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:c1:d1:8c:ec:95:72:04:6c:33:21:99:33:a8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d Validity Not Before: Dec 24 19:01:23 2025 GMT Not After : Dec 25 19:01:23 2025 GMT Subject: CN=9e69ea26a56cfb1532f8bff16e940628361c92ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:77:ed:8d:d3:ef:cb:b5:f7:00:6c:09:25: c6:20:6f:44:7c:85:b3:eb:c9:57:05:d1:14:2c:90: 29:f4:4c:ec:bf:b4:ee:5a:03:a8:89:1e:47:a8:f8: 21:2d:a8:c5:95:d8:38:0d:7c:1d:0c:f9:49:2f:45: f3:ea:62:30:ad:e0:37:5a:63:ce:5e:57:f0:52:f1: 10:c6:5d:ea:ad:91:2d:3a:f7:45:66:71:96:ca:bb: 8f:55:15:25:bf:94:d5:ae:06:6d:83:47:93:a0:9a: cd:51:c9:12:1f:44:9d:47:17:5d:ba:82:37:0c:ce: 02:09:3c:50:bf:64:71:ec:b5:0d:e9:24:29:b3:ad: 58:a5:bf:f8:f7:74:65:f3:75:f2:82:01:e8:cc:b0: 54:e2:fb:c9:80:c7:57:3c:52:aa:e1:bf:88:ca:07: a3:44:97:90:23:6d:9f:a7:cb:d1:f5:5d:b0:68:0b: fa:47:85:be:e3:c4:da:bc:90:f5:3c:0d:5d:1b:1f: 38:02:88:11:eb:89:cc:53:35:04:7c:e2:cc:d2:84: 99:86:6f:96:af:4b:0d:5a:60:ee:04:0c:38:75:01: 57:2b:94:c4:cc:10:ec:88:0c:73:e6:2f:02:89:00: 42:54:a9:ab:5b:23:61:a5:e4:c7:c8:00:f4:80:8f: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:69:EA:26:A5:6C:FB:15:32:F8:BF:F1:6E:94:06:28:36:1C:92:CE X509v3 Authority Key Identifier: keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:b0:eb:4f:34:ed:f8:6c:60:67:50:fb:9f:27:38:27:f8: 42:e3:15:d8:a8:da:61:28:a9:3a:0a:43:75:7a:23:ab:eb:ad: 6b:fb:5e:6b:14:50:e4:d1:f7:2a:09:90:a2:3e:f3:f5:ea:85: a8:a5:07:82:29:d1:71:c7:fa:58:ce:a3:14:7f:bf:6b:48:50: ea:ee:d2:dd:ce:77:60:95:1b:43:12:ef:1e:a5:32:b1:d0:44: 6f:54:1c:5d:9e:61:30:ec:3f:d9:a2:57:f8:e7:56:d0:8d:22: f7:5e:f1:d0:eb:45:b7:e0:db:6d:dd:19:e5:2c:d6:49:df:fc: 3a:d4:90:d2:e7:0e:cd:45:60:56:f3:a9:d8:4e:e4:9b:96:ba: 8c:06:14:de:5f:b9:f7:d9:bd:10:b1:46:26:af:ee:bd:5e:45: 06:6d:81:15:66:d6:37:b3:68:7c:a7:62:67:45:93:79:71:3a: 88:b5:18:ec:9e:df:d8:74:80:6e:71:d5:2f:f8:b9:b8:5f:5d: a0:d9:4f:6a:04:a2:f0:2b:67:d9:5f:47:1a:d7:e1:49:66:97: 38:9a:ef:bb:10:ee:25:0c:b7:15:0c:83:23:85:41:e5:ee:f3: 08:b4:5c:45:0f:d8:9e:32:9d:42:8d:1d:a5:13:d9:f9:d0:38: 4c:30:13:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvMHRjOyVcgRsMyGZM6gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3 MmIzM2QwHhcNMjUxMjI0MTkwMTIzWhcNMjUxMjI1MTkwMTIzWjAzMTEwLwYDVQQD Eyg5ZTY5ZWEyNmE1NmNmYjE1MzJmOGJmZjE2ZTk0MDYyODM2MWM5MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgR37Y3T78u19wBsCSXGIG9EfIWz 68lXBdEULJAp9Ezsv7TuWgOoiR5HqPghLajFldg4DXwdDPlJL0Xz6mIwreA3WmPO XlfwUvEQxl3qrZEtOvdFZnGWyruPVRUlv5TVrgZtg0eToJrNUckSH0SdRxdduoI3 DM4CCTxQv2Rx7LUN6SQps61Ypb/493Rl83XyggHozLBU4vvJgMdXPFKq4b+Iygej RJeQI22fp8vR9V2waAv6R4W+48TavJD1PA1dGx84AogR64nMUzUEfOLM0oSZhm+W r0sNWmDuBAw4dQFXK5TEzBDsiAxz5i8CiQBCVKmrWyNhpeTHyAD0gI8qVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5p6ialbPsVMvi/8W6UBig2HJLOMB8GA1UdIwQY MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJaw6080 7fhsYGdQ+58nOCf4QuMV2KjaYSipOgpDdXojq+uta/teaxRQ5NH3KgmQoj7z9eqF qKUHginRccf6WM6jFH+/a0hQ6u7S3c53YJUbQxLvHqUysdBEb1QcXZ5hMOw/2aJX +OdW0I0i917x0OtFt+Dbbd0Z5SzWSd/8OtSQ0ucOzUVgVvOp2E7km5a6jAYU3l+5 99m9ELFGJq/uvV5FBm2BFWbWN7NofKdiZ0WTeXE6iLUY7J7f2HSAbnHVL/i5uF9d oNlPagSi8Ctn2V9HGtfhSWaXOJrvuxDuJQy3FQyDI4VB5e7zCLRcRQ/YnjKdQo0d pRPZ+dA4TDATZQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:17 2025 by rpki-client