This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json) Hash identifier: FQPh4h9G5MWVwBXvzfw/tZb2aqVk3NrFWWpyMOkPc00= Subject key identifier: 03:78:61:09:F3:CB:9C:B9:48:E7:E8:BE:93:5B:57:E2:08:E0:D0:D9 Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d Certificate serial: 019B612FCFECD97187C69E5BAA584AE348AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft Manifest number: 14CF Signing time: Sat 27 Dec 2025 19:01:21 +0000 Manifest this update: Sat 27 Dec 2025 19:01:21 +0000 Manifest next update: Sun 28 Dec 2025 19:01:21 +0000 Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=) 2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: xKHZTx1R9L6IJstQStJgLyx3XvHa8w5zTvhJ5Q9rmBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:cf:ec:d9:71:87:c6:9e:5b:aa:58:4a:e3:48:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d Validity Not Before: Dec 27 19:01:21 2025 GMT Not After : Dec 28 19:01:21 2025 GMT Subject: CN=03786109f3cb9cb948e7e8be935b57e208e0d0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:3b:7f:f7:c5:86:17:b9:20:b4:7b:1a:fd: df:06:00:e5:8d:9e:16:4e:f7:83:f2:7e:da:cc:d6: 18:50:91:16:24:46:53:7d:7e:98:35:90:07:5d:49: ac:11:37:0a:f9:d9:5a:af:08:76:5a:66:55:93:8c: a8:85:16:14:e2:15:98:0b:10:44:95:5b:5b:4d:8f: 62:96:14:81:10:ce:51:06:fb:d4:77:7c:00:39:1e: 00:94:a8:e1:73:5a:44:4c:b3:c5:98:7e:88:00:47: ce:e5:f4:3a:18:5e:87:ca:d5:be:2b:fc:eb:5d:c3: 5c:e4:91:71:80:bb:d6:42:89:b9:64:6f:8b:2e:29: ae:95:d4:bf:2c:24:e8:bb:17:13:d7:ec:59:0b:2a: e0:8c:10:7e:ef:47:0a:bf:fc:45:cb:8b:a2:6a:a8: 83:79:35:86:b1:34:47:ce:27:57:96:9e:da:03:04: ed:47:84:2e:b8:b4:e8:24:25:a9:1c:c7:cf:bd:ed: d6:ef:bd:28:40:dc:8c:6b:f0:8d:d4:d8:44:57:22: 35:15:44:f3:24:20:5b:6c:9e:dc:25:7d:9d:80:4e: db:c5:87:18:e3:f0:28:b9:5e:05:71:14:3d:9a:56: ef:3f:e7:dc:9f:08:12:cc:92:99:cb:89:48:3d:c6: 71:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:61:09:F3:CB:9C:B9:48:E7:E8:BE:93:5B:57:E2:08:E0:D0:D9 X509v3 Authority Key Identifier: keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:f8:ef:3a:97:ce:4b:4c:e5:64:62:0a:3c:a1:09:3d:d9: 49:1f:1d:2e:7e:9b:00:47:78:5c:89:8a:2e:95:e6:f1:66:80: dd:ef:4e:49:a8:c4:bd:a5:9a:12:5b:2c:7c:aa:93:cc:60:f7: e1:df:d8:09:4c:f9:c9:19:1b:8a:71:17:b3:b3:aa:10:63:7f: 19:2f:da:e6:68:10:cb:e8:48:f9:ab:ff:f3:68:57:a8:9d:cf: 42:e5:ea:43:b2:2d:d2:48:20:2c:2c:4c:3f:10:ed:10:86:e4: 91:a9:9d:7f:e3:7f:1f:eb:13:66:50:16:18:e2:4b:b6:35:bd: 3c:1e:04:77:15:37:a3:e7:dd:89:d1:50:dd:e0:44:97:d4:fe: 1c:c8:6a:d2:b0:3e:04:81:02:16:33:2c:ae:20:10:aa:5f:55: 75:d9:1e:5f:88:fe:66:8d:0b:2b:99:0a:d4:ac:d5:fb:05:c3: 4b:cb:c2:ba:c3:9a:33:1d:9d:ae:21:80:f5:ce:0b:b7:0f:2c: 59:10:bb:f7:61:c8:8e:3b:a6:09:3a:75:dd:a3:68:cd:d0:44: 8b:bf:13:02:08:da:85:1a:9a:4d:97:98:c7:a6:88:3d:27:0b: 18:8e:d4:ee:a6:8b:be:e8:9b:06:f3:69:ad:fc:13:ce:ba:6c: 04:5e:06:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL8/s2XGHxp5bqlhK40itMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3 MmIzM2QwHhcNMjUxMjI3MTkwMTIxWhcNMjUxMjI4MTkwMTIxWjAzMTEwLwYDVQQD EygwMzc4NjEwOWYzY2I5Y2I5NDhlN2U4YmU5MzViNTdlMjA4ZTBkMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs647f/fFhhe5ILR7Gv3fBgDljZ4W TveD8n7azNYYUJEWJEZTfX6YNZAHXUmsETcK+dlarwh2WmZVk4yohRYU4hWYCxBE lVtbTY9ilhSBEM5RBvvUd3wAOR4AlKjhc1pETLPFmH6IAEfO5fQ6GF6HytW+K/zr XcNc5JFxgLvWQom5ZG+LLimuldS/LCTouxcT1+xZCyrgjBB+70cKv/xFy4uiaqiD eTWGsTRHzidXlp7aAwTtR4QuuLToJCWpHMfPve3W770oQNyMa/CN1NhEVyI1FUTz JCBbbJ7cJX2dgE7bxYcY4/AouV4FcRQ9mlbvP+fcnwgSzJKZy4lIPcZxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN4YQnzy5y5SOfovpNbV+II4NDZMB8GA1UdIwQY MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNz47zqX zktM5WRiCjyhCT3ZSR8dLn6bAEd4XImKLpXm8WaA3e9OSajEvaWaElssfKqTzGD3 4d/YCUz5yRkbinEXs7OqEGN/GS/a5mgQy+hI+av/82hXqJ3PQuXqQ7It0kggLCxM PxDtEIbkkamdf+N/H+sTZlAWGOJLtjW9PB4EdxU3o+fdidFQ3eBEl9T+HMhq0rA+ BIECFjMsriAQql9VddkeX4j+Zo0LK5kK1KzV+wXDS8vCusOaMx2driGA9c4Ltw8s WRC792HIjjumCTp13aNozdBEi78TAgjahRqaTZeYx6aIPScLGI7U7qaLvuibBvNp rfwTzrpsBF4G2g== -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:59 2025 by rpki-client