This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json) Hash identifier: mMEp9q4+saxcZTuINmaZ/gYhpNmVE0YbC2X7rhxWiKU= Subject key identifier: 7D:45:53:EA:DC:35:ED:67:0C:A8:14:7F:18:E4:A7:F5:8E:33:BB:E4 Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e Certificate serial: 019B3BD8FAF7D9CC0571E19E119654716C66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft Manifest number: 11DD Signing time: Sat 20 Dec 2025 13:00:34 +0000 Manifest this update: Sat 20 Dec 2025 13:00:34 +0000 Manifest next update: Sun 21 Dec 2025 13:00:34 +0000 Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=) 2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: FS5uTQ7MBObfrRiqMpo+SILqI/bYipg/K23w4emDXqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:fa:f7:d9:cc:05:71:e1:9e:11:96:54:71:6c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e Validity Not Before: Dec 20 13:00:34 2025 GMT Not After : Dec 21 13:00:34 2025 GMT Subject: CN=7d4553eadc35ed670ca8147f18e4a7f58e33bbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:f3:a5:93:93:c8:bc:72:db:ac:56:79:b4: dd:74:bb:70:ac:6d:a5:2b:9d:23:c9:47:9e:dc:52: c8:64:eb:64:5b:34:9b:f7:12:fc:42:b6:2c:28:63: d3:f8:18:81:a8:11:60:a6:db:15:ee:52:83:70:1d: be:5c:fb:1f:54:32:d6:7d:34:a7:84:e5:9b:f9:a7: 67:bc:06:c6:6d:2c:36:23:58:33:5b:05:a6:d1:82: 6f:bc:3c:74:07:89:c2:57:99:06:56:04:91:48:37: e6:c1:2f:1f:da:ca:0b:a5:93:e9:9e:ec:e5:08:e9: 95:85:be:3e:f5:28:9c:bd:cc:a4:7e:93:d9:b3:60: 66:fb:b2:43:50:c4:81:50:14:dc:ce:f7:5e:0c:b0: b2:11:b1:99:b4:11:28:5a:2b:84:9c:95:d7:cb:8d: 85:f2:ea:48:67:58:aa:95:75:16:b0:6e:f0:80:f6: 0c:d0:c3:65:e1:b4:bd:18:1c:c3:fb:d6:6a:a8:74: 5d:98:40:9f:b4:a7:a5:9e:fd:90:14:54:c5:ed:d5: 3d:df:20:28:f4:c4:fb:cc:36:80:5b:80:c0:7f:f6: 3a:e1:7b:ee:15:f0:38:c4:cd:e7:15:a2:99:f5:92: cd:97:cc:d5:05:9d:0e:b0:7a:e9:78:98:78:8b:c7: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:53:EA:DC:35:ED:67:0C:A8:14:7F:18:E4:A7:F5:8E:33:BB:E4 X509v3 Authority Key Identifier: keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:17:85:85:3d:ed:52:c8:3c:01:91:32:78:4f:50:ff:00:af: da:c2:2d:e3:e7:c7:f2:36:85:50:e7:54:d9:a8:f7:47:e0:33: 4d:0f:13:ea:4a:d2:5a:21:3d:c3:bb:ff:20:dd:00:4a:2e:71: a8:f5:3c:70:52:40:0e:d6:20:cf:18:e8:af:78:e6:f5:64:8b: b9:1b:f9:02:7c:46:9a:1e:dd:e8:e4:fb:f9:fb:e3:93:e9:17: b4:71:7d:31:91:98:52:05:24:33:a1:a1:89:26:fd:cd:08:9a: 52:52:e2:60:df:15:f8:fb:f0:f1:c3:70:60:5f:89:fd:19:45: 2d:81:af:9e:44:76:2c:a6:e5:8d:a0:90:6c:68:f8:ad:82:9d: 4f:a7:75:53:33:a8:f6:1a:b1:c1:a2:2b:76:56:58:0c:28:89: ba:ad:65:1c:9f:32:bd:b6:b0:75:08:18:8f:bd:76:88:7d:63: cc:c4:59:64:79:3d:a0:8b:2b:f3:18:41:9e:2b:53:1e:65:59: 6a:ed:0b:69:29:8f:0f:94:bb:27:06:74:b6:c1:8d:a1:29:29: b4:2e:00:2b:70:2f:9b:cf:5d:e2:77:42:8b:4d:28:1a:61:75: 0b:6f:07:15:c0:65:27:f4:1a:42:31:42:37:af:e5:1a:38:8a: a8:dd:46:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Pr32cwFceGeEZZUcWxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODQwYmY4ZjJlYTQ0NmE0N2RiNmM2MzM5MDY2NjdjNjNl ZDg4NmUwHhcNMjUxMjIwMTMwMDM0WhcNMjUxMjIxMTMwMDM0WjAzMTEwLwYDVQQD Eyg3ZDQ1NTNlYWRjMzVlZDY3MGNhODE0N2YxOGU0YTdmNThlMzNiYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwHzpZOTyLxy26xWebTddLtwrG2l K50jyUee3FLIZOtkWzSb9xL8QrYsKGPT+BiBqBFgptsV7lKDcB2+XPsfVDLWfTSn hOWb+adnvAbGbSw2I1gzWwWm0YJvvDx0B4nCV5kGVgSRSDfmwS8f2soLpZPpnuzl COmVhb4+9SicvcykfpPZs2Bm+7JDUMSBUBTczvdeDLCyEbGZtBEoWiuEnJXXy42F 8upIZ1iqlXUWsG7wgPYM0MNl4bS9GBzD+9ZqqHRdmECftKelnv2QFFTF7dU93yAo 9MT7zDaAW4DAf/Y64XvuFfA4xM3nFaKZ9ZLNl8zVBZ0OsHrpeJh4i8dv6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1FU+rcNe1nDKgUfxjkp/WOM7vkMB8GA1UdIwQY MBaAFG2EC/jy6kRqR9tsYzkGZnxj7YhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMt YzNlOGVhZGQwMGJhLzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMtYzNlOGVhZGQwMGJh LzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsReFhT3t Usg8AZEyeE9Q/wCv2sIt4+fH8jaFUOdU2aj3R+AzTQ8T6krSWiE9w7v/IN0ASi5x qPU8cFJADtYgzxjor3jm9WSLuRv5AnxGmh7d6OT7+fvjk+kXtHF9MZGYUgUkM6Gh iSb9zQiaUlLiYN8V+Pvw8cNwYF+J/RlFLYGvnkR2LKbljaCQbGj4rYKdT6d1UzOo 9hqxwaIrdlZYDCiJuq1lHJ8yvbawdQgYj712iH1jzMRZZHk9oIsr8xhBnitTHmVZ au0LaSmPD5S7JwZ0tsGNoSkptC4AK3Avm89d4ndCi00oGmF1C28HFcBlJ/QaQjFC N6/lGjiKqN1GnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:21 2025 by rpki-client