This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json) Hash identifier: z624lMzCi1r/hGyWrBr/FYHVdwC81kUubzsvRdB40tg= Subject key identifier: 39:CD:84:A4:B3:BA:C2:9C:C7:AA:45:F5:A3:AD:DC:96:83:F0:93:9E Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Certificate serial: 019B3EA33F1E0AF4C0EF08DF282F84DEB297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft Manifest number: 12E8 Signing time: Sun 21 Dec 2025 02:00:44 +0000 Manifest this update: Sun 21 Dec 2025 02:00:44 +0000 Manifest next update: Mon 22 Dec 2025 02:00:44 +0000 Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=) 2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: XCc1tnDPqsfterf9tJDPRsqJ6AtWEPMBBdRSKVAL1eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3f:1e:0a:f4:c0:ef:08:df:28:2f:84:de:b2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Validity Not Before: Dec 21 02:00:44 2025 GMT Not After : Dec 22 02:00:44 2025 GMT Subject: CN=39cd84a4b3bac29cc7aa45f5a3addc9683f0939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:5a:b1:07:e9:52:b5:ee:98:d7:3d:e7:56: 44:08:d2:90:fc:ef:00:d6:72:a7:47:dd:b4:ab:80: 62:b9:58:bc:c5:41:27:f3:fc:cb:5f:bf:39:74:b6: 49:84:36:be:03:29:c8:29:25:5c:c6:50:a7:dd:48: 77:88:07:2a:d8:ef:58:65:d4:73:db:bc:36:4a:d5: 8e:bb:71:df:d7:b8:8c:da:4b:e2:f4:45:05:fb:4a: a0:93:9d:29:3d:69:d8:4d:b7:0a:5c:7f:c4:e0:bc: 3c:68:b7:fa:88:5f:98:bc:16:7e:d9:fe:77:c8:a3: cb:a9:47:04:b5:8f:c4:c7:4d:32:d7:ee:08:e5:e5: 11:ba:b6:76:06:8f:8b:1f:10:c9:fd:49:43:cb:4e: 6e:b2:2b:8f:9c:e8:74:48:36:83:1b:69:4b:47:54: df:b0:cf:11:cf:c9:64:e9:51:04:fd:f8:8c:b9:99: 47:6b:15:c7:f7:a9:e1:59:78:c4:6a:b2:e0:f8:5c: 68:11:a5:b7:27:f1:b3:02:25:49:b3:5e:c7:63:7f: fc:d3:2c:f2:94:71:6e:30:94:72:89:57:eb:6d:09: f6:44:70:1d:97:b6:39:8e:73:60:85:78:bc:a9:9f: c6:7f:23:df:4c:13:d2:91:06:18:a3:c3:36:e3:41: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:84:A4:B3:BA:C2:9C:C7:AA:45:F5:A3:AD:DC:96:83:F0:93:9E X509v3 Authority Key Identifier: keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4a:10:88:16:13:37:88:e0:c8:51:76:ba:09:fa:ef:c3:3d: 53:bd:e5:84:51:58:eb:36:2b:44:95:93:4c:bb:9b:a0:ac:08: f8:2c:15:5d:84:98:b9:6f:7a:4b:2d:45:89:8f:8b:e4:f2:55: 9f:32:6e:45:7b:f7:e4:98:f8:33:40:23:bc:a2:d7:17:b7:e7: 9b:4d:8d:f4:67:9d:bd:05:5c:a5:64:70:9c:43:c1:32:76:b8: e2:be:ad:56:29:40:05:c9:9c:7c:7d:6d:7f:e6:d5:dc:dd:36: a0:02:4b:f9:1b:e5:a7:14:18:73:4c:63:da:f6:af:9b:54:d9: d9:fb:19:fd:0f:be:2f:66:4e:0e:f0:b5:d8:6a:07:ab:a1:1a: 1d:3c:63:98:8b:ce:67:2f:4c:ac:e3:21:7f:c9:74:2a:4e:71: f9:d1:4e:d9:4b:8a:55:fe:40:de:b0:d6:d6:69:dd:d4:16:e3: ca:1c:25:fa:e9:e5:3d:ea:6b:7f:5f:c5:f1:21:4e:be:7b:94: 5a:71:1d:d7:df:a2:4b:f2:82:3a:f8:bf:79:1c:a5:ad:50:07: cf:6b:d4:31:26:af:04:c3:57:3a:7f:8b:d4:32:6e:6a:01:41: 20:d8:28:06:20:09:28:a7:c8:12:58:ac:22:2b:60:7e:75:c0: 2c:b8:d9:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oz8eCvTA7wjfKC+E3rKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl OTliNDMwHhcNMjUxMjIxMDIwMDQ0WhcNMjUxMjIyMDIwMDQ0WjAzMTEwLwYDVQQD EygzOWNkODRhNGIzYmFjMjljYzdhYTQ1ZjVhM2FkZGM5NjgzZjA5MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA1asQfpUrXumNc951ZECNKQ/O8A 1nKnR920q4BiuVi8xUEn8/zLX785dLZJhDa+AynIKSVcxlCn3Uh3iAcq2O9YZdRz 27w2StWOu3Hf17iM2kvi9EUF+0qgk50pPWnYTbcKXH/E4Lw8aLf6iF+YvBZ+2f53 yKPLqUcEtY/Ex00y1+4I5eURurZ2Bo+LHxDJ/UlDy05usiuPnOh0SDaDG2lLR1Tf sM8Rz8lk6VEE/fiMuZlHaxXH96nhWXjEarLg+FxoEaW3J/GzAiVJs17HY3/80yzy lHFuMJRyiVfrbQn2RHAdl7Y5jnNghXi8qZ/GfyPfTBPSkQYYo8M240HVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnNhKSzusKcx6pF9aOt3JaD8JOeMB8GA1UdIwQY MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkoQiBYT N4jgyFF2ugn678M9U73lhFFY6zYrRJWTTLuboKwI+CwVXYSYuW96Sy1FiY+L5PJV nzJuRXv35Jj4M0AjvKLXF7fnm02N9GedvQVcpWRwnEPBMna44r6tVilABcmcfH1t f+bV3N02oAJL+RvlpxQYc0xj2vavm1TZ2fsZ/Q++L2ZODvC12GoHq6EaHTxjmIvO Zy9MrOMhf8l0Kk5x+dFO2UuKVf5A3rDW1mnd1Bbjyhwl+unlPeprf1/F8SFOvnuU WnEd19+iS/KCOvi/eRylrVAHz2vUMSavBMNXOn+L1DJuagFBINgoBiAJKKfIElis IitgfnXALLjZgw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:19:24 2025 by rpki-client