This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft File: Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json) Hash identifier: o3ectxzSzIuDmD/LeIyUBXnKnNsNYfFy/HyTwfyMKps= Subject key identifier: CB:82:65:EE:52:CC:63:5D:9C:1B:D7:1F:63:98:F9:5A:59:06:90:07 Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Certificate serial: 019B7CDD99DF03F1C0BDFEBBB259CCEA9AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft Manifest number: 17B3 Signing time: Fri 02 Jan 2026 04:00:56 +0000 Manifest this update: Fri 02 Jan 2026 04:00:56 +0000 Manifest next update: Sat 03 Jan 2026 04:00:56 +0000 Files and hashes: 1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=) 2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=) 3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: ZoGVnWAevPKjT92i70/Zh3nJKXSWRkXQszCAQ0VsZ88=) 4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=) 5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=) 6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:dd:99:df:03:f1:c0:bd:fe:bb:b2:59:cc:ea:9a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Validity Not Before: Jan 2 04:00:56 2026 GMT Not After : Jan 3 04:00:56 2026 GMT Subject: CN=cb8265ee52cc635d9c1bd71f6398f95a59069007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:9a:50:a5:ae:da:82:c2:44:2c:ab:f4:65: d4:41:94:ec:ca:03:2f:ca:ac:60:95:60:bc:cb:ba: 70:18:c3:a6:57:31:4b:fa:9e:85:74:68:27:13:b9: 85:5a:6f:51:da:87:15:cc:9d:81:89:49:9e:cf:4f: 7b:e1:9d:42:85:9d:06:14:07:93:19:3d:9c:08:47: 43:ca:4b:45:08:0e:e7:4b:83:ec:30:2d:fb:15:cd: 98:b6:6d:46:54:60:df:ab:d9:21:f0:cd:a7:e1:40: 26:46:ad:28:30:a7:75:ea:0e:b8:7b:99:76:d7:a7: e1:68:ed:5e:a6:68:22:99:f7:c1:54:e6:ba:58:6c: 65:c4:90:57:5f:14:63:2b:3d:1f:58:51:ef:92:b6: c2:80:45:ed:3d:a1:32:55:ec:81:99:79:d9:d4:54: 2e:18:77:b9:b2:88:66:1e:c0:75:11:51:0e:84:33: 09:37:6c:24:12:ff:0d:9d:ff:40:3e:18:83:20:5d: 13:c8:70:43:33:c4:79:c2:c4:9e:bf:9d:69:f5:49: e9:cf:69:cb:47:9f:f7:6a:1b:8f:a6:1f:c0:12:86: ea:de:ef:9e:e0:b6:c5:8e:37:a3:82:9c:e4:32:dc: 41:80:f3:1f:de:3b:3a:45:d1:38:41:a9:dc:dc:12: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:65:EE:52:CC:63:5D:9C:1B:D7:1F:63:98:F9:5A:59:06:90:07 X509v3 Authority Key Identifier: keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:86:31:6f:02:1a:df:e7:13:17:20:c7:b1:10:41:6e:d3: c1:9e:03:66:ae:a7:f6:a0:da:27:d7:3d:55:ce:fe:73:47:4d: 9b:fe:0a:80:81:3f:69:5e:dc:40:ea:1f:eb:e7:0c:fb:d4:45: 6a:e5:fc:1a:1f:07:5d:a5:f2:e6:a2:b8:bf:2c:8f:a8:1c:c4: d7:92:89:ff:2e:19:45:6a:c4:4f:5e:fe:d9:2a:ef:42:8e:74: 68:a7:33:33:69:47:78:51:d3:23:77:07:18:6d:18:c2:a5:8b: 1a:bb:6b:c2:5b:2a:14:dc:c8:91:79:37:aa:1c:eb:68:10:81: 5e:40:54:ab:01:6c:ac:a5:3d:f3:d4:ed:50:81:e6:1b:2a:ce: 76:c0:1a:c9:ff:93:72:0b:0f:af:83:63:05:8c:a7:0b:ca:93: 28:54:e2:2c:c4:16:54:cc:cf:54:48:b4:66:bf:33:13:1f:7b: 35:da:a7:67:29:64:0a:56:5f:0c:b6:ff:53:63:01:15:c4:2e: 82:31:98:b1:84:90:d3:e9:83:f2:de:08:5b:63:64:62:a9:0c: 64:cb:0b:b2:b4:f5:a5:76:79:38:fc:45:87:e6:34:5e:c9:5d: 36:6a:53:76:5b:9f:11:bf:9f:91:24:52:d9:4f:4f:46:7e:64: be:77:d6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt83ZnfA/HAvf67slnM6pq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy NDZmYTUwHhcNMjYwMTAyMDQwMDU2WhcNMjYwMTAzMDQwMDU2WjAzMTEwLwYDVQQD EyhjYjgyNjVlZTUyY2M2MzVkOWMxYmQ3MWY2Mzk4Zjk1YTU5MDY5MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6uaUKWu2oLCRCyr9GXUQZTsygMv yqxglWC8y7pwGMOmVzFL+p6FdGgnE7mFWm9R2ocVzJ2BiUmez0974Z1ChZ0GFAeT GT2cCEdDyktFCA7nS4PsMC37Fc2Ytm1GVGDfq9kh8M2n4UAmRq0oMKd16g64e5l2 16fhaO1epmgimffBVOa6WGxlxJBXXxRjKz0fWFHvkrbCgEXtPaEyVeyBmXnZ1FQu GHe5sohmHsB1EVEOhDMJN2wkEv8Nnf9APhiDIF0TyHBDM8R5wsSev51p9Unpz2nL R5/3ahuPph/AEobq3u+e4LbFjjejgpzkMtxBgPMf3js6RdE4Qanc3BIh4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuCZe5SzGNdnBvXH2OY+VpZBpAHMB8GA1UdIwQY MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt NDVlYjczOGNiOWM4LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4 LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLKGMW8C Gt/nExcgx7EQQW7TwZ4DZq6n9qDaJ9c9Vc7+c0dNm/4KgIE/aV7cQOof6+cM+9RF auX8Gh8HXaXy5qK4vyyPqBzE15KJ/y4ZRWrET17+2SrvQo50aKczM2lHeFHTI3cH GG0YwqWLGrtrwlsqFNzIkXk3qhzraBCBXkBUqwFsrKU989TtUIHmGyrOdsAayf+T cgsPr4NjBYynC8qTKFTiLMQWVMzPVEi0Zr8zEx97NdqnZylkClZfDLb/U2MBFcQu gjGYsYSQ0+mD8t4IW2NkYqkMZMsLsrT1pXZ5OPxFh+Y0XsldNmpTdlufEb+fkSRS 2U9PRn5kvnfWxw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:41 2026 by rpki-client