This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json) Hash identifier: YZTp19rcCvQaW/vAjjTBGAVMjYwjUa0hW1wbHUB6jdE= Subject key identifier: DF:C0:FD:0E:8B:92:F3:39:51:56:53:AE:02:57:C9:3F:13:A4:75:C3 Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Certificate serial: 019B36B43627D151C2C971518444302F7755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft Manifest number: 0D32 Signing time: Fri 19 Dec 2025 13:02:18 +0000 Manifest this update: Fri 19 Dec 2025 13:02:18 +0000 Manifest next update: Sat 20 Dec 2025 13:02:18 +0000 Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: Wd1Q60PeBH4PZe7buBch7r6WOpVfu+zyCln5VGBpdag=) 2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:36:27:d1:51:c2:c9:71:51:84:44:30:2f:77:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Validity Not Before: Dec 19 13:02:18 2025 GMT Not After : Dec 20 13:02:18 2025 GMT Subject: CN=dfc0fd0e8b92f339515653ae0257c93f13a475c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:78:07:3b:a0:13:74:74:a6:1f:66:24:8b: f0:6e:b8:c6:c7:b8:0f:47:04:03:7b:97:05:1b:23: 41:05:d3:9e:2e:38:96:5c:46:f6:0d:8b:5c:04:a7: 7b:d3:d4:8b:90:3b:ae:c6:1c:a3:b5:4c:09:86:d9: 00:f4:22:2c:58:79:3b:19:b4:7b:05:45:c7:86:fd: 16:8d:31:22:a2:d1:16:48:2c:d2:8b:64:d8:64:4b: 25:60:b7:a9:e2:1b:95:81:19:ed:5c:14:cb:68:d8: 0a:8a:e9:e3:5b:ef:3c:71:47:0b:f5:fa:ba:dc:8a: 1c:2a:8e:22:6d:92:0b:32:8b:ef:d8:1d:c6:4f:bf: 04:7e:4c:0e:8b:90:0f:29:8c:ee:bd:b3:c1:e9:02: 77:54:9c:25:40:f6:8e:ac:0a:b1:b2:e3:62:63:24: f7:18:dd:52:6f:1a:25:7a:cf:b1:35:d5:7e:a3:d2: e1:ea:4c:5e:57:7c:4f:26:7d:9f:aa:71:a5:b4:75: 5b:3a:8a:2d:5c:20:a7:59:cb:58:91:35:d2:b5:b2: 9c:bf:56:a8:62:6c:c9:40:e7:d8:39:39:2b:26:de: 33:eb:91:97:b9:7d:e1:92:af:b2:fb:f1:d7:08:2a: b2:10:4b:dc:f4:97:4c:29:b9:5f:b9:cc:44:9c:10: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:FD:0E:8B:92:F3:39:51:56:53:AE:02:57:C9:3F:13:A4:75:C3 X509v3 Authority Key Identifier: keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:18:a6:70:78:c3:3d:fc:58:79:3a:6f:9e:86:cd:e0:48:e5: e2:3b:47:87:23:47:db:e6:d8:ba:3f:c0:69:2b:dd:0d:b7:b3: 83:55:34:47:1e:6d:15:2a:f4:da:1b:d9:07:b7:79:eb:a9:6f: 04:28:e1:4f:86:ed:bd:90:50:84:3c:8b:00:51:22:16:1e:d0: 72:1d:91:59:00:5f:44:76:62:7e:56:ce:8b:27:03:00:05:9c: c5:58:bb:9d:21:07:3c:29:f6:1c:b1:be:1e:03:55:fa:ab:9b: c7:94:25:1e:b5:bc:20:ef:c9:a4:1b:46:73:45:09:5e:8e:61: 00:ff:2e:b9:ea:93:de:c4:6b:e0:33:f1:35:ca:ce:6f:81:43: a4:11:61:2e:df:76:45:7e:b2:39:a1:11:91:3d:fc:3f:e8:99: a2:e8:c6:99:7b:3d:b8:b2:26:3e:b7:fd:21:47:ed:d1:6a:8d: a8:0d:58:97:a9:9f:44:d7:7d:84:bc:0b:e9:a5:c4:ee:e3:fb: 18:d1:d1:04:60:99:5d:ef:fe:cf:5c:52:04:c6:d1:52:bf:17: d0:77:6f:db:d6:19:75:0d:88:88:7b:71:cb:cb:33:d9:0a:8b: fa:2d:32:a0:61:f9:58:ce:9e:2c:fd:c5:43:1f:3a:54:67:76: f1:37:b9:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tDYn0VHCyXFRhEQwL3dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx NDRiYjYwHhcNMjUxMjE5MTMwMjE4WhcNMjUxMjIwMTMwMjE4WjAzMTEwLwYDVQQD EyhkZmMwZmQwZThiOTJmMzM5NTE1NjUzYWUwMjU3YzkzZjEzYTQ3NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaV4BzugE3R0ph9mJIvwbrjGx7gP RwQDe5cFGyNBBdOeLjiWXEb2DYtcBKd709SLkDuuxhyjtUwJhtkA9CIsWHk7GbR7 BUXHhv0WjTEiotEWSCzSi2TYZEslYLep4huVgRntXBTLaNgKiunjW+88cUcL9fq6 3IocKo4ibZILMovv2B3GT78EfkwOi5APKYzuvbPB6QJ3VJwlQPaOrAqxsuNiYyT3 GN1Sbxoles+xNdV+o9Lh6kxeV3xPJn2fqnGltHVbOootXCCnWctYkTXStbKcv1ao YmzJQOfYOTkrJt4z65GXuX3hkq+y+/HXCCqyEEvc9JdMKblfucxEnBC8AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/A/Q6LkvM5UVZTrgJXyT8TpHXDMB8GA1UdIwQY MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBimcHjD PfxYeTpvnobN4Ejl4jtHhyNH2+bYuj/AaSvdDbezg1U0Rx5tFSr02hvZB7d566lv BCjhT4btvZBQhDyLAFEiFh7Qch2RWQBfRHZiflbOiycDAAWcxVi7nSEHPCn2HLG+ HgNV+qubx5QlHrW8IO/JpBtGc0UJXo5hAP8uueqT3sRr4DPxNcrOb4FDpBFhLt92 RX6yOaERkT38P+iZoujGmXs9uLImPrf9IUft0WqNqA1Yl6mfRNd9hLwL6aXE7uP7 GNHRBGCZXe/+z1xSBMbRUr8X0Hdv29YZdQ2IiHtxy8sz2QqL+i0yoGH5WM6eLP3F Qx86VGd28Te5Uw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:04 2025 by rpki-client