This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json) Hash identifier: bXh7oGTdQ5jR7M7uRfSvznRVlhILrLr3nA5FP4MtTb8= Subject key identifier: D4:3A:A8:37:8C:FE:5A:FB:E6:5F:ED:F2:34:95:B6:6D:AB:A6:2D:9B Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Certificate serial: 019B41DBB9B98752BD349ECD70E69A5B17ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft Manifest number: 045E Signing time: Sun 21 Dec 2025 17:01:17 +0000 Manifest this update: Sun 21 Dec 2025 17:01:17 +0000 Manifest next update: Mon 22 Dec 2025 17:01:17 +0000 Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=) 2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: SVCSFAzkmmn0sWW+BC8u03sUue2qujDi4YEWWjskuas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:b9:b9:87:52:bd:34:9e:cd:70:e6:9a:5b:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Validity Not Before: Dec 21 17:01:17 2025 GMT Not After : Dec 22 17:01:17 2025 GMT Subject: CN=d43aa8378cfe5afbe65fedf23495b66daba62d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:83:35:e7:73:cf:8b:99:1c:9f:bd:05:a2: 90:dd:07:70:1d:52:31:ab:3e:c0:3a:ea:87:5c:51: cc:f6:28:8f:b6:08:1a:8a:dd:54:83:1a:55:18:16: f8:ea:0e:7d:cf:b2:f6:67:3e:cc:64:e7:ff:da:f2: f9:45:69:56:13:85:11:80:64:1c:26:78:0e:bf:a2: 73:25:d9:61:9b:47:ac:dd:f9:ff:30:e9:7d:27:ee: 41:f4:b0:60:57:c1:1b:ea:d5:42:cc:29:e8:54:a6: df:01:2b:c1:65:0d:96:61:2e:0a:2e:18:b5:f9:a9: 95:8e:72:1d:94:6f:af:08:c2:db:62:b2:b2:be:f5: 0a:63:4f:41:4f:30:74:ac:4a:e1:1a:72:75:d1:d3: 64:3c:c0:64:0c:94:dd:8d:7f:1c:67:a6:7d:6c:76: 2a:b1:20:98:6e:11:d7:21:8f:d9:da:af:6b:37:ec: 60:cc:7a:33:86:eb:30:29:55:d2:bd:0f:8c:20:a5: 4b:42:b5:b5:95:bc:5b:63:42:15:ac:15:96:46:2f: 43:d8:37:d9:3e:65:97:9f:3e:b8:cd:97:60:70:50: cf:d1:0c:ae:a2:bc:41:53:1f:1c:2c:b1:38:c0:29: 4b:f3:f1:dc:cc:f1:09:14:86:5b:61:78:f4:a6:56: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3A:A8:37:8C:FE:5A:FB:E6:5F:ED:F2:34:95:B6:6D:AB:A6:2D:9B X509v3 Authority Key Identifier: keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:84:08:d8:34:61:27:8d:3e:7d:3e:9b:25:b1:ba:dc:64:52: 81:a1:fc:3d:4d:7a:d6:1e:a1:ba:4e:c1:e8:99:1d:58:b2:55: 57:2e:92:f8:65:66:20:cc:b1:49:30:de:5a:f9:2f:76:7e:fa: 11:31:1f:87:7c:86:35:4d:d9:5d:d2:a3:be:77:c8:f7:fc:90: 7b:c0:09:c1:04:21:fa:e4:7e:45:dd:44:a9:36:fc:ad:e5:23: 5d:56:9c:cb:49:92:bf:26:f4:b5:ff:db:ec:f8:ea:9b:1c:d0: a0:62:2a:e0:37:50:17:d3:b9:e6:0e:7b:7b:5d:fb:ae:32:cb: 15:7a:b4:7a:89:72:98:ff:11:24:81:e4:a4:68:98:23:7d:6d: 07:9e:df:01:3a:c5:a2:3c:2f:77:3b:c1:0a:ed:ed:66:2d:31: d0:a9:02:92:6f:f8:cc:72:bb:35:0b:f8:66:98:eb:76:26:0f: c6:f5:8b:c0:00:55:08:07:d3:9a:93:3d:56:88:d0:f0:b0:02: 7e:5f:d9:af:85:7f:f0:e4:9f:2f:e5:8d:30:96:9b:25:5e:1e: cd:98:f2:e0:c4:a2:e8:58:64:53:af:b3:d2:cc:17:5a:42:ca: 85:2b:64:79:c4:02:bb:cd:29:dd:1f:1d:74:31:4d:94:5b:a1: fd:89:b9:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB27m5h1K9NJ7NcOaaWxftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw ZGFjNzgwHhcNMjUxMjIxMTcwMTE3WhcNMjUxMjIyMTcwMTE3WjAzMTEwLwYDVQQD EyhkNDNhYTgzNzhjZmU1YWZiZTY1ZmVkZjIzNDk1YjY2ZGFiYTYyZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK+DNedzz4uZHJ+9BaKQ3QdwHVIx qz7AOuqHXFHM9iiPtggait1UgxpVGBb46g59z7L2Zz7MZOf/2vL5RWlWE4URgGQc JngOv6JzJdlhm0es3fn/MOl9J+5B9LBgV8Eb6tVCzCnoVKbfASvBZQ2WYS4KLhi1 +amVjnIdlG+vCMLbYrKyvvUKY09BTzB0rErhGnJ10dNkPMBkDJTdjX8cZ6Z9bHYq sSCYbhHXIY/Z2q9rN+xgzHozhuswKVXSvQ+MIKVLQrW1lbxbY0IVrBWWRi9D2DfZ PmWXnz64zZdgcFDP0QyuorxBUx8cLLE4wClL8/HczPEJFIZbYXj0plZw6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ6qDeM/lr75l/t8jSVtm2rpi2bMB8GA1UdIwQY MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5 LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYQI2DRh J40+fT6bJbG63GRSgaH8PU161h6huk7B6JkdWLJVVy6S+GVmIMyxSTDeWvkvdn76 ETEfh3yGNU3ZXdKjvnfI9/yQe8AJwQQh+uR+Rd1EqTb8reUjXVacy0mSvyb0tf/b 7PjqmxzQoGIq4DdQF9O55g57e137rjLLFXq0eolymP8RJIHkpGiYI31tB57fATrF ojwvdzvBCu3tZi0x0KkCkm/4zHK7NQv4ZpjrdiYPxvWLwABVCAfTmpM9VojQ8LAC fl/Zr4V/8OSfL+WNMJabJV4ezZjy4MSi6FhkU6+z0swXWkLKhStkecQCu80p3R8d dDFNlFuh/Ym59A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:00:20 2025 by rpki-client