This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json) Hash identifier: fv2XTIKMRfG9Onz3SoeLocaEESb+t08RmJH7VpUxydo= Subject key identifier: 82:E3:87:10:8E:8B:A0:C5:30:A6:D4:45:1D:EA:FF:B4:72:54:BA:82 Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Certificate serial: 019B37C54B423747DCA81AF92C769A496961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft Manifest number: 091B Signing time: Fri 19 Dec 2025 18:00:35 +0000 Manifest this update: Fri 19 Dec 2025 18:00:35 +0000 Manifest next update: Sat 20 Dec 2025 18:00:35 +0000 Files and hashes: 1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=) 2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: LAmn6oOdo5HBVbyIC8PIx1RwZtd9eehhOLnxkmelne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:4b:42:37:47:dc:a8:1a:f9:2c:76:9a:49:69:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Validity Not Before: Dec 19 18:00:35 2025 GMT Not After : Dec 20 18:00:35 2025 GMT Subject: CN=82e387108e8ba0c530a6d4451deaffb47254ba82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:25:93:cc:ee:68:36:d7:5c:dc:4d:77:d9: 0a:13:f2:1f:23:da:9d:6f:80:de:7e:1a:74:ec:25: b6:25:42:ae:78:a6:8f:8e:0f:08:b1:f4:55:0b:78: c0:4f:29:97:aa:18:cb:9d:79:20:42:90:e4:54:c9: bd:37:53:31:ca:5f:dc:3c:d5:81:01:6c:d9:d0:7e: 51:7b:c7:06:4b:26:e9:c3:8b:cb:2a:85:42:46:f1: c1:00:66:04:80:82:dd:54:8c:24:a4:69:11:9b:9e: d0:31:c8:fc:18:75:30:5b:2f:1b:37:14:37:65:ee: 0b:f5:61:8f:79:b2:f4:81:c1:e3:72:d9:7a:b5:2b: ad:a5:14:60:a2:6e:ce:cf:94:44:79:95:c8:fb:c8: 99:6b:d0:86:8d:37:7c:41:79:66:0a:b3:d1:13:cf: ca:bc:5a:c7:f3:6f:36:8f:82:38:64:51:8c:97:c6: 18:36:07:54:7e:7b:59:48:a1:f2:50:45:09:06:48: 63:09:5e:bf:48:66:dd:b8:44:a1:df:12:f3:ae:8c: 63:f4:ad:9a:59:24:8a:e3:3c:c2:51:a2:ce:1c:c0: 9d:1e:2a:ff:9b:93:4d:a7:c8:d1:89:af:86:e7:5f: 31:d2:82:b6:2d:8e:ab:bb:a3:3b:2a:d1:ae:c3:a4: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:87:10:8E:8B:A0:C5:30:A6:D4:45:1D:EA:FF:B4:72:54:BA:82 X509v3 Authority Key Identifier: keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:db:e6:90:d5:92:21:b3:59:23:88:30:3c:79:c4:89:2d:dc: 43:81:c4:ed:8c:f8:28:65:e7:95:eb:15:02:ad:57:38:a2:4d: c0:e7:0a:8c:a3:4e:23:fc:86:31:0e:ce:b6:a4:bf:a8:64:66: e3:14:4f:d4:4c:f2:3a:eb:b4:d1:a4:dc:dc:83:eb:a1:37:26: 6b:c8:1c:fd:e9:50:b0:0e:b8:cd:a8:b3:33:6f:95:09:76:da: 55:ea:23:50:df:35:ee:70:00:08:ca:1a:37:24:38:3a:32:bf: 5f:d9:8d:f5:5a:3d:56:66:e3:fe:5d:78:5c:05:50:28:96:9b: ba:a0:78:58:88:7f:10:ed:c6:b7:d6:a0:53:f3:25:f8:f7:38: 3e:ee:0e:df:a2:c9:4e:dc:f5:e4:be:3d:3e:d1:be:7c:0a:7b: 9b:91:3e:21:ea:da:50:70:ba:77:e5:56:72:3e:21:d3:3d:64: f8:5a:0e:91:80:76:ef:2c:76:03:62:41:0a:f8:fd:ba:b4:ea: 72:26:fd:20:28:82:e9:11:f8:e0:cd:ca:a4:13:60:87:47:a5: fb:a2:5b:98:3f:45:0b:00:04:7e:41:3b:a7:1b:b3:fa:aa:2b: e0:99:2c:b4:fd:db:9b:e8:e0:ea:08:35:eb:b4:22:13:cb:f3: 6a:09:70:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xUtCN0fcqBr5LHaaSWlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2 Yjc1NWUwHhcNMjUxMjE5MTgwMDM1WhcNMjUxMjIwMTgwMDM1WjAzMTEwLwYDVQQD Eyg4MmUzODcxMDhlOGJhMGM1MzBhNmQ0NDUxZGVhZmZiNDcyNTRiYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYUlk8zuaDbXXNxNd9kKE/IfI9qd b4Defhp07CW2JUKueKaPjg8IsfRVC3jATymXqhjLnXkgQpDkVMm9N1Mxyl/cPNWB AWzZ0H5Re8cGSybpw4vLKoVCRvHBAGYEgILdVIwkpGkRm57QMcj8GHUwWy8bNxQ3 Ze4L9WGPebL0gcHjctl6tSutpRRgom7Oz5REeZXI+8iZa9CGjTd8QXlmCrPRE8/K vFrH8282j4I4ZFGMl8YYNgdUfntZSKHyUEUJBkhjCV6/SGbduESh3xLzroxj9K2a WSSK4zzCUaLOHMCdHir/m5NNp8jRia+G518x0oK2LY6ru6M7KtGuw6RspwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILjhxCOi6DFMKbURR3q/7RyVLqCMB8GA1UdIwQY MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNvmkNWS IbNZI4gwPHnEiS3cQ4HE7Yz4KGXnlesVAq1XOKJNwOcKjKNOI/yGMQ7OtqS/qGRm 4xRP1EzyOuu00aTc3IProTcma8gc/elQsA64zaizM2+VCXbaVeojUN817nAACMoa NyQ4OjK/X9mN9Vo9Vmbj/l14XAVQKJabuqB4WIh/EO3Gt9agU/Ml+Pc4Pu4O36LJ Ttz15L49PtG+fAp7m5E+IeraUHC6d+VWcj4h0z1k+FoOkYB27yx2A2JBCvj9urTq cib9ICiC6RH44M3KpBNgh0el+6JbmD9FCwAEfkE7pxuz+qor4JkstP3bm+jg6gg1 67QiE8vzaglwnA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:54:52 2025 by rpki-client