This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft File: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json) Hash identifier: oUpTxgZIceCNnMET/LSrKgAX4u5UDzxtME07FRhjkMc= Subject key identifier: 20:54:93:B8:A8:DC:CE:8F:B0:0A:36:8D:F1:02:AB:F5:AA:97:02:51 Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15 Certificate issuer: /CN=0533048d6ff424bf19215771cf257bc15b67ee15 Certificate serial: 019B3F7EFEBC8418DF4948848367624A6138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft Manifest number: 0AAC Signing time: Sun 21 Dec 2025 06:00:45 +0000 Manifest this update: Sun 21 Dec 2025 06:00:45 +0000 Manifest next update: Mon 22 Dec 2025 06:00:45 +0000 Files and hashes: 1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: xtOS4wK0U4Gl+Rt6x4BOYdACffG6a4BvsUnTqbCaGnM=) 2: oSc9TDaxZAgpBUL0U_QOqXe1iIQ.roa (hash: eRGT3we8piuEWhQIjqoI4A2ShRxv7LWNOl9KqCnYlOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:fe:bc:84:18:df:49:48:84:83:67:62:4a:61:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15 Validity Not Before: Dec 21 06:00:45 2025 GMT Not After : Dec 22 06:00:45 2025 GMT Subject: CN=205493b8a8dcce8fb00a368df102abf5aa970251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:a3:61:e5:b9:c1:04:df:65:d4:04:54:47: 90:e5:65:4d:5a:a7:64:93:f7:ae:42:5b:1b:4c:e2: a7:5b:32:d1:c6:74:61:94:76:3b:09:71:37:f2:ea: de:32:06:df:3a:79:7f:83:7b:84:4c:ac:71:34:be: e8:35:42:dd:03:04:5f:89:42:08:ef:37:1d:18:d5: ee:7b:85:76:8f:d8:39:ed:ee:b4:e4:5e:0b:8c:1a: 60:fd:9b:6d:64:3a:3c:6f:f8:59:56:a1:f5:97:08: 8c:7c:cf:e0:67:9f:aa:94:47:42:f0:d1:a3:33:f7: 5c:7d:dc:ee:e7:76:0c:f9:52:9b:e3:eb:88:ef:57: 5a:98:03:eb:24:c8:35:a2:3c:77:07:3e:64:dd:9f: 7a:af:3a:32:42:af:19:ec:03:d9:29:8d:24:38:59: 91:81:cd:30:eb:d0:e5:0a:d9:aa:e5:21:ad:b7:16: 85:13:e4:1e:c7:f0:92:0c:0d:0d:1b:bf:c8:68:ee: 34:7b:1b:52:7e:a0:1b:8f:28:2b:9b:cf:33:87:e7: 5f:86:b6:fb:ca:1c:06:bb:ad:47:ff:73:b1:42:67: 22:89:6f:35:66:e9:80:54:05:4d:a9:37:ff:31:cf: 6f:cc:73:1d:e1:90:8e:64:a3:b5:f6:bd:de:b7:3b: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:93:B8:A8:DC:CE:8F:B0:0A:36:8D:F1:02:AB:F5:AA:97:02:51 X509v3 Authority Key Identifier: keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5a:25:b5:c8:02:3a:86:8e:17:2a:18:27:0b:8b:1c:11:e2: 44:e3:bf:5c:8c:11:88:d0:e8:e9:5b:7c:c9:ce:ff:c6:85:5a: c8:78:b7:03:b7:21:34:a0:bc:6b:72:13:47:69:0a:43:7f:51: a8:ca:b7:5e:b6:98:1c:52:65:92:87:17:ae:f9:6b:a0:2c:aa: 10:be:16:f7:c5:72:00:3e:84:92:a5:45:37:f5:bf:82:dc:43: 9a:20:22:58:df:0c:a0:51:d1:ea:90:c2:9b:76:01:4c:5d:67: 7d:42:c6:93:91:20:c2:3d:f9:2f:db:e4:e6:a1:5d:e4:b5:f7: d0:3a:3f:48:c0:f8:bd:8e:8b:d6:90:da:1a:59:7f:3c:68:40: 8b:ce:0e:f0:14:99:88:d7:06:eb:a5:df:fb:ad:69:95:45:c7: 7d:fc:5c:eb:7a:70:60:5c:3d:e7:a1:f0:1d:34:72:18:11:b8: 26:20:52:5f:27:8c:ef:4e:3a:a6:fe:39:52:65:14:11:46:20: b4:04:76:62:a0:c8:c5:df:36:c3:fa:69:97:48:d0:3d:49:7a: d9:52:29:a4:bd:7f:54:ae:c9:0f:8d:6a:34:b5:55:99:f8:96: 2d:c6:33:69:da:bb:1f:2b:60:b5:05:05:28:fe:e9:34:6d:da: c1:c3:48:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fv68hBjfSUiEg2diSmE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzMwNDhkNmZmNDI0YmYxOTIxNTc3MWNmMjU3YmMxNWI2 N2VlMTUwHhcNMjUxMjIxMDYwMDQ1WhcNMjUxMjIyMDYwMDQ1WjAzMTEwLwYDVQQD EygyMDU0OTNiOGE4ZGNjZThmYjAwYTM2OGRmMTAyYWJmNWFhOTcwMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHejYeW5wQTfZdQEVEeQ5WVNWqdk k/euQlsbTOKnWzLRxnRhlHY7CXE38ureMgbfOnl/g3uETKxxNL7oNULdAwRfiUII 7zcdGNXue4V2j9g57e605F4LjBpg/ZttZDo8b/hZVqH1lwiMfM/gZ5+qlEdC8NGj M/dcfdzu53YM+VKb4+uI71damAPrJMg1ojx3Bz5k3Z96rzoyQq8Z7APZKY0kOFmR gc0w69DlCtmq5SGttxaFE+Qex/CSDA0NG7/IaO40extSfqAbjygrm88zh+dfhrb7 yhwGu61H/3OxQmciiW81ZumAVAVNqTf/Mc9vzHMd4ZCOZKO19r3etzu1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBUk7io3M6PsAo2jfECq/WqlwJRMB8GA1UdIwQY MBaAFAUzBI1v9CS/GSFXcc8le8FbZ+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZTQ4OTktYWFjYy00ZWZkLTkzZGYt YTYxYTk4MzU5YzRhLzEvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zZTQ4OTktYWFjYy00ZWZkLTkzZGYtYTYxYTk4MzU5YzRh LzEvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFoltcgC OoaOFyoYJwuLHBHiROO/XIwRiNDo6Vt8yc7/xoVayHi3A7chNKC8a3ITR2kKQ39R qMq3XraYHFJlkocXrvlroCyqEL4W98VyAD6EkqVFN/W/gtxDmiAiWN8MoFHR6pDC m3YBTF1nfULGk5Egwj35L9vk5qFd5LX30Do/SMD4vY6L1pDaGll/PGhAi84O8BSZ iNcG66Xf+61plUXHffxc63pwYFw956HwHTRyGBG4JiBSXyeM7046pv45UmUUEUYg tAR2YqDIxd82w/ppl0jQPUl62VIppL1/VK7JD41qNLVVmfiWLcYzadq7HytgtQUF KP7pNG3awcNIkA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:02:12 2025 by rpki-client