This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json) Hash identifier: y+DNo3YHwj1UMFwt8+LrAvlGcsJlNYBUHtlwSJWvVyQ= Subject key identifier: EA:A5:AB:D3:A7:D9:A6:5C:91:15:57:A1:C0:72:46:A4:92:93:AD:A2 Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011 Certificate serial: 019B47A6AEDAAAE58F563E8B9228712AFE6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 20:01:04 +0000 Manifest this update: Mon 22 Dec 2025 20:01:04 +0000 Manifest next update: Tue 23 Dec 2025 20:01:04 +0000 Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: Zd++JqHbH0/5I09AVU8mCXAl3o8S1qARm3Ov4p+E3tM=) 2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:ae:da:aa:e5:8f:56:3e:8b:92:28:71:2a:fe:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011 Validity Not Before: Dec 22 20:01:04 2025 GMT Not After : Dec 23 20:01:04 2025 GMT Subject: CN=eaa5abd3a7d9a65c911557a1c07246a49293ada2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:3b:a5:7d:6f:26:9d:83:77:30:20:90:50: 85:2c:c4:72:75:47:e3:0b:eb:97:04:ae:0a:c5:4c: 59:4a:39:5a:9b:30:8c:a4:86:b5:15:2c:a4:e9:a2: 55:9d:cc:6d:ee:22:d9:43:38:1c:6f:d0:10:83:82: 2e:d5:df:7a:38:b5:db:f0:b1:1d:41:92:7b:4a:bb: 6d:1d:42:7d:94:bf:c5:f3:06:4a:68:96:cb:9c:3a: 73:13:8d:d1:0d:25:5e:8b:79:6c:d4:ac:51:e6:50: 3a:b7:eb:b3:ad:d5:11:64:dd:15:74:d2:a9:af:4e: 97:06:3d:cc:92:2a:b7:5c:ea:8a:27:d0:95:be:0b: 4d:24:66:d7:ef:49:6e:26:db:d0:81:57:a7:a2:37: 75:60:38:31:f7:24:3a:07:48:41:9f:7a:b8:6f:f3: 65:66:d0:ec:71:6b:7b:da:15:06:97:11:37:c1:fb: f5:e9:05:d6:b7:a0:18:7f:b5:43:91:59:b5:9c:15: 07:4b:ef:53:f6:24:04:fa:50:16:b4:99:27:72:2d: 85:4f:13:c4:bd:0f:6d:a1:ec:8d:02:55:c7:88:6e: 4d:a6:73:f2:d3:e8:b8:0d:d2:01:d2:b0:87:58:cc: 5a:79:9c:48:aa:58:e1:83:de:d5:ad:24:e9:66:f3: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:AB:D3:A7:D9:A6:5C:91:15:57:A1:C0:72:46:A4:92:93:AD:A2 X509v3 Authority Key Identifier: keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:41:d1:b7:bb:cd:09:bd:38:6e:a4:07:db:9b:bd:82:6e:e8: ab:85:ed:6b:ff:95:76:f7:0e:f5:47:fd:58:5a:a7:b3:52:f0: 24:b0:06:f0:b4:d2:04:53:57:00:c9:8e:55:a7:fa:5f:27:a6: 4c:3e:ba:0a:3b:b6:b5:4e:3b:87:97:45:cf:d4:6a:d3:26:1f: 8a:07:50:03:d2:e8:99:6d:34:58:6c:ef:00:15:2a:0b:eb:e7: 3f:4b:6e:cd:ed:07:5f:40:06:7e:49:cd:2c:45:38:66:5b:fe: 57:52:7c:ab:ee:f2:a7:1e:c3:fc:a6:d5:bf:98:b1:90:f7:bb: d1:10:30:71:97:a5:3a:41:12:5f:ac:f9:2b:a0:34:e8:7b:d6: c8:2c:2f:b1:26:de:2a:81:cb:03:20:5b:e4:b1:9e:08:8d:5c: 0c:9b:a3:d8:b3:ba:32:e3:f1:d5:27:92:f7:15:d0:20:a3:24: 0f:16:8f:2f:7e:fc:38:17:e5:a0:00:ea:48:32:51:61:a1:22: 60:fb:fb:3a:33:c7:58:38:5e:84:e2:54:1d:61:db:dd:e1:e2: 97:ec:9f:58:7d:04:c9:e2:5b:d4:bb:f3:a0:05:4a:19:04:f2: 44:21:f7:58:76:03:b3:68:7b:8f:29:e2:b1:9b:6b:cf:c8:eb: d4:ab:e9:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpq7aquWPVj6LkihxKv5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGVmYTEzMTFmNTNmNmM0NDE0NjNkYThmYWIzNDAzYWQ2 ODgwMTEwHhcNMjUxMjIyMjAwMTA0WhcNMjUxMjIzMjAwMTA0WjAzMTEwLwYDVQQD EyhlYWE1YWJkM2E3ZDlhNjVjOTExNTU3YTFjMDcyNDZhNDkyOTNhZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmk7pX1vJp2DdzAgkFCFLMRydUfj C+uXBK4KxUxZSjlamzCMpIa1FSyk6aJVncxt7iLZQzgcb9AQg4Iu1d96OLXb8LEd QZJ7SrttHUJ9lL/F8wZKaJbLnDpzE43RDSVei3ls1KxR5lA6t+uzrdURZN0VdNKp r06XBj3Mkiq3XOqKJ9CVvgtNJGbX70luJtvQgVenojd1YDgx9yQ6B0hBn3q4b/Nl ZtDscWt72hUGlxE3wfv16QXWt6AYf7VDkVm1nBUHS+9T9iQE+lAWtJknci2FTxPE vQ9toeyNAlXHiG5NpnPy0+i4DdIB0rCHWMxaeZxIqljhg97VrSTpZvMvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqlq9On2aZckRVXocByRqSSk62iMB8GA1UdIwQY MBaAFAbe+hMR9T9sRBRj2o+rNAOtaIARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYt NGY4OTEzYTkxNWQzLzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYtNGY4OTEzYTkxNWQz LzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUHRt7vN Cb04bqQH25u9gm7oq4Xta/+VdvcO9Uf9WFqns1LwJLAG8LTSBFNXAMmOVaf6Xyem TD66Cju2tU47h5dFz9Rq0yYfigdQA9LomW00WGzvABUqC+vnP0tuze0HX0AGfknN LEU4Zlv+V1J8q+7ypx7D/KbVv5ixkPe70RAwcZelOkESX6z5K6A06HvWyCwvsSbe KoHLAyBb5LGeCI1cDJuj2LO6MuPx1SeS9xXQIKMkDxaPL378OBfloADqSDJRYaEi YPv7OjPHWDhehOJUHWHb3eHil+yfWH0EyeJb1LvzoAVKGQTyRCH3WHYDs2h7jyni sZtrz8jr1Kvpjw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:47 2025 by rpki-client