This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json) Hash identifier: iYmeWv0BvmmAki0M1CQDn9rqWqhN1RR/2+XoOEXG8Fg= Subject key identifier: D1:A8:03:91:1C:40:27:60:0F:35:87:3F:75:7F:A8:37:34:A2:1B:92 Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Certificate serial: 019B5C3FF6DB56AF9340FD025569C1527FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft Manifest number: 16E8 Signing time: Fri 26 Dec 2025 20:00:54 +0000 Manifest this update: Fri 26 Dec 2025 20:00:54 +0000 Manifest next update: Sat 27 Dec 2025 20:00:54 +0000 Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: nOIwU2UkJyP/pflK78hM6kIDWvfx8GPImw11ZJT13+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:f6:db:56:af:93:40:fd:02:55:69:c1:52:7f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Validity Not Before: Dec 26 20:00:54 2025 GMT Not After : Dec 27 20:00:54 2025 GMT Subject: CN=d1a803911c4027600f35873f757fa83734a21b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:de:a6:01:1c:47:a2:13:0c:fe:9f:cd:c7: 2a:c0:5b:b7:19:1f:f3:57:14:a8:bc:d1:48:da:05: 03:62:70:69:ae:32:d8:e5:3c:0e:aa:37:c9:03:23: 1a:fd:62:67:cf:bc:57:fb:14:4d:50:2c:0f:cc:e7: 4a:b5:c4:25:c9:a0:0c:97:0b:87:4d:5a:53:b4:f6: ca:b2:d2:38:99:d1:d5:f3:4e:42:21:81:c3:16:f8: 7a:02:04:03:17:c6:14:22:73:ce:69:01:17:ce:14: dd:4c:46:df:98:ae:0c:e3:1b:4a:44:83:74:33:16: cf:fb:2f:f5:7e:bd:d0:47:de:d5:78:99:f1:26:26: 39:35:50:b8:2c:78:49:d1:35:85:52:11:f9:1c:f8: c7:e3:40:d0:c7:df:1e:8f:61:62:d5:fe:22:0c:42: 13:be:6b:95:fd:74:29:83:b3:a2:6e:29:21:62:c6: 23:5e:fc:83:2a:bc:62:10:42:91:c7:7a:60:d7:d2: 41:6e:99:5d:e8:33:41:8f:59:8e:45:22:81:87:4f: 97:cc:3f:ca:b6:bf:ef:db:95:e7:49:1a:37:af:c6: 50:e3:be:87:2b:33:ca:06:1b:37:87:fc:59:6c:e7: 91:b1:f6:f0:18:44:2b:1f:32:78:4c:7d:b7:f2:bd: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:03:91:1C:40:27:60:0F:35:87:3F:75:7F:A8:37:34:A2:1B:92 X509v3 Authority Key Identifier: keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bc:4b:57:c6:c2:16:61:4c:42:5f:2a:5d:b0:da:93:12:7f: a1:0e:ef:25:cd:4a:8d:25:af:50:09:38:76:7a:e5:4a:bd:69: 06:e8:ea:9f:b9:5e:0e:73:12:7d:13:1b:d8:29:57:21:f0:2e: 19:07:15:5f:4c:e1:76:90:73:ca:46:bd:d6:e2:56:af:52:87: a3:4f:30:59:76:bf:51:89:7d:0c:32:fb:b0:b1:91:6c:3e:2b: a7:10:ae:62:ac:58:65:06:90:13:43:22:ac:b7:43:a6:d8:53: c6:61:69:09:c9:55:aa:a5:71:0b:a3:05:6d:0a:af:51:77:5e: 05:44:e5:ee:f3:17:8f:6f:e4:ed:42:ef:69:86:d0:1d:f4:c8: ee:45:38:be:24:85:a2:3f:e7:91:94:90:ce:71:40:56:2c:a5: 2a:55:0d:16:fb:52:a0:5e:4f:bf:83:bb:46:4e:23:af:13:63: c5:6e:d1:9c:1c:f7:b0:a0:c6:12:67:ac:dc:9c:4c:4b:ec:46: e8:11:07:62:d4:6f:1c:7f:7f:17:15:f2:a3:e7:91:85:ef:f1: 1c:7d:56:1c:da:2c:73:26:e7:db:36:03:30:df:22:20:0e:7b: 43:b6:11:ff:84:cf:e4:85:ae:c2:dc:28:90:ff:22:ab:35:1c: 94:19:9b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP/bbVq+TQP0CVWnBUn/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2 OWE0NWYwHhcNMjUxMjI2MjAwMDU0WhcNMjUxMjI3MjAwMDU0WjAzMTEwLwYDVQQD EyhkMWE4MDM5MTFjNDAyNzYwMGYzNTg3M2Y3NTdmYTgzNzM0YTIxYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs23epgEcR6ITDP6fzccqwFu3GR/z VxSovNFI2gUDYnBprjLY5TwOqjfJAyMa/WJnz7xX+xRNUCwPzOdKtcQlyaAMlwuH TVpTtPbKstI4mdHV805CIYHDFvh6AgQDF8YUInPOaQEXzhTdTEbfmK4M4xtKRIN0 MxbP+y/1fr3QR97VeJnxJiY5NVC4LHhJ0TWFUhH5HPjH40DQx98ej2Fi1f4iDEIT vmuV/XQpg7OibikhYsYjXvyDKrxiEEKRx3pg19JBbpld6DNBj1mORSKBh0+XzD/K tr/v25XnSRo3r8ZQ476HKzPKBhs3h/xZbOeRsfbwGEQrHzJ4TH238r16BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGoA5EcQCdgDzWHP3V/qDc0ohuSMB8GA1UdIwQY MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrxLV8bC FmFMQl8qXbDakxJ/oQ7vJc1KjSWvUAk4dnrlSr1pBujqn7leDnMSfRMb2ClXIfAu GQcVX0zhdpBzyka91uJWr1KHo08wWXa/UYl9DDL7sLGRbD4rpxCuYqxYZQaQE0Mi rLdDpthTxmFpCclVqqVxC6MFbQqvUXdeBUTl7vMXj2/k7ULvaYbQHfTI7kU4viSF oj/nkZSQznFAViylKlUNFvtSoF5Pv4O7Rk4jrxNjxW7RnBz3sKDGEmes3JxMS+xG 6BEHYtRvHH9/FxXyo+eRhe/xHH1WHNoscybn2zYDMN8iIA57Q7YR/4TP5IWuwtwo kP8iqzUclBmbSg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:40 2025 by rpki-client