This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json) Hash identifier: doskmmkEpgwSemoSd794+z2+OO1WQ7DJfhXrze2Lyqo= Subject key identifier: 39:9C:F8:10:4B:4C:FC:2C:16:8A:F1:30:4E:53:C8:48:16:AB:66:88 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B3C10854E0C66D91647679DB446847612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:01:14 +0000 Manifest this update: Sat 20 Dec 2025 14:01:14 +0000 Manifest next update: Sun 21 Dec 2025 14:01:14 +0000 Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=) 2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=) 3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=) 4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: nw/QiGnqkSqoTgCENUxd40SEiqjEtqDFaD/VIEGECNA=) 5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=) 6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:85:4e:0c:66:d9:16:47:67:9d:b4:46:84:76:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Dec 20 14:01:14 2025 GMT Not After : Dec 21 14:01:14 2025 GMT Subject: CN=399cf8104b4cfc2c168af1304e53c84816ab6688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4d:3c:fe:03:94:d8:6b:30:2f:97:65:7a:0e: a0:15:02:1f:b7:6c:f5:0c:61:46:87:17:02:71:cd: b0:f5:88:83:0f:4f:71:a7:fa:32:3e:0b:58:8c:ff: 9d:df:be:4e:14:12:a3:49:ab:3e:25:e9:da:8f:b1: 9b:d3:7c:aa:83:3c:0e:e8:2d:ab:07:14:32:f5:eb: 98:6e:63:05:b5:ad:fb:48:c0:d4:14:32:5e:7d:6b: e5:42:ba:26:df:b3:b0:67:0f:cd:13:69:08:37:db: 52:b4:8a:08:70:d1:2c:25:ef:aa:81:40:73:db:62: c9:f5:38:c2:d5:d7:da:f1:1d:1e:b1:3c:92:c7:49: be:ef:e6:15:ed:ea:bb:9a:58:43:0f:1e:72:0d:5f: 66:77:fd:86:5f:df:98:d8:f4:17:0c:18:86:56:b2: 52:fc:f6:54:89:1b:4f:47:bc:fe:52:84:92:70:a6: cd:82:14:0b:d5:4f:f0:3b:78:f2:d3:7b:2e:17:3c: db:51:74:8a:d3:b1:ed:54:6c:23:05:66:d4:24:8f: 39:96:4f:a9:1a:d0:b0:eb:f5:8d:7e:8f:0c:cb:93: 31:6b:23:86:5b:67:88:c8:f3:e0:8e:96:2b:b7:2b: 4e:16:8b:ee:7c:90:b6:9e:f4:5e:e7:9f:53:56:cf: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:F8:10:4B:4C:FC:2C:16:8A:F1:30:4E:53:C8:48:16:AB:66:88 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:36:33:05:ff:82:2b:79:6c:3b:90:aa:b8:0c:cd:59:9b:6b: ff:ba:de:b1:83:e6:35:03:54:d1:ac:72:b7:ae:6f:b3:30:8a: 00:8b:fc:bd:b2:7c:1e:ff:7b:d3:b7:2c:63:d5:0b:52:80:ec: bf:7d:46:88:8d:9f:14:0c:7a:6f:ef:cc:d7:21:e3:81:b0:77: 08:7d:1b:c5:62:a6:37:eb:5c:fd:a8:3a:7c:74:f8:a2:5b:18: 93:dd:0f:20:b6:c8:21:87:8c:2a:bd:4f:b3:12:a2:b5:7c:45: 40:0d:b1:5d:39:5f:2e:55:fd:11:51:46:92:c9:b3:39:3a:4b: 60:6e:25:d8:f1:29:95:f4:7b:8a:65:9a:91:88:00:13:52:eb: 94:65:04:f4:60:9c:06:3f:24:e4:93:1f:09:c2:27:fa:50:e7: 24:9a:b8:b3:ab:48:5c:2b:cd:ca:3c:0c:84:c1:f6:17:34:f1: d2:83:37:2a:08:0a:bf:44:2b:f0:58:ed:8f:a8:81:ba:a7:d2: 45:2b:da:0b:d0:47:6e:19:f7:1d:96:67:24:0b:9e:7e:67:d3: 33:1c:97:5b:41:c0:36:c8:18:95:c2:77:46:ee:65:03:d8:f1: fd:a7:72:11:1e:34:a8:e6:02:b1:3d:8e:fe:28:33:38:6e:90: b2:74:6a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIVODGbZFkdnnbRGhHYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjUxMjIwMTQwMTE0WhcNMjUxMjIxMTQwMTE0WjAzMTEwLwYDVQQD EygzOTljZjgxMDRiNGNmYzJjMTY4YWYxMzA0ZTUzYzg0ODE2YWI2Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6008/gOU2GswL5dleg6gFQIft2z1 DGFGhxcCcc2w9YiDD09xp/oyPgtYjP+d375OFBKjSas+Jenaj7Gb03yqgzwO6C2r BxQy9euYbmMFta37SMDUFDJefWvlQrom37OwZw/NE2kIN9tStIoIcNEsJe+qgUBz 22LJ9TjC1dfa8R0esTySx0m+7+YV7eq7mlhDDx5yDV9md/2GX9+Y2PQXDBiGVrJS /PZUiRtPR7z+UoSScKbNghQL1U/wO3jy03suFzzbUXSK07HtVGwjBWbUJI85lk+p GtCw6/WNfo8My5MxayOGW2eIyPPgjpYrtytOFovufJC2nvRe559TVs+vfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmc+BBLTPwsForxME5TyEgWq2aIMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTYzBf+C K3lsO5CquAzNWZtr/7resYPmNQNU0axyt65vszCKAIv8vbJ8Hv9707csY9ULUoDs v31GiI2fFAx6b+/M1yHjgbB3CH0bxWKmN+tc/ag6fHT4olsYk90PILbIIYeMKr1P sxKitXxFQA2xXTlfLlX9EVFGksmzOTpLYG4l2PEplfR7imWakYgAE1LrlGUE9GCc Bj8k5JMfCcIn+lDnJJq4s6tIXCvNyjwMhMH2FzTx0oM3KggKv0Qr8Fjtj6iBuqfS RSvaC9BHbhn3HZZnJAuefmfTMxyXW0HANsgYlcJ3Ru5lA9jx/adyER40qOYCsT2O /igzOG6QsnRqkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:48:18 2025 by rpki-client