This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft File: btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json) Hash identifier: AC5GE8R2iypnqVxLiwYv0T3E1oUIPQkhx8UmPZSbUEU= Subject key identifier: D6:8C:3B:75:AB:ED:4E:96:C6:53:98:CA:CF:F7:A7:8E:38:93:09:D2 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B2BC23CF5F2879AF592B6F78FBE093F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 10:01:48 +0000 Manifest this update: Wed 17 Dec 2025 10:01:48 +0000 Manifest next update: Thu 18 Dec 2025 10:01:48 +0000 Files and hashes: 1: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=) 2: ExZ6Kd56WDH-AGgQHXr1yRwsFSQ.roa (hash: kL39jLOnqVVifO/hGcRPYe9QCu6ofg6F1ZfvObXNrbI=) 3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=) 4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=) 5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: zF37IHZBm6xZ+rlwBZFxp2qzKy8ia6N0N8nKHJSeSEk=) 6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=) 7: tj2j33BZ5qBMziKxwEMdoOmheMU.roa (hash: Ls+1dw94wulLbg28FKbSGPsIVW3+yqV/GiJSIU5Zocs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:3c:f5:f2:87:9a:f5:92:b6:f7:8f:be:09:3f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Dec 17 10:01:48 2025 GMT Not After : Dec 18 10:01:48 2025 GMT Subject: CN=d68c3b75abed4e96c65398cacff7a78e389309d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:cd:6f:3c:fe:4c:fc:32:3f:b0:eb:9e:8b: 28:21:7c:29:01:97:e8:78:b7:3a:76:d1:ba:26:92: b6:ef:f1:15:82:b7:5e:0c:6e:46:91:77:ae:8e:21: a5:d4:50:da:0a:54:09:b9:8e:ea:6e:58:31:06:ed: 97:9b:5b:b1:70:ba:a2:e1:0f:b9:7c:a9:5e:c8:df: 89:2a:c1:60:1d:63:93:05:06:7d:c4:a3:fc:0f:86: ec:77:20:8d:56:2f:3c:e1:31:71:35:88:6e:8a:19: 2b:98:d2:41:a0:5d:66:9e:59:b9:61:0a:9d:43:81: d1:b3:4d:c3:51:7e:9d:04:0c:e5:4c:c3:5c:5e:4a: da:7f:31:d8:13:f3:e8:52:28:0b:d0:a0:2d:41:1f: 83:7d:da:c2:0d:a2:74:d3:05:a7:1b:d6:ef:49:ac: bd:dd:26:51:b7:d1:63:8c:fa:bb:12:ad:ea:09:bc: 13:0a:64:9a:8c:a0:bf:fa:58:6d:d5:08:e2:9a:a8: f3:5c:f7:6b:36:36:97:0f:97:80:e4:6c:0c:dc:be: f2:b6:75:c9:56:09:6f:a2:74:51:cd:84:93:21:cf: 16:23:a8:7d:95:14:4a:14:29:e8:35:42:cf:f1:57: f2:95:b5:67:72:23:4c:f2:43:d2:e2:a1:4a:cb:5e: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:3B:75:AB:ED:4E:96:C6:53:98:CA:CF:F7:A7:8E:38:93:09:D2 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:85:e9:93:d2:cf:13:17:53:0e:21:c0:a6:79:70:55:97:46: c9:aa:f3:09:39:ae:7b:6c:58:b6:75:1d:c8:aa:75:e3:46:38: 5c:4b:b0:d3:92:44:fc:c1:41:af:2c:65:14:3d:c3:98:f2:45: db:09:23:10:ed:f3:c9:99:96:b4:10:55:16:45:19:83:f8:95: 5d:8c:b0:ba:93:d1:dd:42:6f:65:00:ed:9e:24:6a:b0:48:53: 87:dc:3f:0c:26:3a:e6:9b:73:c6:8a:06:60:e7:d9:d5:e2:72: f0:0d:70:00:72:2d:2f:d5:d9:92:9d:23:4e:16:34:07:1b:f4: 83:d7:fc:31:bb:af:83:a5:cf:f5:1e:a3:d8:ec:8e:8d:d0:64: 4c:23:64:1b:82:23:15:be:35:2a:28:0f:df:ad:44:f4:48:dc: a7:39:8c:0b:13:c1:db:42:b7:a9:8a:22:7f:19:d6:a2:a2:64: 12:03:1f:2d:9f:70:6e:b5:47:f8:2f:95:fe:d8:73:f4:42:18: 69:48:d6:16:8f:80:01:e3:90:19:06:69:8a:37:90:e5:61:ef: a9:65:c6:d6:72:31:98:27:0d:2c:37:6a:7e:ce:59:35:e4:da: 95:e5:1f:f9:6c:d1:63:d4:5a:de:a6:e9:69:4e:34:2d:e3:29: fe:fc:f8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjz18oea9ZK294++CT+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjUxMjE3MTAwMTQ4WhcNMjUxMjE4MTAwMTQ4WjAzMTEwLwYDVQQD EyhkNjhjM2I3NWFiZWQ0ZTk2YzY1Mzk4Y2FjZmY3YTc4ZTM4OTMwOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjfNbzz+TPwyP7DrnosoIXwpAZfo eLc6dtG6JpK27/EVgrdeDG5GkXeujiGl1FDaClQJuY7qblgxBu2Xm1uxcLqi4Q+5 fKleyN+JKsFgHWOTBQZ9xKP8D4bsdyCNVi884TFxNYhuihkrmNJBoF1mnlm5YQqd Q4HRs03DUX6dBAzlTMNcXkrafzHYE/PoUigL0KAtQR+DfdrCDaJ00wWnG9bvSay9 3SZRt9FjjPq7Eq3qCbwTCmSajKC/+lht1QjimqjzXPdrNjaXD5eA5GwM3L7ytnXJ VglvonRRzYSTIc8WI6h9lRRKFCnoNULP8VfylbVnciNM8kPS4qFKy143twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaMO3Wr7U6WxlOYys/3p444kwnSMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYXpk9LP ExdTDiHApnlwVZdGyarzCTmue2xYtnUdyKp140Y4XEuw05JE/MFBryxlFD3DmPJF 2wkjEO3zyZmWtBBVFkUZg/iVXYywupPR3UJvZQDtniRqsEhTh9w/DCY65ptzxooG YOfZ1eJy8A1wAHItL9XZkp0jThY0Bxv0g9f8Mbuvg6XP9R6j2OyOjdBkTCNkG4Ij Fb41KigP361E9EjcpzmMCxPB20K3qYoifxnWoqJkEgMfLZ9wbrVH+C+V/thz9EIY aUjWFo+AAeOQGQZpijeQ5WHvqWXG1nIxmCcNLDdqfs5ZNeTaleUf+WzRY9Ra3qbp aU40LeMp/vz43w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:30 2025 by rpki-client