This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json) Hash identifier: Ub9MoKHZDSM9jSDLv0xtB3XMmrq+ZCG5qYBMNNB4zuI= Subject key identifier: 4B:44:26:9B:72:2E:9D:7F:13:E0:15:F0:D7:5C:D2:A7:76:05:98:79 Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06 Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206 Certificate serial: 019B717DCA0C482BB7A1E1291C5F1421F5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft Manifest number: 17A8 Signing time: Tue 30 Dec 2025 23:00:27 +0000 Manifest this update: Tue 30 Dec 2025 23:00:27 +0000 Manifest next update: Wed 31 Dec 2025 23:00:27 +0000 Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: AZd0Sqi2JZlf0owm5sehReDGXmkKKthvDLdKs/IzMbI=) 2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=) 3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:ca:0c:48:2b:b7:a1:e1:29:1c:5f:14:21:f5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206 Validity Not Before: Dec 30 23:00:27 2025 GMT Not After : Dec 31 23:00:27 2025 GMT Subject: CN=4b44269b722e9d7f13e015f0d75cd2a776059879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:d8:1c:db:5e:8b:99:db:65:c3:fd:02:6b: 49:e7:ad:34:a1:38:8c:6f:18:82:9b:6a:36:61:78: eb:f7:81:19:85:44:01:5e:7e:cd:c1:fb:e2:ff:fe: bf:af:43:2c:19:50:b5:74:9d:81:7c:a8:bb:da:46: bf:06:5e:80:99:ac:6c:0c:14:89:75:c8:62:6d:16: 88:4a:34:ce:96:96:85:9a:f1:39:23:6a:f9:d4:c1: 20:22:09:bd:bf:ac:57:74:6b:3d:d7:56:b3:b3:6d: 9c:3c:8d:e0:30:e7:60:b2:ef:b8:2e:ef:fb:be:ba: b0:f5:1b:b0:21:59:56:37:af:eb:52:3a:3d:92:d6: 48:5d:65:41:fb:d5:46:cc:c2:ce:02:91:be:eb:13: fa:d2:ca:91:23:b9:2b:e5:ce:05:21:3e:a6:b5:38: 97:18:b7:44:cf:1a:53:19:d5:61:8d:0e:04:5a:8c: e4:19:0f:03:17:8e:63:37:c9:b8:9d:2d:77:44:38: 80:52:8e:15:79:ff:36:28:3c:a0:59:c6:c0:1a:f6: e0:ec:e7:67:a2:7d:2f:f9:e6:da:78:71:f1:2c:de: 94:58:fe:93:42:85:7c:94:ed:a1:0f:07:90:4d:a4: 98:f0:b3:8c:25:17:fb:14:f8:52:af:dc:8c:19:c2: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:26:9B:72:2E:9D:7F:13:E0:15:F0:D7:5C:D2:A7:76:05:98:79 X509v3 Authority Key Identifier: keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:32:d7:b3:57:89:08:cb:fb:c8:2e:2f:f8:4e:c9:dd:c7: 67:3f:9f:9d:4c:a5:aa:a0:29:a8:50:c3:02:4c:52:e1:70:63: 66:cd:61:19:b3:33:0d:95:0d:36:91:75:65:98:59:7c:3b:d2: 9f:33:f1:1a:3c:c2:3f:1d:38:ab:83:d3:b7:22:ef:68:bf:2e: 4d:1b:49:e7:9c:72:96:07:74:2b:17:42:4c:f9:a5:3e:19:85: 99:66:e4:05:9a:6d:a7:8d:f2:4b:d3:bb:82:38:39:48:00:7d: af:c6:ad:5c:65:8c:f1:11:21:1e:ed:43:d5:6a:db:34:3f:f8: c2:74:52:42:8b:39:86:b6:e3:ed:7f:57:4d:7a:e7:76:e7:eb: 10:a5:d6:f6:21:20:b1:53:8d:a5:f6:2c:84:87:2a:70:0e:6e: 1c:9b:cf:d3:8e:0e:63:61:99:0b:cf:c3:b8:fc:59:1e:f0:9c: 13:93:49:ae:99:80:12:00:e3:8f:a3:54:70:64:cf:1f:db:7e: 92:f0:3b:48:7f:5b:4c:35:4d:73:8b:0b:99:2c:d7:1e:52:73: ea:62:9f:0b:bd:37:c7:1a:62:f9:a0:1f:64:d5:8f:3e:3a:e8: e3:98:81:9a:f3:fd:54:8f:31:59:c1:4a:c5:15:ed:39:1c:a9: b4:7a:ce:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfcoMSCu3oeEpHF8UIfX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1M2QwNGU3MmJiMjQ5Yzc5ZWIxMTY4Y2YxZDQzYTNjYTU0 OGMyMDYwHhcNMjUxMjMwMjMwMDI3WhcNMjUxMjMxMjMwMDI3WjAzMTEwLwYDVQQD Eyg0YjQ0MjY5YjcyMmU5ZDdmMTNlMDE1ZjBkNzVjZDJhNzc2MDU5ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHrYHNtei5nbZcP9AmtJ5600oTiM bxiCm2o2YXjr94EZhUQBXn7Nwfvi//6/r0MsGVC1dJ2BfKi72ka/Bl6AmaxsDBSJ dchibRaISjTOlpaFmvE5I2r51MEgIgm9v6xXdGs911azs22cPI3gMOdgsu+4Lu/7 vrqw9RuwIVlWN6/rUjo9ktZIXWVB+9VGzMLOApG+6xP60sqRI7kr5c4FIT6mtTiX GLdEzxpTGdVhjQ4EWozkGQ8DF45jN8m4nS13RDiAUo4Vef82KDygWcbAGvbg7Odn on0v+ebaeHHxLN6UWP6TQoV8lO2hDweQTaSY8LOMJRf7FPhSr9yMGcI5qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtEJptyLp1/E+AV8Ndc0qd2BZh5MB8GA1UdIwQY MBaAFAU9BOcrsknHnrEWjPHUOjylSMIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjIt MmE4MTNkYmY0NTgyLzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjItMmE4MTNkYmY0NTgy LzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYUy17NX iQjL+8guL/hOyd3HZz+fnUylqqApqFDDAkxS4XBjZs1hGbMzDZUNNpF1ZZhZfDvS nzPxGjzCPx04q4PTtyLvaL8uTRtJ55xylgd0KxdCTPmlPhmFmWbkBZptp43yS9O7 gjg5SAB9r8atXGWM8REhHu1D1WrbND/4wnRSQos5hrbj7X9XTXrndufrEKXW9iEg sVONpfYshIcqcA5uHJvP044OY2GZC8/DuPxZHvCcE5NJrpmAEgDjj6NUcGTPH9t+ kvA7SH9bTDVNc4sLmSzXHlJz6mKfC703xxpi+aAfZNWPPjro45iBmvP9VI8xWcFK xRXtORyptHrOSw== -----END CERTIFICATE-----Generated at Wed Dec 31 00:23:15 2025 by rpki-client